Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
File: NDyCcTdhxY6CRQ2UqleWffm0bxU.mft (raw, json)
Hash identifier: 9z+xUGimFkyOihZYrYll2FMReFvdRvW3ckeV21xHeXE=
Subject key identifier: 27:09:F1:37:50:CA:3E:03:F2:1D:55:5E:E9:91:0F:CC:81:D2:17:1F
Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
Certificate issuer: /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Certificate serial: 17D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
Manifest number: 17C8
Signing time: Fri 31 Jan 2025 16:33:39 +0000
Manifest this update: Fri 31 Jan 2025 16:33:38 +0000
Manifest next update: Fri 07 Feb 2025 16:33:38 +0000
Files and hashes: 1: NDyCcTdhxY6CRQ2UqleWffm0bxU.crl (hash: ZRX/IpLC83n3Sa55L13nFhYtfrKINpLpHmxM4CF+0Tk=)
2: 31AA8496B62811E7882B893BC4F9AE02.roa (hash: TzvQgcIEdDiZ2vx98Eai/8pokoL7PkZgm06lLl+dtq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6097 (0x17d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Validity
Not Before: Jan 31 16:33:38 2025 GMT
Not After : Feb 7 16:33:38 2025 GMT
Subject: CN=679cfb63-03a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:1a:f6:30:8f:23:b3:14:b0:5f:f0:62:e5:
3f:7f:59:97:55:47:c0:fd:ff:58:09:fd:df:16:f8:
d1:88:cd:b9:ea:8b:b1:49:1f:c5:82:66:7a:99:04:
33:c0:e3:1f:da:c4:cb:16:ad:77:bb:5d:6d:92:40:
81:51:56:7d:04:74:cd:05:ba:3e:b3:d1:06:9d:43:
66:54:27:6b:a7:bd:07:a6:69:5f:53:e5:99:e3:db:
82:f0:17:47:47:ff:3f:f3:fa:73:d2:36:47:ba:74:
3b:6f:3c:71:9b:22:8f:1e:3e:77:0d:59:bf:91:b9:
8c:0e:ef:f3:5e:6a:c6:c3:a0:6b:96:43:59:d9:e8:
af:fe:8b:e1:04:45:aa:25:64:0a:c4:66:17:cf:69:
2b:f9:8a:18:87:6b:57:50:ce:b3:ac:0d:56:41:1a:
dd:62:fe:ee:88:de:12:2d:ce:8b:0d:5c:6c:6c:1e:
b2:0d:a0:4e:92:d0:8a:74:a4:a7:a1:e0:d4:a5:4d:
4e:54:26:be:72:04:e8:aa:e7:15:1c:53:3c:43:5d:
97:b5:01:10:c5:de:09:8b:55:34:75:d0:c2:28:f5:
44:df:95:15:98:5b:3b:db:d7:f0:f1:fc:15:1c:b7:
a8:23:7d:0f:da:76:1f:bb:03:d5:19:40:22:94:9e:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:09:F1:37:50:CA:3E:03:F2:1D:55:5E:E9:91:0F:CC:81:D2:17:1F
X509v3 Authority Key Identifier:
keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:37:0b:ca:10:f9:14:d2:0b:85:d5:94:43:be:c1:e8:b0:78:
c6:60:ae:81:03:03:df:c2:b0:7e:b6:1e:6a:c2:64:55:91:79:
f2:d8:df:70:1f:d0:c2:17:fc:4c:c4:8e:c8:c9:57:79:40:51:
bc:e5:43:23:4f:f0:d5:58:bd:af:4a:5f:fa:74:d7:a9:15:3f:
3a:40:93:bd:aa:88:35:33:24:ca:3d:9e:15:b3:8c:77:e6:d6:
86:eb:3c:c2:35:bd:84:c4:a0:c3:e4:5c:1b:85:0a:49:63:3a:
fc:96:a5:28:5f:21:e7:7a:08:39:ba:a8:89:af:df:05:a3:e8:
0c:fc:57:29:e9:bd:81:ff:02:3a:90:bd:2c:15:26:b4:f4:b7:
34:2a:63:a5:f4:80:10:bd:e6:bb:d0:b7:d4:96:ba:03:d0:4a:
00:63:8d:56:7f:b8:ca:a5:e2:b1:06:98:d6:2c:91:41:87:db:
0d:8f:ef:5b:f0:1a:cf:06:2e:68:2e:d8:fb:4d:18:35:09:e6:
8a:31:71:05:a5:84:07:d7:39:4d:98:a3:72:24:dd:c5:5f:f5:
4d:37:9d:9b:fb:45:d9:64:43:28:96:d4:fb:c8:76:65:6d:dd:
ae:57:1b:37:c7:3f:e9:cc:df:14:bd:60:5e:fa:d3:17:85:a1:
6d:8a:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:45 2025 by rpki-client