Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json)
Hash identifier: /99DXC0Fk4Prhv3lQLaclTYYwwxpTJ4NEGWEF9rw148=
Subject key identifier: 73:61:BE:22:53:1F:D3:55:DB:18:AE:65:2E:B7:D3:B3:A9:3B:E3:89
Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27
Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27
Certificate serial: 05A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
Manifest number: 059C
Signing time: Thu 30 Jan 2025 23:10:59 +0000
Manifest this update: Thu 30 Jan 2025 23:10:59 +0000
Manifest next update: Thu 06 Feb 2025 23:10:59 +0000
Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: jl3GFsodk+i1L2nixX3PeAZ86UdnHNjaawPIRN1hi6w=)
2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: UVYU38/2P4ZcsBnZKHRUezkcR8i0kOVNyl3hZT7lyzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1441 (0x5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27
Validity
Not Before: Jan 30 23:10:59 2025 GMT
Not After : Feb 6 23:10:59 2025 GMT
Subject: CN=679c0703-749e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:b7:c1:86:71:2c:46:47:0e:a1:e1:25:e5:
ec:23:98:a0:2f:cb:76:c8:ef:96:34:64:30:75:a1:
68:4d:3b:2d:d6:b6:ce:a4:ed:b4:1a:f6:74:e2:5c:
71:b8:ff:2d:84:11:d4:23:c7:75:d0:71:5e:da:f5:
74:44:65:ef:3e:f0:36:fc:1c:e8:cb:8b:7d:db:87:
1c:64:66:63:88:28:48:4c:21:1a:df:bd:99:2f:dc:
d3:06:68:13:71:41:c6:84:91:83:65:b1:0a:17:af:
13:ab:91:79:0c:38:62:5e:60:6a:47:6f:24:d6:1f:
6f:b9:3b:b5:32:75:ee:6d:7a:a6:92:95:94:a0:4f:
c7:03:7d:a2:b9:d0:ee:4b:40:d2:1c:51:34:86:84:
6e:ef:a8:14:1d:dd:b0:5c:c1:5e:b6:8d:bb:31:7d:
6d:6c:dd:c0:23:86:a1:a8:b4:08:bc:7c:06:dd:31:
93:71:f0:36:f0:46:83:6a:a9:35:a4:4f:a2:d3:eb:
f5:6b:9d:26:ea:0b:16:ed:54:a4:e1:99:56:46:6a:
f9:a2:e1:16:3f:89:86:d1:ae:da:ac:7a:17:4c:4d:
7e:ec:2f:1c:5a:e3:8d:73:4d:13:5f:fc:d5:f7:82:
d6:4e:ea:cd:01:88:1d:13:c6:cb:59:d9:eb:e5:2c:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:61:BE:22:53:1F:D3:55:DB:18:AE:65:2E:B7:D3:B3:A9:3B:E3:89
X509v3 Authority Key Identifier:
keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:32:77:6b:82:f2:68:bc:f5:97:e6:9f:c6:6c:18:97:a2:5e:
dd:fc:88:25:ac:25:5c:04:b8:80:00:6b:f9:a0:69:79:72:d1:
d6:72:15:65:0a:cf:56:19:d2:d0:a6:54:1b:4f:6a:42:38:04:
a2:22:2e:1e:94:d4:f9:ce:c5:35:2d:ba:72:d9:d4:c2:36:5a:
bf:98:20:aa:4f:e8:24:61:83:92:77:d3:4d:f6:d5:49:0e:03:
8b:f1:1c:79:39:f4:42:06:00:6b:4f:04:c3:c8:e5:0d:77:bd:
9e:3a:e9:84:2f:9e:21:21:51:2a:89:0c:c5:af:5a:ec:63:7a:
e4:6c:58:e8:4c:dc:62:97:40:18:31:6a:e6:67:2b:a9:2f:d4:
b3:47:d2:58:50:f4:62:1a:f1:2f:bc:c2:46:00:ea:c6:fe:3d:
39:f9:db:79:fd:06:08:f9:61:dc:db:d5:07:e1:89:fb:46:2d:
82:1c:d2:c7:5f:a0:0f:01:67:7b:22:90:59:4f:28:56:fc:c2:
73:13:55:ec:8e:97:12:95:7d:fe:4c:75:75:bf:ce:b6:8a:3c:
0c:d4:6d:06:8b:fb:4f:0a:dd:0e:8d:fa:92:bb:a0:26:db:b4:
97:ad:59:52:84:4a:94:76:3e:68:85:b1:82:2f:5f:50:5a:d9:
01:52:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:24 2025 by rpki-client