Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
File: M1EvnGdsMJ4181WPA7muZBm_dBU.mft (raw, json)
Hash identifier: iEBGAg998xEEuxTGp2Cvv8M4xrOR1P91Fa47cTTZPc4=
Subject key identifier: 18:F4:86:A3:48:D2:BE:E1:24:73:CE:41:28:0A:ED:F2:7A:A5:24:03
Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Certificate issuer: /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
Manifest number: 0149
Signing time: Fri 31 Jan 2025 03:27:58 +0000
Manifest this update: Fri 31 Jan 2025 03:27:58 +0000
Manifest next update: Fri 07 Feb 2025 03:27:58 +0000
Files and hashes: 1: M1EvnGdsMJ4181WPA7muZBm_dBU.crl (hash: IDfKXrKBYKvjryjS8O/6S8QC3U2gmbmFlM4PZ0ipNc4=)
2: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (hash: kgAbrMxDjdyKqEEvFfGcY8h/Xgxe3iJZ0yN268wXz80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Validity
Not Before: Jan 31 03:27:58 2025 GMT
Not After : Feb 7 03:27:58 2025 GMT
Subject: CN=679c433e-d0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:c3:f5:af:9a:ea:14:7d:73:ed:05:9c:38:
00:32:13:3d:fd:6e:3b:dc:80:07:58:b9:68:82:45:
73:28:fc:93:44:9a:2a:ed:e7:8d:33:0b:76:5d:dd:
fa:2e:b6:17:40:9f:14:d4:a1:e8:18:71:b6:73:74:
7b:01:91:5b:42:a4:9e:9b:77:85:93:31:8d:e6:72:
de:0b:fb:2e:90:d6:15:8d:19:24:fb:b7:11:01:41:
66:74:3a:1f:e8:64:a8:63:42:3a:68:82:67:85:f3:
f6:32:84:a2:2f:09:67:22:6a:cb:97:e6:be:8d:5a:
98:1f:87:07:77:e4:03:78:f3:b8:2c:c7:35:cb:59:
12:9f:62:3f:46:b8:d9:03:35:67:68:3b:f1:a6:7a:
67:84:51:80:31:a2:db:a7:7f:d7:0b:2e:c7:8a:fb:
b7:99:23:e9:2a:c5:1a:5d:37:ef:71:91:13:1c:32:
bb:65:f0:19:a4:53:1a:7e:71:33:1f:05:ae:df:3a:
5b:02:27:e2:63:86:20:b0:71:f0:72:27:a3:b5:25:
85:f9:57:d8:77:37:c3:78:40:2f:4f:44:88:49:63:
76:01:4d:90:a4:63:e8:18:14:ea:0e:b0:55:c6:76:
35:a6:d9:5a:b5:ce:a4:ef:8e:ff:5d:de:62:d9:01:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:86:A3:48:D2:BE:E1:24:73:CE:41:28:0A:ED:F2:7A:A5:24:03
X509v3 Authority Key Identifier:
keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:ba:94:8a:07:53:02:24:44:a8:e0:2f:7b:6d:ba:f5:72:6f:
76:a3:bc:18:20:80:69:cb:53:91:6d:cf:cb:f6:7d:6f:c2:f3:
3f:6c:eb:62:fb:97:9a:bf:d8:21:0f:14:29:cc:f4:b6:de:d8:
27:a1:97:7e:8b:e5:86:f0:ce:a7:5a:bd:c6:ef:e6:91:60:6c:
cc:ca:89:15:18:b4:5e:99:10:28:0e:52:4b:ef:69:c8:a7:e7:
77:f9:f7:b3:df:86:9e:85:30:9b:b8:00:02:f9:9c:8a:f6:cb:
7e:46:39:45:39:4d:83:27:54:5a:d3:cf:3e:3e:5c:f2:17:d4:
9c:d0:07:59:18:41:af:de:21:f3:b2:e3:64:a3:89:85:07:ee:
52:b5:62:92:4a:a6:3e:4c:37:23:04:ca:1f:47:33:85:0b:58:
f1:00:0a:a3:cb:db:1f:f1:ac:8c:16:76:70:26:c0:6f:7c:be:
55:34:86:47:73:a8:40:1d:f1:46:46:54:da:43:a7:e7:db:3c:
45:ae:01:38:17:7c:80:bd:a9:eb:d2:42:fd:36:44:e2:e5:14:
3f:34:41:8a:d1:78:0b:ca:35:ce:81:19:a4:64:38:3d:b4:3a:
e8:43:19:50:89:b8:0b:4c:34:ea:da:f0:6f:97:c9:6a:ca:98:
80:e5:83:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:51 2025 by rpki-client