Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft
File: MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft (raw, json)
Hash identifier: bdVCPAw3NgdtReHK80PZA++3Fg/dQSGyt6Yhme+ybo4=
Subject key identifier: 92:03:65:E6:15:24:BF:30:B5:13:33:34:05:2B:61:F9:39:24:88:A0
Authority key identifier: 32:70:F3:AC:D9:71:EE:DF:84:61:75:48:F7:2E:51:E2:2A:50:3C:F8
Certificate issuer: /CN=A91DA023/serialNumber=3270F3ACD971EEDF84617548F72E51E22A503CF8
Certificate serial: 3444
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft
Manifest number: 3444
Signing time: Fri 31 Jan 2025 15:07:43 +0000
Manifest this update: Fri 31 Jan 2025 15:07:43 +0000
Manifest next update: Fri 07 Feb 2025 15:07:43 +0000
Files and hashes: 1: MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl (hash: YUSzO8oYHKblhbWR6ELiCA7IDy7RV6ccU00qWT8alJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13380 (0x3444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA023/serialNumber=3270F3ACD971EEDF84617548F72E51E22A503CF8
Validity
Not Before: Jan 31 15:07:43 2025 GMT
Not After : Feb 7 15:07:43 2025 GMT
Subject: CN=679ce73f-a778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:19:de:58:bf:d8:15:f7:0c:b8:11:80:d5:
94:fb:ae:e2:37:e3:c4:a3:af:43:93:27:04:5d:1d:
bf:1b:99:7b:49:f2:e4:f4:73:53:3a:dd:37:6c:d5:
37:ce:03:fc:e1:f2:7f:dc:3b:be:56:32:ee:9d:73:
e8:56:14:4a:0c:5f:d4:0a:67:bc:4e:02:e6:40:13:
22:85:19:20:a7:de:63:6e:37:4b:a7:84:0f:bc:56:
3b:3a:cc:77:53:a8:ee:74:99:c7:fd:8a:a1:e4:30:
0f:17:28:17:10:26:80:3b:21:d2:0c:a3:0d:1d:45:
ea:25:2f:fa:23:b5:04:7b:c3:4d:79:4e:2a:59:09:
05:6b:1d:96:2e:c4:41:b8:bc:d0:b2:a3:ba:01:a5:
e9:a6:18:09:61:da:1b:18:d1:a6:1e:f3:9a:8f:69:
0a:b0:57:4d:bb:63:8d:02:87:ca:c0:fc:0a:9e:f2:
26:48:3b:b9:31:32:ce:8b:30:b0:2c:26:60:40:31:
8a:28:a9:61:16:a7:a7:4f:e8:e4:35:57:e3:d1:ab:
30:36:94:ac:50:b3:ef:48:35:6d:42:0b:c6:0f:26:
50:b4:a0:3f:4c:c4:20:6c:6b:e6:a0:7f:d0:9b:d0:
49:61:58:f4:c2:85:62:ef:e4:66:ae:b5:16:b4:cb:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:03:65:E6:15:24:BF:30:B5:13:33:34:05:2B:61:F9:39:24:88:A0
X509v3 Authority Key Identifier:
keyid:32:70:F3:AC:D9:71:EE:DF:84:61:75:48:F7:2E:51:E2:2A:50:3C:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:e8:64:19:02:6a:bb:1e:cb:2e:f5:f1:04:65:cf:b8:7a:36:
db:ab:9a:c8:83:5a:5a:ad:06:31:61:50:24:d5:9a:a5:b4:1f:
b0:74:20:e6:00:36:ac:b9:46:a1:13:28:49:3a:b8:ae:95:69:
e9:42:fa:cc:8e:0b:58:c9:bd:8e:d4:7f:f6:60:17:8d:1c:08:
47:9e:f1:53:d4:0b:ce:6b:0c:62:27:7f:16:5d:cb:b4:ba:f2:
1a:37:d1:3f:37:ef:07:1e:e1:2d:53:8d:e6:4c:11:84:12:75:
dc:4d:dd:da:5c:75:87:c1:c6:5b:7d:d6:2b:88:61:02:57:c9:
c9:81:e4:93:bb:c2:80:29:cd:30:8a:08:7e:23:01:e2:7e:e1:
f7:71:fb:82:0c:5b:01:28:b7:4e:69:a0:68:00:33:1c:a9:af:
94:2c:b8:8b:4b:ed:ac:12:32:72:2b:6f:b5:50:87:d1:5e:0a:
99:90:f7:43:39:55:b5:00:0e:df:e4:91:61:32:09:f0:cc:59:
96:fc:de:fd:fe:a8:c5:7f:2c:7f:1b:79:5f:f6:d6:a4:b5:d9:
df:a1:3e:65:bc:18:4d:88:34:19:21:45:40:b3:13:95:fe:a7:
6e:e4:72:0d:d2:21:00:a8:f5:bb:b9:30:2a:33:b1:99:c0:0e:
1e:0c:22:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:45 2025 by rpki-client