Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json)
Hash identifier: IFAb6f74ye6gX6PFbkR0abF9uAhgiUG4CHoMDjoZSnY=
Subject key identifier: E9:8B:B9:0E:D4:04:06:DB:D9:16:EB:CC:2D:87:F5:71:46:1C:1D:BB
Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
Manifest number: 015A
Signing time: Fri 31 Jan 2025 03:34:06 +0000
Manifest this update: Fri 31 Jan 2025 03:34:06 +0000
Manifest next update: Fri 07 Feb 2025 03:34:06 +0000
Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: hFoUZzUoQcZKN0/bDjZXykbyqnh0Jahv/WYTTncPyro=)
2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: efBSrtkTKEJgNLbcfHg15J9nYDpY9tt/H1QPBO/mZ+U=)
3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: 2uAnojTpBx/p6UzON5W2LUqPsm+IaZARqT6ypFNqC5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Validity
Not Before: Jan 31 03:34:06 2025 GMT
Not After : Feb 7 03:34:06 2025 GMT
Subject: CN=679c44ae-8430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:ca:30:6b:29:23:53:aa:70:65:17:e6:c5:
a4:ef:71:de:04:0a:52:22:04:af:59:b0:aa:9f:bb:
09:a4:1a:3b:2f:d8:6c:cf:31:d4:28:7d:6d:34:6d:
98:15:1c:2c:7b:9d:ee:da:54:c3:c8:dd:39:0f:c5:
07:fc:71:32:a7:b4:77:56:e7:76:54:cf:e3:21:31:
70:79:72:82:40:b3:1e:86:89:ae:8e:34:60:87:5b:
3f:0e:3f:ce:28:65:42:9f:97:c6:b9:eb:2c:29:14:
31:dc:7e:5e:a0:24:bd:b4:f6:bc:fd:c0:38:24:ec:
2c:2a:f6:3a:ce:fb:74:78:7c:92:ce:ec:cd:b3:42:
65:39:ba:45:41:65:3f:f4:9c:cf:af:5d:35:30:e5:
91:c0:76:62:40:75:ec:75:b5:88:6e:21:11:25:fd:
1d:e9:97:db:b1:94:e7:84:a5:ec:49:e9:aa:4f:75:
b8:b8:93:76:62:0c:90:ba:5f:2c:a0:2e:3b:96:ea:
f2:86:5c:26:8d:f0:3a:7e:a5:91:d9:ec:06:6a:8d:
8b:7e:9a:3a:34:0f:59:7e:a3:d6:c3:c4:83:9f:cc:
8d:dc:a4:d5:db:eb:52:b9:a6:89:c9:af:99:ff:ff:
a4:44:17:14:f8:23:21:d5:cc:e1:86:ac:07:be:b7:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8B:B9:0E:D4:04:06:DB:D9:16:EB:CC:2D:87:F5:71:46:1C:1D:BB
X509v3 Authority Key Identifier:
keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:25:70:1a:b7:7a:74:11:df:8b:e9:b8:3e:90:d0:96:55:3f:
57:f4:d1:f9:68:a0:86:a5:b0:37:68:9f:cf:23:2c:19:b5:e7:
7d:ff:f9:2c:3e:e0:fe:24:6d:af:41:10:b0:76:28:97:de:2c:
9d:57:6e:d3:10:67:42:2c:bb:45:a6:d1:8d:05:17:8d:04:d4:
de:2b:b5:45:e3:f8:bc:39:7c:7f:fc:5e:1b:f6:31:83:40:23:
aa:4e:90:39:4a:83:06:96:40:ff:31:45:e4:4b:d4:60:bc:ee:
66:78:34:bd:54:76:d7:90:8b:53:01:46:a9:8a:7b:52:8b:a4:
72:5f:3d:c2:cb:14:0e:61:bc:a2:6c:56:a2:17:b8:21:c3:56:
aa:dc:f1:32:cd:9f:e0:2c:9e:fb:29:ba:bd:95:e4:8c:88:d4:
bc:80:54:db:84:bf:df:14:91:e3:b7:33:7f:01:63:55:1d:ef:
71:5c:4a:99:f8:c3:fc:09:89:65:45:ca:21:f8:d6:da:1b:e2:
c0:85:10:d9:c0:f2:e3:db:51:b5:e7:76:32:68:ba:ad:9b:d6:
73:43:24:ec:a6:f7:fa:1c:60:a0:cb:36:08:ec:1a:fc:74:c4:
27:e4:f4:d5:1d:e4:13:fd:13:3d:38:79:da:7f:e8:cb:86:af:
b3:18:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:32:08 2025 by rpki-client