Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json)
Hash identifier: oSUBPI/BDgMwPESCitCfBnVh2JSBDdxJQKYAWQCrd/w=
Subject key identifier: 3C:0A:2C:4F:E1:FC:37:27:B2:70:BA:92:B8:17:03:77:9D:69:BD:81
Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9
Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
Certificate serial: 15B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
Manifest number: 15B7
Signing time: Fri 31 Jan 2025 16:46:23 +0000
Manifest this update: Fri 31 Jan 2025 16:46:22 +0000
Manifest next update: Fri 07 Feb 2025 16:46:22 +0000
Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: WNBwVw4lJ16jvnJiHn+4fEh0R5pQ+qb0nAHcqo1zmW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5559 (0x15b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
Validity
Not Before: Jan 31 16:46:22 2025 GMT
Not After : Feb 7 16:46:22 2025 GMT
Subject: CN=679cfe5e-1a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:1f:cb:ba:2c:3c:77:72:ba:6a:d6:8b:02:
6e:11:7f:a1:d7:6b:8f:ac:86:e0:3d:49:2c:6a:24:
54:ef:28:11:24:40:9a:f2:0a:e8:e1:a7:f3:77:30:
4f:89:be:d5:af:ea:e2:5b:34:e0:db:cf:92:51:d9:
ad:0a:dc:26:ca:b5:05:53:ba:29:9d:97:11:87:d2:
9a:8a:7b:b9:4a:62:cd:d1:69:a6:2a:11:4b:dc:73:
0a:78:33:01:85:d7:c7:82:70:bb:b0:ff:4d:42:fc:
19:e3:86:29:f5:78:96:5b:94:1a:b1:e0:02:1e:a5:
13:fb:a6:f9:ab:87:6e:51:77:12:28:4c:f2:c4:be:
0a:d0:91:d3:ca:7a:72:0f:ba:49:1f:b6:a1:6c:33:
a4:e3:c7:a2:37:ff:17:70:7b:fc:83:20:17:b0:8e:
6d:a9:f8:e6:ce:06:99:ed:a5:4a:55:a2:3f:9b:a5:
58:97:5a:b1:38:42:46:a0:52:da:a3:f8:4e:d4:d3:
84:30:6d:48:cc:c3:17:32:e1:1b:55:6e:a1:0f:a6:
2a:ef:b7:c7:ff:0a:f5:82:77:b2:c0:1c:13:be:77:
44:da:48:e5:a7:f3:0e:79:6e:4e:79:95:58:aa:da:
51:97:e7:26:20:0c:b0:be:53:91:09:3c:14:dc:0b:
62:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0A:2C:4F:E1:FC:37:27:B2:70:BA:92:B8:17:03:77:9D:69:BD:81
X509v3 Authority Key Identifier:
keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:f8:9f:df:44:89:ca:db:63:9f:8c:13:c7:55:75:43:23:42:
3d:f7:d0:19:f1:a8:64:6f:10:37:e0:32:2c:4e:5c:24:24:06:
d8:b6:22:e3:2a:54:cd:4c:95:c2:8c:ad:56:9c:9a:7c:ed:1c:
04:c0:2a:b6:7f:2d:4e:40:a5:ac:21:58:4a:6e:93:20:32:d2:
a8:ab:eb:e7:e8:57:73:a1:19:61:39:48:67:2b:8d:a3:f9:c5:
31:aa:ba:1d:5a:ab:d8:aa:16:85:f1:b8:46:78:2c:95:8d:b3:
60:03:96:03:3a:1f:d1:d1:19:91:d3:31:74:04:d3:15:e9:55:
22:2a:56:ef:d6:71:b2:1f:c0:7d:23:66:38:d2:97:fd:66:69:
37:c0:fc:31:35:c4:a7:c1:e4:7f:51:24:91:51:36:1b:62:7f:
f6:8a:5c:bf:54:b1:2d:b2:b1:03:02:93:d1:33:05:a6:26:a1:
45:79:f0:9d:71:0d:19:ad:7a:03:61:8e:55:2a:9b:1d:d5:47:
4c:b3:88:34:7f:c2:0e:93:0a:70:e8:41:2d:25:2c:82:36:cf:
d4:e6:11:c1:3e:d7:27:2d:43:56:c3:d5:2f:ba:c9:6f:2b:2c:
ad:7d:23:eb:65:fd:58:66:49:0e:b9:4d:70:12:6a:84:48:ad:
36:6a:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:22:42 2025 by rpki-client