Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft
File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json)
Hash identifier: UIe+CdTjFtzM6UO1ANdkd9ht2jPNHTFNDYd9i67IR2M=
Subject key identifier: 45:59:1F:FF:28:CD:16:86:A4:28:04:E8:03:F4:FF:BA:65:99:45:A4
Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A
Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft
Manifest number: 3F
Signing time: Fri 31 Jan 2025 06:31:22 +0000
Manifest this update: Fri 31 Jan 2025 06:31:22 +0000
Manifest next update: Fri 07 Feb 2025 06:31:22 +0000
Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: C0JqALbvzhmuhUDXh1MmRKv/YE+EiuCisZjD/9tnKmA=)
2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: 3hnmn/EG7rhYM2a7/Cnm16lA4qC355sf3kWBw8CmIQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A
Validity
Not Before: Jan 31 06:31:22 2025 GMT
Not After : Feb 7 06:31:22 2025 GMT
Subject: CN=679c6e3a-9630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:c4:71:bb:85:6e:1d:89:82:d2:c8:0e:0f:
73:99:e9:5b:a5:52:48:64:32:2a:07:9e:a3:69:d0:
76:b6:66:c9:cb:d7:a6:15:80:d1:35:79:c1:5e:a2:
83:8d:1f:24:b6:f6:1c:5a:c5:12:6f:ed:f0:6f:79:
c1:dc:9f:24:91:e6:bd:b3:00:90:1b:22:af:e8:73:
32:de:3d:4e:ae:1f:a0:ab:b5:40:8c:b8:c1:8e:e7:
71:b0:54:34:1b:2a:aa:d7:ef:5d:10:15:30:5d:ad:
ca:a4:58:09:f0:98:7b:6c:2b:1b:43:d2:62:15:54:
02:04:65:0b:96:43:d4:b9:3e:82:d6:fb:0e:b4:8f:
41:5e:ba:d8:64:6f:f4:ba:02:c7:3c:d7:41:42:11:
45:1d:55:a7:5a:b3:df:c2:97:ce:3f:90:de:0e:e1:
6d:95:4d:9c:a5:be:2d:c2:e2:9e:ab:38:f1:52:0e:
76:b7:38:48:99:df:ef:c2:f9:a2:ba:4c:d3:bf:4e:
69:95:27:cc:c8:45:2c:ae:c1:1e:1b:bd:65:54:3c:
6a:1e:a8:fc:31:17:04:45:ae:c2:96:aa:ad:4b:99:
db:99:90:8e:38:20:31:f5:46:3d:6f:0c:df:f4:32:
d0:90:d7:18:40:ba:22:35:7e:92:22:ab:8c:b9:87:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:59:1F:FF:28:CD:16:86:A4:28:04:E8:03:F4:FF:BA:65:99:45:A4
X509v3 Authority Key Identifier:
keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9e:1c:c4:a4:40:e7:7b:bc:d3:56:b3:7b:85:9b:ad:c7:e0:
fc:69:79:d5:12:00:33:b6:7a:d0:47:ca:e6:6f:de:18:ee:a6:
0a:41:ed:f6:73:4a:81:1a:31:03:74:87:2c:86:96:fc:10:1a:
be:53:de:d8:31:97:99:de:b5:ec:9e:97:1a:18:a7:d3:a1:34:
30:ac:55:d8:8e:f2:29:98:a9:9e:12:d1:31:a5:d9:a1:a8:8a:
02:da:39:a3:04:3d:b7:19:a6:00:f3:10:0e:53:28:b0:3b:1a:
f4:6b:3f:50:36:84:5d:43:8e:a4:00:da:5e:b2:1d:aa:97:c0:
6b:e1:00:87:d3:18:1f:d8:38:51:4e:14:1e:a2:66:23:25:64:
9e:60:a8:a0:19:69:86:65:fd:4d:67:d0:2f:39:27:fe:91:d4:
20:2c:05:d5:94:35:d2:cb:c7:62:e1:da:26:bc:c3:8d:34:e5:
ed:6f:e8:d7:e5:d8:d6:e7:5a:36:3e:7b:da:cf:97:53:f1:b4:
47:f1:de:10:88:8e:73:c2:38:8c:db:8e:9c:4c:e5:29:0f:17:
cf:d7:5f:fd:e8:27:d6:d4:21:45:c4:71:00:87:20:29:5a:ae:
3d:e8:f1:8a:df:75:1e:81:64:bd:94:46:b8:c2:93:bf:db:c0:
37:5b:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:22:24 2025 by rpki-client