Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
File: tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json)
Hash identifier: oKWus2KHAmRjnlq2KEbTP2ItkYxt9DduXA44zT0zmYg=
Subject key identifier: 06:B1:8E:15:61:0D:3A:E1:69:D3:92:5E:29:B2:28:26:52:55:55:F7
Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Certificate serial: 02E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
Manifest number: 02D8
Signing time: Fri 31 Jan 2025 01:28:27 +0000
Manifest this update: Fri 31 Jan 2025 01:28:27 +0000
Manifest next update: Fri 07 Feb 2025 01:28:27 +0000
Files and hashes: 1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: 2grFTkVJXhn/fvDiZTB67+3TdCAoLtp783Xvc+/Ja40=)
2: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: hj6HENiICkARpuosawtZoxcS59kBh8qchU0LK6i41Kw=)
3: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: qi/f7a1lAHX2y6pi+09PuaKJSyxYj7DhpTy80V71vEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Validity
Not Before: Jan 31 01:28:27 2025 GMT
Not After : Feb 7 01:28:27 2025 GMT
Subject: CN=679c273b-ae24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:ee:ed:23:01:50:e7:82:31:97:99:17:96:
a5:f9:12:a7:b2:06:4a:40:b7:78:bb:c9:53:90:a7:
22:ba:51:5f:ed:c2:ca:f5:8d:d3:43:2c:74:81:96:
82:60:2d:90:8c:36:22:b0:63:82:86:b5:5b:e1:02:
ab:ca:9d:f2:37:3c:6f:5b:b3:d6:ab:ac:41:ba:9d:
d9:3c:04:75:1e:69:aa:2b:f2:fc:96:d1:58:1e:fb:
02:5a:98:db:23:58:f8:63:3e:3e:43:2b:24:39:7c:
6d:6b:9d:01:94:ea:8e:73:10:2c:98:29:9b:9d:08:
24:c5:6a:23:f3:31:8f:dc:79:c6:5c:85:73:7a:67:
ab:19:36:27:d7:e4:e2:5d:41:c8:88:d1:8d:cb:1c:
b7:6f:fa:a3:4d:de:de:f3:36:37:46:df:a9:fc:16:
f1:73:38:79:8a:89:01:a2:05:9f:e9:44:8e:bd:c6:
eb:fd:f9:50:af:74:7b:bc:2c:fd:ad:9e:43:da:a1:
02:1d:0b:d7:06:da:f4:15:3d:af:0e:d1:2d:24:a2:
44:69:84:3b:95:76:fb:72:d5:77:57:de:fe:83:ea:
01:30:aa:9e:c2:f8:35:4a:da:8c:9d:a7:a3:7f:c3:
f3:99:ac:fe:6f:20:e5:70:46:5e:d3:ef:93:91:13:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B1:8E:15:61:0D:3A:E1:69:D3:92:5E:29:B2:28:26:52:55:55:F7
X509v3 Authority Key Identifier:
keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:91:06:cf:e8:02:50:b6:9e:46:d4:52:65:71:0f:ad:f1:28:
63:ff:88:b3:a4:b6:32:3f:f1:c7:fb:91:7c:32:19:a2:68:45:
2f:31:34:01:ea:e5:27:f7:d5:5b:d4:6f:1f:45:1a:65:12:69:
e5:e8:d4:3c:c1:ee:07:ae:5e:ef:d4:f7:1c:78:98:d2:4f:7b:
7d:9b:0d:18:6c:5e:ee:3c:1a:95:81:8c:d6:9d:09:36:41:f1:
74:e8:63:e7:15:7b:fc:64:83:87:7d:25:d7:92:29:1b:0a:8a:
32:eb:f2:1f:59:37:0b:53:a7:a7:00:67:01:55:95:2a:74:55:
3d:96:d0:78:ac:32:35:2e:ee:de:54:61:6d:27:16:51:7a:ad:
60:c8:77:7b:d3:51:bb:f5:f7:47:14:2c:75:ec:b5:a9:52:e3:
a0:dc:47:2e:8b:e8:0b:7a:c2:66:73:32:a0:97:1b:c9:e4:b0:
c5:82:a1:c3:0e:f7:b2:be:49:26:95:88:30:9d:d6:d4:5f:84:
e5:65:15:1d:70:d6:0a:28:85:ff:51:c4:a0:8a:1a:88:fc:0a:
4e:ab:38:c7:3c:9f:d1:f0:19:28:d1:98:ec:68:8f:93:a4:44:
85:dc:4b:22:ac:2e:7f:ff:21:98:f3:b7:a3:0b:d0:7d:8d:f6:
af:6f:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:30 2025 by rpki-client