Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json)
Hash identifier: ubWnPSj2RxEis6h+mxSPCK4O07hYrcHetL/JwCYfW+A=
Subject key identifier: F4:17:1A:1D:FE:32:2F:34:42:70:5F:80:0E:A3:A4:BA:62:83:15:AA
Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Certificate serial: 1ED2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
Manifest number: 1ED2
Signing time: Fri 31 Jan 2025 16:02:11 +0000
Manifest this update: Fri 31 Jan 2025 16:02:11 +0000
Manifest next update: Fri 07 Feb 2025 16:02:11 +0000
Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: kHH/kLD8Qsn1gSw5qaZx2KriZ4Q7+qHorGf58MzH+bc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7890 (0x1ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Validity
Not Before: Jan 31 16:02:11 2025 GMT
Not After : Feb 7 16:02:11 2025 GMT
Subject: CN=679cf403-4168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:ac:a7:fd:b3:83:d0:8a:5a:31:2c:e5:67:
1c:d6:91:45:6e:82:87:6a:67:d0:75:19:35:34:f0:
64:78:bc:d2:92:18:86:de:4d:fc:4e:87:33:f8:92:
05:d5:01:55:5b:3e:0f:2c:5d:c0:02:d3:67:dd:c7:
be:37:4c:40:68:a4:4f:ac:e5:d9:c9:81:c9:6c:89:
fd:32:5d:73:0c:6a:44:0e:7b:c3:a9:13:d3:ea:94:
7a:ee:4e:d9:be:62:bc:0d:f3:3e:32:56:d2:9f:1a:
f7:dc:a0:5b:27:a0:0a:e0:6c:90:b7:f3:91:96:7b:
6f:05:94:94:d9:17:e7:f2:5f:e5:cc:79:1a:3b:12:
90:d6:b4:b4:15:8b:98:14:d9:88:58:39:14:74:30:
d3:b1:5b:a1:4d:9d:59:8d:69:bf:ba:ab:1c:e4:01:
d0:2c:ce:04:14:15:00:8d:34:8d:8f:58:aa:d0:e9:
79:65:2a:6f:a1:1c:21:cf:8e:45:07:d7:53:81:c4:
7c:6f:0f:23:e3:65:eb:22:0b:04:a5:18:f7:5c:db:
c3:06:71:38:92:31:a6:d3:42:ae:69:13:42:74:eb:
76:c2:b8:eb:3a:7f:65:91:d8:d9:2b:74:90:8f:8e:
7d:73:56:d6:58:0a:bb:0f:60:4c:18:c8:0c:c2:f5:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:17:1A:1D:FE:32:2F:34:42:70:5F:80:0E:A3:A4:BA:62:83:15:AA
X509v3 Authority Key Identifier:
keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:d7:cf:bb:0c:93:2d:1b:af:a7:4f:4a:c3:41:c0:3b:79:46:
df:ac:f0:20:b9:b1:05:f6:8a:d8:00:3a:f5:24:9a:77:bb:92:
7e:4a:27:59:ab:eb:ad:5f:72:05:63:fc:55:5d:93:98:6f:3d:
a7:8c:14:89:61:d0:0f:1e:03:78:f6:8b:48:ec:4d:07:9f:b1:
be:24:5f:a6:25:98:7b:d2:36:71:b5:20:51:3e:13:7d:97:89:
b9:40:f3:74:f9:b9:f0:a9:80:2d:e0:be:67:2a:4f:79:06:7e:
dc:d9:9d:52:f3:03:b5:d1:55:ed:8c:0f:a0:82:52:fe:e0:17:
6f:98:7f:d5:14:7a:c0:2a:bc:bb:e6:c7:aa:06:a3:e0:28:ee:
66:20:46:19:d4:b8:a0:91:cc:c8:16:89:ef:83:9e:52:b9:41:
e6:26:e1:9f:b2:48:f3:15:44:73:85:c9:81:be:18:4d:be:6a:
d3:4b:f6:f8:e6:03:b1:aa:10:b2:b4:65:2c:a0:27:57:7c:a4:
22:aa:ac:5b:72:b4:b3:d0:4d:9b:0c:88:be:3a:62:41:6e:1f:
82:47:f7:5d:61:7e:39:ff:f3:ec:b2:c4:b6:48:20:4e:35:0d:
fc:1b:fe:07:a2:35:2b:3a:ba:4b:a9:91:a7:80:f0:36:3d:35:
e0:ff:61:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:44:12 2025 by rpki-client