Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json)
Hash identifier: n1N4jPBEf60n3tSuEGZwtBjpoCPMW7KwtWE0Iqz9C1I=
Subject key identifier: FF:64:57:89:C0:B9:DA:1B:AE:D9:91:F1:74:C3:72:65:C4:4C:32:88
Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
Manifest number: 1C
Signing time: Fri 31 Jan 2025 07:01:41 +0000
Manifest this update: Fri 31 Jan 2025 07:01:40 +0000
Manifest next update: Fri 07 Feb 2025 07:01:40 +0000
Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: ZOLoOmMgWXXp/gieRJDwEW0oxen6IoYztYh/qINfYO0=)
2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: NJttL+qjjIMKQduatRuB9wCf9GQJviKk9JlU07XKUgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Validity
Not Before: Jan 31 07:01:40 2025 GMT
Not After : Feb 7 07:01:40 2025 GMT
Subject: CN=679c7555-4b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:2e:2b:4f:18:ef:80:38:91:78:38:d7:63:
51:96:ab:67:4d:37:dc:cd:bb:96:ca:c0:d9:9b:a2:
6d:2f:a6:d3:29:07:57:82:35:f2:60:21:ed:f8:52:
6b:c1:bd:99:ef:42:a9:03:b7:4e:23:2f:89:77:7a:
ff:2f:37:ca:cc:b3:9f:58:27:c6:32:f3:b9:37:93:
f3:5a:da:04:70:ba:51:f9:d5:53:78:82:38:c3:f7:
3b:d3:a3:64:53:33:14:fd:40:71:74:75:4e:b9:0f:
69:57:1a:4e:f2:6e:40:71:3c:05:57:7a:de:11:1e:
94:82:41:ed:f4:55:66:b1:75:3c:9e:11:9f:7a:46:
79:ee:1c:a3:c1:48:e4:64:69:01:f4:ae:fa:d9:72:
c6:34:92:de:9b:1f:10:54:1a:1b:f9:a3:55:1d:c4:
ad:89:85:ca:66:b9:42:60:96:30:4e:7f:13:25:a3:
8f:3d:2a:24:93:4e:da:2b:cb:01:60:cc:a8:10:8a:
b1:11:dd:f4:b4:8a:55:bd:04:1f:b5:75:39:1f:19:
96:5d:e2:4c:04:bb:fb:5b:41:0c:44:8d:d6:32:23:
08:a5:b3:d8:f3:9f:23:ed:62:e6:b8:0a:63:95:77:
fa:77:6f:2f:c8:4b:0a:b0:3a:03:d6:a5:df:26:96:
8b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:64:57:89:C0:B9:DA:1B:AE:D9:91:F1:74:C3:72:65:C4:4C:32:88
X509v3 Authority Key Identifier:
keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bd:d2:61:a4:27:a5:45:aa:3e:c5:d5:ac:b2:e1:de:7e:2a:
89:ba:fc:56:75:fe:33:30:3c:b4:16:ae:93:1e:2e:29:a7:08:
b8:b0:e9:e6:5c:5b:7f:0b:c6:92:f2:76:24:be:b7:92:30:f2:
fa:dc:e6:4a:cb:08:2c:b3:a4:75:18:bd:ea:68:12:61:a3:a3:
fd:c6:32:3c:be:2e:2d:6a:0e:f8:49:05:7b:e9:fd:df:9c:9c:
69:d0:07:6a:90:ce:b3:4f:54:35:54:a3:3f:46:88:99:fe:11:
c5:71:c6:5b:4d:5a:44:8d:2a:c2:85:c8:b4:ca:44:6a:bc:48:
66:25:fa:0a:e6:5a:28:51:25:0a:9f:7c:3d:df:7f:c5:78:7a:
76:6a:ae:1d:21:ab:d3:ec:46:0a:57:fa:aa:68:2e:86:9a:78:
7f:26:ea:8d:44:dc:b4:2e:42:9c:3b:85:fd:c8:9f:d6:ba:ba:
9e:23:cc:6a:a6:cc:9a:55:d7:16:14:66:c2:8a:29:15:0b:58:
74:2e:52:86:44:34:97:32:7f:a5:34:84:b0:04:65:67:79:3a:
ef:e4:d2:f5:f9:00:e8:00:32:d8:38:19:ea:75:a2:eb:62:72:
c1:7d:60:cd:06:df:fc:80:e2:1a:f1:cc:cd:8b:6c:1f:e1:5c:
69:64:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:25 2025 by rpki-client