Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft
File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json)
Hash identifier: p+n02rHcqtEpZZSKkX01Z2C4Iy8LOpTwDnQjQKGHK0I=
Subject key identifier: BC:15:61:D0:9E:AA:81:74:E4:D7:3C:79:A5:7A:06:42:86:1E:9F:7E
Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78
Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278
Certificate serial: 0293
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft
Manifest number: 0290
Signing time: Fri 31 Jan 2025 01:38:40 +0000
Manifest this update: Fri 31 Jan 2025 01:38:39 +0000
Manifest next update: Fri 07 Feb 2025 01:38:39 +0000
Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: NaorOFUvom7mX573A2nTSw7lDGf5hW3gJIWmTdW3Rno=)
2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: nnSO9venyDAAa+6GPmHgyrg3uKMxgPIF3inlZFGwpdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659 (0x293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278
Validity
Not Before: Jan 31 01:38:39 2025 GMT
Not After : Feb 7 01:38:39 2025 GMT
Subject: CN=679c299f-2636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f8:61:84:26:e4:32:12:dc:f8:98:77:b9:7d:
97:9d:f0:1f:fd:39:7c:45:7c:fb:c1:e8:38:b0:c6:
f1:7f:09:55:3e:65:b9:93:32:41:83:f3:4f:01:1d:
50:56:c0:56:39:08:69:70:cb:02:a5:81:c0:3a:bb:
83:9d:cd:6e:d0:50:36:80:04:81:ac:fe:70:05:35:
0c:10:db:6a:6a:18:be:09:39:69:57:87:e0:d0:ba:
ca:e0:5b:1b:e8:7b:9f:c1:49:ab:41:c5:01:43:02:
c1:4c:3a:1f:82:29:24:f8:8f:74:a4:73:5f:ef:de:
9d:03:08:6d:a9:1b:8c:fc:fd:a5:c4:89:44:56:bf:
a2:af:e9:be:d6:a3:af:bc:e1:49:b4:66:95:20:62:
08:b4:ca:06:1b:2e:73:0b:d0:68:e0:8c:63:d1:c8:
33:1d:9e:ca:28:ea:c5:af:1d:8e:60:2a:de:aa:cf:
a4:a8:16:f8:9c:31:99:70:c0:73:c5:0b:47:cb:10:
11:e7:e2:fd:4b:df:65:5b:2b:e6:df:2c:9a:b2:aa:
b7:82:3e:a0:5c:cf:71:06:4b:6a:10:8e:1e:22:12:
49:a2:d4:9f:63:de:cb:43:81:4b:08:cd:c3:9d:c4:
b4:b7:52:ce:bb:8a:6b:e9:13:3e:89:a7:87:89:37:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:15:61:D0:9E:AA:81:74:E4:D7:3C:79:A5:7A:06:42:86:1E:9F:7E
X509v3 Authority Key Identifier:
keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:57:21:28:87:e1:09:d7:63:9c:0a:4f:e1:55:58:80:34:65:
56:e6:90:5f:53:5e:02:e7:5b:60:cb:cb:55:2f:11:0b:8b:22:
df:13:8f:ab:7d:24:e9:d4:64:d5:c2:8c:7b:ca:ad:3b:4d:71:
b5:6e:78:a8:0f:da:31:35:a2:7b:ee:b0:54:06:3b:00:99:5b:
36:3a:42:d9:b5:3c:6c:9e:56:82:4a:c1:98:e6:81:0e:35:2f:
f2:e2:2a:bf:66:f8:55:ba:f1:ab:8a:e3:e1:2e:cf:f6:5c:2c:
51:a3:c5:28:bc:8f:ab:4c:e6:b2:7b:e0:bb:93:6b:a0:b2:22:
4c:35:c9:b3:dd:ab:3c:4d:c3:db:60:46:b2:39:a6:9c:08:91:
cb:15:41:69:e7:23:23:44:0e:d7:b9:50:cc:f6:70:32:e9:de:
98:47:eb:af:48:8d:eb:c0:cd:76:32:55:0b:8e:d4:e6:b0:a1:
9c:6b:da:03:92:af:2d:a7:66:23:db:e9:67:a0:7d:b0:55:53:
d7:e8:98:a6:ec:e6:9e:f6:cb:3f:ba:a9:62:a5:1c:05:bf:30:
d0:6e:01:59:99:7c:aa:92:dd:81:af:1e:7e:50:f0:5f:1e:fb:
52:7f:a5:57:91:03:b2:36:4a:f8:f1:1f:e7:53:b9:f1:5d:5a:
07:4d:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:44:14 2025 by rpki-client