Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json)
Hash identifier: Okj5M3ujlWjyugbszQdcosO8/jSp9ZGpKJq7sFvFuxg=
Subject key identifier: 0A:E2:78:86:00:3A:92:CF:1C:02:0C:E6:F9:B5:E7:B3:31:3B:D7:14
Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36
Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436
Certificate serial: 08F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
Manifest number: 08EC
Signing time: Thu 30 Jan 2025 20:27:36 +0000
Manifest this update: Thu 30 Jan 2025 20:27:35 +0000
Manifest next update: Thu 06 Feb 2025 20:27:35 +0000
Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: 0VzMRUWavaZPXW2z43wefvFJGk1qTRUUWw2gJvCBM1g=)
2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: kT9n+KoUVrMxTcDdDdchHMpGKJgB1YHqyxZ9/EDRDrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290 (0x8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436
Validity
Not Before: Jan 30 20:27:35 2025 GMT
Not After : Feb 6 20:27:35 2025 GMT
Subject: CN=679be0b7-7d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:3a:89:47:c6:6a:d0:af:ee:54:56:78:42:
c5:9c:81:ab:11:73:d1:72:42:ee:06:10:b6:72:1e:
53:94:ed:88:35:bb:12:33:13:71:cc:42:b8:e7:57:
d8:5c:d0:28:e3:69:f6:07:66:00:71:15:68:ce:9b:
11:3d:67:97:f3:78:2d:5b:a3:ed:75:16:e7:8d:c8:
5d:64:fc:a1:0d:77:81:8c:f7:ea:82:56:02:36:f9:
78:6b:dc:ec:9c:fc:d8:36:fe:cc:04:d5:50:58:29:
46:d4:b2:3f:20:92:c2:4b:57:a7:43:f2:38:c8:05:
35:02:4f:84:34:0d:a1:0a:7a:79:01:96:72:26:8b:
7f:86:b8:ee:9f:b9:ca:25:b2:6a:68:b2:6b:7e:d3:
e8:83:70:eb:f9:64:d1:be:93:db:ca:6f:88:86:ea:
45:34:f4:b8:07:b9:71:72:c6:9d:f1:0d:e4:8e:ac:
0c:ec:b8:0d:c8:45:7a:ef:63:03:8e:28:6c:13:f0:
67:b4:8d:9f:f6:9e:f2:81:91:c3:0e:44:7d:5c:33:
ce:60:a8:e5:d4:b7:dd:ab:05:9f:a3:e1:42:b0:a2:
98:53:78:e8:81:c1:9d:5d:22:a3:4c:da:2a:e5:08:
25:0b:1a:47:66:6d:ee:a1:b4:1f:d9:e0:d2:0f:b9:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E2:78:86:00:3A:92:CF:1C:02:0C:E6:F9:B5:E7:B3:31:3B:D7:14
X509v3 Authority Key Identifier:
keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:98:64:86:71:d9:93:c2:f0:56:20:2b:ce:a3:2c:da:bb:02:
09:cb:88:00:73:e7:20:46:65:e4:2c:9e:f8:50:86:16:a3:eb:
52:4d:b7:a5:f8:3b:cb:c4:88:f3:5f:42:5a:b2:84:68:89:2f:
30:0b:61:43:11:c0:82:90:44:49:2c:13:09:a0:9b:3c:42:ee:
79:dc:b2:b7:13:b6:5c:76:36:33:52:e9:48:c9:71:b9:01:5d:
ca:c9:ad:60:fa:a0:cd:bf:9f:fc:9d:61:46:54:00:ed:4a:6a:
00:cc:53:ea:b6:79:10:4a:01:fc:2c:df:a1:15:a2:72:15:50:
b5:87:f6:1f:18:28:c1:c1:ba:07:c1:a5:24:b2:bd:a7:96:0d:
bb:03:4b:73:e4:4f:8e:df:e2:51:89:12:72:f9:fb:7e:1c:75:
3e:89:80:af:86:0b:6f:4d:7a:e0:3d:c2:b2:05:78:12:57:7c:
d3:c4:77:e4:94:5a:28:8b:da:75:cf:70:76:3d:e0:d9:13:f8:
bc:2b:26:59:86:62:ba:3c:17:7e:fc:23:42:4c:b7:97:dd:35:
43:85:ce:46:95:57:8e:6f:0f:bf:3d:49:57:eb:79:9b:4a:a4:
a3:76:31:f7:22:1a:a7:83:46:a9:bf:31:cb:fa:d9:b2:bb:f1:
f2:36:0b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:49 2025 by rpki-client