Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json)
Hash identifier: 0VUf4PINd2UgH8MYlbQM9/K0IKdPE05n6QBD3mx30SY=
Subject key identifier: 1D:02:3A:73:2A:7F:18:31:B0:1E:D0:B0:26:98:5B:AA:87:6D:5E:43
Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
Certificate serial: 03C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
Manifest number: 03B6
Signing time: Fri 31 Jan 2025 00:46:34 +0000
Manifest this update: Fri 31 Jan 2025 00:46:33 +0000
Manifest next update: Fri 07 Feb 2025 00:46:33 +0000
Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: daTCjTiUNNYN2PjVyYRSqXAmh1QpdCqBcGUIWfgDFN4=)
2: 6167C26AD7F511EF8E0A8B6EC4F9AE02.roa (hash: UWsKKJORAXKxk0vP0kDgwONbn5LBugLcPgpW8g4naWQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
Validity
Not Before: Jan 31 00:46:33 2025 GMT
Not After : Feb 7 00:46:33 2025 GMT
Subject: CN=679c1d69-ac8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:cc:fa:00:65:c7:70:4c:51:e9:c2:e9:2e:
73:d6:7c:78:b8:df:35:34:50:4f:e0:3e:f6:10:3f:
33:ad:57:a4:13:25:76:f3:0a:03:fe:07:29:d3:d2:
81:8e:cd:b1:cb:9c:e4:e4:47:66:5e:b0:31:01:f1:
9a:40:06:4e:79:8f:1e:5e:5f:86:0b:0b:2e:d7:e1:
b9:ca:01:df:00:97:f0:91:28:43:e3:96:92:48:5d:
f0:1a:b6:8e:1a:35:e2:ed:a1:ad:21:83:b9:90:ed:
d2:d8:5e:6b:3f:ba:f1:1b:90:9b:88:b5:bd:3f:69:
68:b2:af:3b:e1:0b:c2:a1:59:9a:78:eb:c7:fe:05:
f3:58:c2:64:ee:fe:3c:5c:28:1c:c8:77:fe:81:51:
d6:eb:53:f5:d0:22:e2:d9:df:d6:05:e5:51:53:90:
0e:5f:b0:58:9b:3e:07:39:dd:d5:e2:02:e6:4f:4e:
e6:88:80:29:88:93:f1:95:e5:b2:f5:a7:29:3a:8b:
e8:0f:f4:4f:1d:1e:1c:69:d1:5c:fe:10:7a:15:f6:
10:bd:fc:2c:58:31:74:49:0f:bd:d9:ab:52:ef:e2:
8d:9c:0c:84:67:f8:17:e6:92:85:f6:e0:1a:ab:49:
66:71:03:f7:24:16:9d:d9:53:d6:6c:7a:93:c2:02:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:02:3A:73:2A:7F:18:31:B0:1E:D0:B0:26:98:5B:AA:87:6D:5E:43
X509v3 Authority Key Identifier:
keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:93:8c:06:fe:d5:69:dc:e9:29:a7:02:65:df:bd:5e:43:1e:
6f:d7:4c:5d:83:a7:0f:80:9a:21:e3:d8:0a:97:0b:df:09:84:
8b:10:94:68:2d:2b:7f:96:2f:21:5e:99:b0:74:f6:e1:ef:aa:
53:df:34:04:e4:27:3c:86:43:ec:ac:9b:ef:22:5f:90:0f:55:
33:dc:50:42:81:16:18:73:fc:d0:e1:4a:69:d6:2d:6a:bb:2f:
96:02:5a:e2:51:03:b1:cd:2f:be:66:6a:8b:bc:b2:47:8d:4c:
15:54:e4:d3:e6:1c:3a:57:f0:b5:ad:4b:c2:88:c0:98:56:e1:
cd:6d:47:58:85:cc:18:37:55:9d:38:1a:08:e0:6c:b3:b8:62:
80:25:fa:44:8b:13:74:92:1e:41:de:17:cf:d3:27:b6:ec:3d:
27:8c:1a:43:55:e8:94:21:ec:fc:9d:70:17:3a:f2:20:a0:6b:
ae:a2:33:ed:2d:4e:70:e6:eb:a2:61:b7:83:1c:0d:4e:c1:85:
43:f7:28:09:d4:fc:9e:78:cc:71:5b:fb:36:0b:ed:2a:a8:f6:
23:5c:f6:87:db:ce:79:79:75:8b:7a:e4:ce:ea:80:99:20:1c:
bd:df:cc:70:97:d9:f5:22:17:8f:9a:83:c8:ac:41:05:02:32:
3d:5b:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:36 2025 by rpki-client