Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json)
Hash identifier: kk8UyiA9Wzxyp2+szvWF9VL1PIH5YhvMD/3Dr3dWoN0=
Subject key identifier: 4E:F0:3F:47:80:25:A2:6D:CC:9F:92:38:8C:46:31:D3:67:50:B4:0E
Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D
Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D
Certificate serial: 07D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
Manifest number: 0A7C
Signing time: Thu 30 Jan 2025 21:00:10 +0000
Manifest this update: Thu 30 Jan 2025 21:00:10 +0000
Manifest next update: Thu 06 Feb 2025 21:00:10 +0000
Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: YTdWEiAb4X4XTmhBAAUcF3rsa/QEbTCw6MDXGjCPYyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2007 (0x7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D
Validity
Not Before: Jan 30 21:00:10 2025 GMT
Not After : Feb 6 21:00:10 2025 GMT
Subject: CN=679be85a-aa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:b1:e1:03:aa:6d:73:60:04:3d:11:f7:e4:
56:82:7e:da:89:cf:78:41:9d:45:26:04:48:d4:36:
fa:b5:05:07:73:22:27:ed:64:be:cd:43:e7:83:35:
c9:ac:35:e7:d6:f7:92:06:a5:75:35:32:1b:15:80:
ab:eb:f6:c6:db:7f:be:d5:d9:21:17:a6:31:73:39:
d8:83:57:a7:36:bb:63:3f:2e:6f:98:dc:b6:d5:bc:
a5:9f:56:9d:2f:81:a8:86:e9:c3:3c:69:6d:b6:68:
21:40:82:66:26:ed:59:5c:8c:c1:5d:94:33:46:c1:
22:9f:77:42:82:68:66:19:b0:b0:84:4d:32:63:f5:
39:2e:ce:8c:a8:94:a7:8a:12:bc:3b:d0:65:7e:e3:
5c:24:20:38:83:e6:65:dd:c2:be:84:e0:0b:b6:3f:
a8:73:7e:96:c6:55:db:9e:bf:1c:39:7b:37:7b:70:
1c:8a:ff:06:d7:bd:45:f4:56:ed:17:db:b0:a3:bc:
6a:86:56:52:50:60:7a:b4:0c:ba:fb:7d:e1:51:5f:
14:3e:4d:e8:08:86:77:9c:ab:44:03:13:20:7b:54:
5c:e2:06:58:f2:f2:47:3c:6d:d0:ea:a1:b3:60:c7:
16:ae:8d:63:e0:ec:a4:a6:aa:9b:11:66:b1:dc:a8:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:3F:47:80:25:A2:6D:CC:9F:92:38:8C:46:31:D3:67:50:B4:0E
X509v3 Authority Key Identifier:
keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f3:63:7d:c6:fe:7e:49:4c:da:53:4d:7a:59:19:c1:e3:a4:
89:8e:69:49:d4:e1:87:91:dc:d8:43:29:85:db:37:73:e9:1c:
17:a0:c0:2d:e3:aa:bd:47:b6:13:56:c5:6d:2f:5e:bb:53:09:
32:b2:e7:89:c2:a1:56:62:4e:70:ca:28:0d:df:2e:ae:b7:18:
68:a1:de:d6:eb:32:30:14:ba:50:7a:6d:07:68:9b:c0:cc:b4:
e3:f2:5c:5a:4d:ee:d8:80:ed:3f:a5:08:43:a2:40:04:05:00:
ff:b9:2a:7e:68:a2:3e:4d:73:c9:dc:fb:4b:90:fc:ce:27:ea:
9a:56:63:80:ef:85:69:28:26:5f:20:7a:9c:97:34:a5:c7:9c:
96:7d:45:5b:ac:f7:19:6f:79:a2:23:7b:18:05:4f:74:53:24:
64:02:15:88:d4:b6:1f:e8:95:a5:31:77:92:64:51:31:ce:e8:
34:37:df:6a:01:f4:02:fe:84:1a:7c:e3:69:c1:41:f3:64:62:
ef:20:19:65:3f:a0:57:e3:53:9a:05:e8:e8:0d:5c:12:93:b2:
79:f8:4c:67:c0:c2:de:4c:cd:d8:e9:a8:ad:96:9f:d3:ac:4a:
4d:ca:46:d0:21:11:83:01:fe:f3:57:e6:c4:86:e2:3c:2c:3d:
95:33:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:32:08 2025 by rpki-client