Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier: GCetM9/1qtOTSjDFUC5AtNiOFHeWhS7lSQpJpVNj7VQ=
Subject key identifier: AA:85:25:8E:66:36:96:44:2A:FF:77:47:96:82:E9:94:70:CD:A6:7F
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial: 08D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number: 08CB
Signing time: Thu 30 Jan 2025 20:30:27 +0000
Manifest this update: Thu 30 Jan 2025 20:30:26 +0000
Manifest next update: Thu 06 Feb 2025 20:30:26 +0000
Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: gSSM8vFyYa8LkGr1WGL9Msx7SeOM9WvX/Yo2S1fOttU=)
2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: X9HB94cWjBTgn2Vk1TJX8o07Q/D8RuXJYiqfr8e7UHo=)
3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: s7kmGV11LpR2uOYTQWsw6P4Bq6z4n3l1h0bh9iKPVCY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Validity
Not Before: Jan 30 20:30:26 2025 GMT
Not After : Feb 6 20:30:26 2025 GMT
Subject: CN=679be163-1592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:9b:9a:20:1a:c8:8b:9e:b1:6a:43:cc:09:
31:21:81:8f:28:3f:ce:f6:7d:b4:55:70:40:a8:5d:
18:9c:8f:47:be:fb:f1:d7:e0:f8:c1:c8:96:59:71:
bd:d1:0b:e3:0c:98:75:23:bd:34:12:74:a7:eb:1c:
44:bb:3c:5c:eb:28:dc:5e:59:ed:aa:e2:82:71:87:
1d:44:bb:61:09:d5:3e:07:80:9d:0a:ff:d5:05:95:
56:4d:ac:07:8e:3f:33:49:5e:3d:04:e5:f6:ca:9f:
7b:d0:c6:4a:ad:cf:98:db:88:d2:5e:87:f0:64:77:
b3:cf:14:dc:f3:07:83:6e:4f:ac:e8:de:53:2e:1e:
58:29:f4:a7:c5:29:e2:de:34:87:83:dd:69:0a:37:
bd:88:db:d8:c9:07:d1:15:45:df:be:08:61:1e:8f:
06:2e:ae:e9:70:ac:5c:c3:ba:7d:35:ea:73:3d:f1:
24:b4:b3:9f:a4:fb:e4:f0:9d:12:dd:89:d8:ae:b0:
bb:fb:91:b0:4c:ac:70:ea:e1:86:24:5c:1b:ac:91:
4c:cb:52:b3:27:28:09:14:7c:19:d6:a7:1c:39:4b:
89:40:2a:67:e8:4e:ca:0e:4e:a1:9f:de:b4:2f:7e:
d5:b7:c3:d8:a8:f3:06:50:14:03:64:a2:77:35:80:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:25:8E:66:36:96:44:2A:FF:77:47:96:82:E9:94:70:CD:A6:7F
X509v3 Authority Key Identifier:
keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:c6:6c:6e:0a:d1:03:9a:cc:c0:e9:ee:6e:53:8d:48:b2:fe:
28:3a:05:ea:5c:15:70:58:c4:b7:a4:73:89:1e:fa:9f:01:f5:
ff:47:37:62:be:a8:e3:5a:9c:91:d3:74:6f:43:c1:64:80:99:
ab:83:26:bd:94:f0:89:63:aa:eb:69:be:f2:f2:28:59:84:4d:
2a:df:17:42:7d:f0:12:12:12:46:bb:e5:71:b6:d7:ee:91:c9:
5f:52:b9:9d:46:1a:da:65:be:33:c6:00:21:4e:a5:fc:0b:6f:
b6:80:31:54:ba:c1:e1:e4:53:07:9d:96:5f:a3:09:24:29:a4:
aa:65:fd:38:1b:d3:80:6c:fb:03:cc:db:52:23:b7:a1:d9:49:
70:35:22:97:40:34:67:2e:ae:02:a4:21:3a:8e:d7:21:0d:0e:
8a:0a:5e:a8:63:29:e7:97:c5:7a:16:21:db:b3:d9:28:c4:11:
e0:78:a8:ec:cc:bd:b8:6e:8b:2d:56:e8:76:0c:10:99:f8:25:
75:53:6f:03:ad:78:f4:f6:ed:25:d6:dc:bb:ff:76:60:df:f5:
d1:aa:54:25:cb:4e:0c:51:e5:13:28:38:25:a5:39:5e:dd:0f:
db:38:4e:2a:2e:1b:ea:99:bf:cd:c3:dc:4f:a0:68:c9:d9:a4:
0d:bd:b0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:39:20 2025 by rpki-client