Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json)
Hash identifier: VdMY0INzgZqbOdRy3U+uX+qzaU5SsLm2S2rRPVSKb+c=
Subject key identifier: 1D:46:6E:6D:B5:AC:94:0E:84:60:DF:8B:35:24:AF:63:AC:7F:43:71
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 0911
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
Manifest number: 08D1
Signing time: Thu 30 Jan 2025 20:37:13 +0000
Manifest this update: Thu 30 Jan 2025 20:37:12 +0000
Manifest next update: Thu 06 Feb 2025 20:37:12 +0000
Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: zCZVqak4aFV21hMHO6D5K6/G9V3Dnz1HSl/z+dMvgEU=)
2: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: Vhh+YHEkOAm0lTC6Mvlr9fVSy/b7j5HS4EmA8GcE6KE=)
3: 2857F2E4111A11EF86332415C4F9AE02.roa (hash: d8stm93qiMJHuD7A7Kjf0EChjXZv6Yi1Blkv29w2AO0=)
4: E3A0B86070F611EFA4CF2731C4F9AE02.roa (hash: IiCELpz1lNWn/wDk8+lG4EPk1Fz80QLORn5i0grUOVk=)
5: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: TjvAc6jpZ9U97nYJG6DnvYohT4lBnpgp5Lc+Qvz205I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2321 (0x911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Jan 30 20:37:12 2025 GMT
Not After : Feb 6 20:37:12 2025 GMT
Subject: CN=679be2f8-c6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:ab:21:6f:3e:02:10:e4:63:8e:a3:a2:42:
5f:66:ad:b1:81:79:b5:29:4b:ed:04:80:e3:af:e1:
95:0b:40:bd:be:0f:ea:34:d7:91:b4:95:56:6e:84:
70:0f:3c:f8:30:ab:b7:ba:d6:d5:17:07:4d:18:84:
f8:e2:62:fc:10:80:36:f0:25:f6:ef:b4:ed:61:47:
8f:b8:d2:2a:d0:7c:2f:36:67:41:26:d3:ed:94:11:
d2:27:55:3e:21:9b:31:fd:20:69:d9:71:a6:2b:f6:
b4:9a:d8:67:9c:ff:95:8f:16:fe:89:c4:e0:4d:9f:
6b:4c:7a:c9:99:4d:20:31:f2:a7:4c:84:81:b3:96:
25:c2:cb:d9:21:1f:b7:51:8a:81:00:f8:48:a8:fe:
39:8d:b0:fa:d2:36:0e:50:b2:b7:ac:a7:6d:5d:3b:
bb:f7:4c:e4:a0:21:5c:de:76:b6:cd:aa:f0:32:04:
3a:cb:b2:ab:3f:6e:c3:b9:b8:39:85:8f:70:d5:81:
92:62:fe:e9:6e:01:a8:86:a4:9d:10:01:76:10:54:
6d:03:52:a5:ff:16:a5:ac:43:6b:2e:2f:31:ba:d0:
bf:a6:ab:e5:bd:b5:2e:e9:9d:83:44:a9:0b:15:9b:
65:f2:01:ca:fb:ae:8c:4c:bd:f9:ef:55:40:da:44:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:46:6E:6D:B5:AC:94:0E:84:60:DF:8B:35:24:AF:63:AC:7F:43:71
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:70:44:71:4f:3a:4e:1d:34:42:df:88:42:b5:67:62:8a:d0:
00:6e:49:79:1d:b5:50:3d:3b:be:6e:c9:b7:fc:b9:84:e3:fd:
65:dd:e9:54:b1:5b:a7:6b:84:18:06:de:f4:86:29:41:d8:7b:
82:f9:4f:5b:1a:9b:68:7d:59:40:00:31:18:24:0a:e9:c5:11:
6c:c2:21:f7:af:c1:d9:a1:cf:33:c6:42:e7:2f:3a:e5:d7:aa:
e7:ce:9e:d5:86:a0:20:54:aa:e0:9d:23:13:4e:16:21:18:da:
58:f9:91:c8:24:69:62:13:fb:00:bb:96:fa:b9:37:3b:8b:50:
77:42:84:ca:ff:c6:a6:be:36:a1:cb:a5:b5:69:70:a0:4d:fd:
46:4e:cc:3e:42:de:09:d7:aa:d8:f2:ee:9f:f7:2d:70:4b:dd:
87:57:5d:75:d8:c4:6b:b1:77:1b:0c:dc:af:48:c4:f8:b2:69:
fe:42:b9:44:80:24:3a:24:2b:0b:34:66:7e:94:0a:b9:a8:72:
8f:37:f0:87:24:89:65:5b:53:a0:ef:8c:32:b6:88:b6:be:aa:
db:23:f3:d3:ba:6d:5d:15:72:87:c3:21:e6:51:42:a1:23:67:
2b:99:9b:22:65:0c:35:d8:49:6e:6e:6f:a7:61:78:53:27:a5:
53:66:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:48 2025 by rpki-client