Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json)
Hash identifier: q5a1p/PzwVMyeJzVCayNwsKhF6CL/SPJyvCbo2lrI4A=
Subject key identifier: 34:85:23:99:98:FA:F6:0A:B4:D0:51:D6:DA:31:76:A3:7C:0E:C2:88
Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E
Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
Manifest number: A3
Signing time: Fri 31 Jan 2025 05:20:18 +0000
Manifest this update: Fri 31 Jan 2025 05:20:18 +0000
Manifest next update: Fri 07 Feb 2025 05:20:18 +0000
Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: KvgDePPN9SUbnP22yQQm4gAq9mgHPFpqyt+XqSOztgA=)
2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: OhwAMmDXpoUwiIlu+NNwWEG2Mjf5q973vVgDZWZTt/I=)
3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: zTFWSulVee4Ly8DKhZ3WsgppSiRMvqo0mmrNlUemSBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E
Validity
Not Before: Jan 31 05:20:18 2025 GMT
Not After : Feb 7 05:20:18 2025 GMT
Subject: CN=679c5d92-8e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:97:2f:3a:ba:9f:93:75:f1:31:8d:4f:9c:
ff:40:b8:80:3e:1d:49:3c:c8:35:46:1a:55:e0:45:
f7:26:03:32:62:07:0d:f1:67:54:67:8a:82:e6:12:
cd:79:c5:78:11:05:a2:ea:01:55:13:d7:93:fc:f7:
d1:9c:24:2c:40:a7:e1:de:c8:4e:52:3f:62:db:83:
01:7f:32:5c:e6:27:30:03:4b:88:2b:67:bd:12:d7:
e5:84:5c:62:d8:05:2c:d8:73:b4:d3:a1:ce:f4:9e:
05:cd:d4:a4:2e:08:87:34:9f:d9:a4:76:0c:a7:39:
db:c8:f4:b7:1d:d3:d1:b9:97:bf:ff:30:4d:98:ee:
7b:da:6a:69:08:0a:4f:42:e0:c2:f0:db:41:d3:a7:
09:b5:65:04:12:79:62:f3:bc:96:55:66:2a:b5:27:
14:d5:1e:f9:33:4c:9f:c7:c5:a8:2c:2e:d5:d1:a9:
41:b5:79:d1:4b:ac:fe:f6:31:b1:b6:8d:6e:b8:4c:
15:c6:32:29:a1:22:fb:92:eb:44:fc:70:a2:bf:7e:
74:e9:79:f1:b4:d9:72:14:e7:8b:09:fd:c2:9c:1f:
a0:2f:d4:7e:af:f8:0d:ed:a9:b7:3b:c7:6e:c5:0f:
89:a1:e0:1c:12:aa:fa:3d:b5:a3:47:ec:93:f2:78:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:85:23:99:98:FA:F6:0A:B4:D0:51:D6:DA:31:76:A3:7C:0E:C2:88
X509v3 Authority Key Identifier:
keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:99:f1:c0:54:d7:35:a2:2b:a0:5f:55:8d:f6:bb:c8:05:d2:
2a:0d:e3:ce:7d:b1:9b:47:a0:70:fb:dc:57:cd:d6:8d:fc:4d:
a6:2b:82:47:be:ce:79:c0:72:f4:e0:08:1a:5c:0f:2f:35:fe:
03:92:1e:a1:ce:61:c6:a2:04:c3:3d:c1:38:fc:f9:d5:93:43:
d8:b7:7c:a6:6d:39:a3:b0:11:78:1c:87:a2:e3:20:3e:29:b4:
fa:55:41:28:9d:38:1f:3a:ab:f2:27:a9:55:6e:f5:a4:de:5a:
43:75:b2:dc:d4:55:0a:18:95:de:5b:07:9e:2f:63:10:89:c1:
be:43:ea:88:9d:33:29:93:0d:17:6c:b0:d0:18:fd:88:82:bb:
50:6e:3a:2c:86:c7:de:56:fe:7c:18:7d:6f:27:e0:0a:aa:ef:
9e:42:c3:22:84:11:f0:2b:e3:48:19:d5:4f:4e:41:50:1c:dc:
af:42:2f:f5:91:92:85:d0:9b:03:f2:d1:5e:8a:ea:cb:5a:a3:
af:88:fe:1c:5d:9f:e3:a6:84:cc:4d:be:51:a7:50:1c:0b:65:
7b:44:7b:b0:28:c3:80:34:b9:ab:d9:7c:9e:dd:5c:c2:bc:2f:
0d:b7:0a:06:80:c7:61:1e:dd:fa:a3:1c:8b:d1:f3:50:ed:7f:
76:f2:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:03:11 2025 by rpki-client