Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
File: cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json)
Hash identifier: vIh+zvlbVYtiJNyP1/6s7mNYjX1Z/El6LCHpV9qWdiE=
Subject key identifier: A0:57:FD:15:C8:EE:12:B0:73:D0:B1:06:15:70:DE:EF:B1:C9:E6:27
Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Certificate serial: 078E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
Manifest number: 0784
Signing time: Thu 30 Jan 2025 21:16:59 +0000
Manifest this update: Thu 30 Jan 2025 21:16:58 +0000
Manifest next update: Thu 06 Feb 2025 21:16:58 +0000
Files and hashes: 1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: b0upBAdqhZboBGYJT+mrH6gP85N9MVSxxIW5Aq2/FI4=)
2: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: F2B6eTQtjw4DMTGhIIRc21e5xRW7fmJOpub38olCp9w=)
3: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: d0oN/FUNzNpOKmQI6ds/0v5d1ZE90v5NzlRPE14knFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934 (0x78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Validity
Not Before: Jan 30 21:16:58 2025 GMT
Not After : Feb 6 21:16:58 2025 GMT
Subject: CN=679bec4b-964f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:61:73:c0:19:dd:ac:72:54:40:73:b8:d6:
bb:9c:c0:79:6e:a8:50:3c:08:ff:f9:7a:67:13:fd:
52:bd:16:c9:0a:f0:3d:86:14:f2:4b:33:a0:e4:1c:
67:16:ee:3c:43:c9:6b:b9:55:b9:29:46:f9:89:7c:
09:73:a9:4e:36:9b:f0:3e:02:da:40:c3:5c:82:8c:
ed:50:1c:ba:15:ad:db:00:46:ac:94:63:91:a0:ed:
3d:7c:36:d1:d7:1f:33:a3:b4:8e:81:94:cc:bd:95:
41:ba:27:f3:6b:f5:23:86:0c:36:d7:5f:9a:6f:5a:
f3:c9:dd:6a:67:86:11:84:5d:70:7a:52:f2:a7:fa:
66:fe:8a:f5:84:82:b5:bb:7e:55:81:dc:ea:be:0e:
a2:de:ec:c0:bd:cc:44:7d:6d:6d:0e:07:d2:98:65:
99:6f:84:84:b0:18:ee:36:89:d8:84:f2:4e:38:fc:
11:04:e3:54:a8:46:d8:5f:54:c7:a3:e1:7a:ee:d3:
9b:f8:57:30:dd:b9:9a:9c:89:b4:00:ca:67:ca:fd:
bb:43:8d:f9:85:c0:80:24:5f:91:52:8d:f5:34:d6:
74:f2:e9:18:75:dc:fb:55:f0:7d:ee:d2:74:62:ae:
88:ae:96:41:ed:2b:23:94:57:70:7e:5d:1e:ce:30:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:FD:15:C8:EE:12:B0:73:D0:B1:06:15:70:DE:EF:B1:C9:E6:27
X509v3 Authority Key Identifier:
keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:28:d3:89:fa:1b:28:ef:36:cc:52:39:85:31:bc:fb:f0:50:
cf:26:89:f6:c5:a1:f1:9a:ac:f1:c5:53:f5:8d:8b:de:10:8e:
d1:e4:7c:bc:b6:98:90:cb:55:46:b4:b8:25:8d:ea:6e:7c:80:
33:e6:fc:d4:33:d9:26:4b:fa:f4:e8:f1:12:03:64:fd:37:b8:
d8:af:db:b0:81:39:a1:93:b4:2c:d5:d4:50:90:5b:40:f4:40:
de:c1:a8:b9:46:54:a9:73:11:12:6f:a3:d7:12:62:b8:b8:78:
ed:02:36:6d:80:d2:62:f8:23:2b:84:f9:7c:8f:94:dc:91:81:
8f:6f:1a:f0:b5:43:32:ae:ba:ff:45:b2:fe:d5:b8:bf:cc:7b:
b4:b3:5a:04:b7:1e:fd:c0:a3:00:03:c0:c6:23:fd:2e:89:de:
75:d8:5c:39:0f:22:8e:b6:c7:14:e8:a6:6d:76:93:b0:58:52:
f7:74:0c:2f:a0:5a:e8:d2:17:ee:d8:e2:80:f3:7d:35:d9:5d:
d4:9d:ea:2f:7d:d1:68:0f:b6:e7:1d:4f:95:7c:cc:dc:75:ef:
e4:11:02:8e:22:15:25:a4:6e:6a:57:e5:20:87:ce:97:e2:97:
d4:8b:d8:93:3d:19:bf:e6:10:6d:e8:53:3d:56:05:16:c7:d4:
06:16:d0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:07 2025 by rpki-client