Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json)
Hash identifier: Wd3gX+hdV8AZ46fxlk3cV+QSPNBBvMq5zJwANhCvflE=
Subject key identifier: 76:FB:E3:17:95:13:76:C0:67:B7:B1:67:31:E0:9A:B8:41:7B:97:CB
Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Certificate serial: 06CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
Manifest number: 06AB
Signing time: Thu 30 Jan 2025 22:17:24 +0000
Manifest this update: Thu 30 Jan 2025 22:17:24 +0000
Manifest next update: Thu 06 Feb 2025 22:17:24 +0000
Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: xV3YeJ3zhVFiyaFya986SuDSZoj6TkzhEeM1niNb2eg=)
2: 96FC6944591111EEBFB2384AC4F9AE02.roa (hash: ax+xM3Q8UL+b4tURGtbo2gp+tcgS0j+5JXjNoSNoJus=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1743 (0x6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Validity
Not Before: Jan 30 22:17:24 2025 GMT
Not After : Feb 6 22:17:24 2025 GMT
Subject: CN=679bfa74-caa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ba:d9:9b:f9:38:85:e5:3f:63:48:b2:58:1a:
29:b9:8b:69:9b:84:99:98:6a:bb:80:ce:77:a4:ff:
69:6e:94:85:e1:62:43:b1:c0:74:77:ed:f4:a6:c6:
36:9e:2b:b1:56:7b:ea:62:71:d6:d7:7b:b2:d0:8d:
74:6e:d5:73:45:a6:6e:68:fa:93:b8:40:6f:44:ae:
bc:f7:e0:e5:35:9c:ca:09:70:a9:7e:76:e8:13:17:
f4:22:e8:77:d4:59:7d:d7:a0:09:a1:c6:5e:bc:68:
7b:7d:85:dc:b4:5e:6b:77:12:f8:35:ed:cd:6b:e9:
78:a9:98:58:97:eb:e3:47:6a:ea:18:fa:64:ef:ef:
dd:e5:67:69:73:a6:88:52:95:ac:e9:87:75:f7:02:
36:80:23:c9:cd:38:df:d5:c5:70:03:48:11:de:1d:
1b:b1:a0:0b:92:64:b7:3e:e3:f6:be:90:bd:e2:36:
37:de:d4:04:a5:bb:89:f2:df:53:0d:af:39:15:d1:
81:85:84:f5:cd:26:2d:bd:cb:7a:77:9e:1e:a3:1c:
d9:6f:f3:e5:43:80:2e:d7:24:55:13:46:39:0c:5e:
5e:7b:2e:42:df:31:bc:8f:b2:77:6a:1e:13:3d:d0:
48:0a:8c:c4:ec:4c:2c:bb:37:4d:5f:5b:06:2e:f0:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FB:E3:17:95:13:76:C0:67:B7:B1:67:31:E0:9A:B8:41:7B:97:CB
X509v3 Authority Key Identifier:
keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:da:4a:ac:2d:ee:28:7f:6d:5d:f7:5f:e3:f3:c9:30:e8:
eb:24:92:19:9f:3a:73:32:c5:b3:0d:39:bb:20:d2:19:3d:5d:
aa:47:d1:93:34:02:ae:54:38:f5:d7:8d:9c:ea:c4:02:e1:55:
12:2e:91:85:c6:0e:68:e6:44:79:a3:be:3b:41:c8:fc:b2:34:
ab:c6:b7:b6:db:85:99:05:f9:98:3a:a2:65:73:51:44:35:2a:
f8:56:9f:8d:12:56:0b:13:85:63:5b:3b:b4:d1:51:fd:e2:99:
f0:a8:f8:61:be:14:9a:6b:0a:0b:a8:3a:ba:94:50:3e:4f:e3:
84:a9:31:57:63:ae:76:82:dd:2c:86:43:6d:b1:47:90:0b:3e:
f5:a8:14:ea:6f:be:65:2c:86:36:f5:7e:30:ae:d8:ce:5e:a2:
04:34:0b:63:e7:d2:45:fd:9d:97:a4:21:da:7d:ad:c1:9f:98:
e8:16:b8:78:06:7f:67:7d:7a:f4:98:02:11:0f:67:53:45:6d:
f7:4e:63:0f:e6:44:80:96:72:35:d1:4e:38:e1:df:50:91:41:
e6:49:86:3f:0c:da:f1:d5:19:2e:15:de:9d:2b:60:3d:b8:35:
73:76:b3:46:79:33:a3:96:d4:82:c6:96:4b:5b:e9:18:68:67:
50:23:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:07 2025 by rpki-client