Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json)
Hash identifier: fW2KEzOOxSiCYOMkbpcGDIW0jMp2P5kJGAQxttmpWoo=
Subject key identifier: C1:DE:41:AF:7B:98:58:DC:03:0C:D3:6C:15:75:4D:47:D6:76:60:94
Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE
Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE
Certificate serial: 0C2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
Manifest number: 0C27
Signing time: Fri 31 Jan 2025 18:16:47 +0000
Manifest this update: Fri 31 Jan 2025 18:16:47 +0000
Manifest next update: Fri 07 Feb 2025 18:16:47 +0000
Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: XdJa1RxwVzvy2nw2SDwGX3GJyFxWMgT5B+7i//bmOeI=)
2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3118 (0xc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE
Validity
Not Before: Jan 31 18:16:47 2025 GMT
Not After : Feb 7 18:16:47 2025 GMT
Subject: CN=679d138f-a9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:15:7d:85:98:2a:e7:8d:60:b5:4f:1b:dc:89:
cf:e8:70:1a:a5:b9:47:c0:29:62:88:eb:a1:1b:9e:
d4:67:f4:64:5b:1f:09:ca:62:79:d6:84:c7:8d:fa:
2f:38:3b:6b:f3:28:14:53:47:df:92:c6:65:18:92:
88:e2:5c:71:08:0b:07:4a:2c:42:c4:27:68:bc:d1:
4c:b4:b1:b5:63:15:95:6d:be:b1:bf:fb:15:7c:eb:
f6:44:d9:0d:b1:93:45:4b:fb:69:01:71:f8:c1:83:
4b:99:23:7c:23:b1:bd:86:1c:dd:95:45:cc:fd:d9:
cf:50:0e:a5:2a:c8:25:b9:bc:98:ed:5d:a1:e7:93:
53:db:c7:e3:c6:25:5b:b8:91:90:d2:64:c5:49:f4:
33:74:79:74:f9:4e:63:cf:32:52:a2:03:e1:43:74:
85:59:a2:e1:12:04:f6:4a:a0:93:bf:2c:8b:d1:62:
32:a2:5f:67:dc:4b:50:22:ac:bf:b6:bf:1b:07:1b:
2a:43:02:78:8b:e6:b2:07:f3:7b:f9:e4:0e:11:7c:
5b:fd:48:1d:4d:aa:82:0d:7b:fc:b4:4f:c1:9b:b7:
c7:94:27:d6:f3:db:2e:46:07:f4:34:cf:de:67:32:
5a:0d:7c:31:de:27:d8:a6:a5:59:06:65:2a:e6:08:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:41:AF:7B:98:58:DC:03:0C:D3:6C:15:75:4D:47:D6:76:60:94
X509v3 Authority Key Identifier:
keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:04:bd:85:b8:36:73:6b:d1:96:e4:2a:b7:45:5d:1d:14:dc:
ee:3f:e5:d6:51:dc:88:a4:44:7f:b3:fc:b4:df:5f:d8:96:48:
62:76:e0:0a:d9:3d:0e:71:3b:d8:bc:c1:d6:77:30:25:ff:70:
d0:c4:a4:13:0d:7e:e1:7c:92:05:35:5a:16:54:2a:03:39:70:
b7:56:91:3f:3e:20:99:13:b6:ab:0e:9a:31:dd:8b:a3:20:d7:
ae:a4:28:72:d3:57:82:87:4b:bd:31:51:14:c7:19:81:78:53:
f5:e2:4a:0f:a7:85:ab:eb:33:76:1e:4c:dc:c5:61:72:2a:e3:
f0:53:38:18:36:c3:14:3a:67:a7:82:0f:5a:bc:f5:18:81:2a:
af:bf:b8:de:62:d2:0c:49:54:9b:a7:f0:a6:88:1e:d1:6a:8f:
f9:5b:f3:d7:52:ea:15:d3:66:bb:a7:8e:01:13:69:e9:59:b3:
97:d2:17:36:7e:60:b7:02:72:fe:e8:8f:f3:3a:b4:71:52:e0:
2a:96:19:e8:24:25:1b:ba:30:32:3d:54:d1:77:41:ad:ba:1e:
f9:a9:82:74:ef:8b:fc:75:79:59:6a:d8:2c:ef:80:0e:5d:24:
66:e6:a0:a5:ba:23:e4:99:bf:2d:60:6c:c4:67:64:22:90:58:
a3:de:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:53:37 2025 by rpki-client