Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
File: We3oFpsKLDIUaf8RsWKL3gwfLEE.mft (raw, json)
Hash identifier: 3h/8hJNHLTeEA03dGLhXtlnphmcLVsUqJCSzAon5ZxM=
Subject key identifier: B8:59:C8:63:B3:31:9A:2F:3B:A6:C7:6B:2F:E1:60:50:F4:A3:8C:4D
Authority key identifier: 59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41
Certificate issuer: /CN=A91DEFAF/serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41
Certificate serial: 06C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
Manifest number: 06BE
Signing time: Thu 30 Jan 2025 22:06:04 +0000
Manifest this update: Thu 30 Jan 2025 22:06:03 +0000
Manifest next update: Thu 06 Feb 2025 22:06:03 +0000
Files and hashes: 1: We3oFpsKLDIUaf8RsWKL3gwfLEE.crl (hash: zXxLaKBbWp9zFoYMW4MMWaMenVn0kx6xni7edDzh2xk=)
2: A793BA7E492D11EB8BE07D54C4F9AE02.roa (hash: rr5k3fKZgvDyXFLnJfEeotntvMNKxGcDJEuXf2w7Hns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEFAF/serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41
Validity
Not Before: Jan 30 22:06:03 2025 GMT
Not After : Feb 6 22:06:03 2025 GMT
Subject: CN=679bf7cb-1aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:fd:03:45:af:35:1a:b5:3d:bb:3f:db:4e:
9e:d8:8e:9a:16:ca:9e:70:c3:e2:d7:3c:27:87:4d:
70:fe:63:ff:73:a5:4d:1f:58:b0:b1:ec:33:65:41:
e8:0d:b8:fb:73:8d:20:9a:44:31:56:b5:f0:d2:52:
04:6b:ca:0a:ad:99:38:d6:45:e3:99:13:69:67:38:
84:c3:a2:e3:77:6c:0a:87:c3:4c:29:29:74:e0:b7:
f1:bc:36:b4:04:2a:bf:47:e6:30:f0:ea:9e:53:f6:
33:4f:7f:7e:00:de:7c:71:af:4f:51:0a:78:07:18:
16:2f:d9:1f:1f:46:f3:c5:d6:91:78:da:26:43:ce:
e3:15:f2:c8:38:bd:87:48:3c:91:cf:87:3a:35:61:
a4:4c:5d:9f:5c:f5:47:54:cc:04:55:3f:fb:3e:6f:
ce:91:10:e3:9d:a6:a0:78:24:67:f5:b6:3f:62:e5:
ca:8f:b0:4e:66:71:ac:69:e5:dd:85:13:f8:ae:6f:
a2:d2:1a:14:04:38:c5:1b:74:12:7b:ff:9f:30:42:
06:61:07:ef:9c:18:f9:46:48:86:60:0c:35:50:a3:
e4:0d:64:4f:ec:42:7e:b1:ec:db:da:c3:89:be:4c:
6e:7f:a9:d4:bd:1c:4a:5b:bc:44:39:4a:43:88:e6:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:C8:63:B3:31:9A:2F:3B:A6:C7:6B:2F:E1:60:50:F4:A3:8C:4D
X509v3 Authority Key Identifier:
keyid:59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:e3:1f:b4:b7:40:6b:ce:a2:f9:31:6a:c8:c2:33:3f:39:73:
24:3c:c4:16:9c:a9:b8:55:2d:25:84:2f:37:f8:77:05:68:3a:
9d:48:c0:cc:f3:5f:c1:ea:5f:9c:c9:1b:07:91:d5:7f:94:2b:
70:c9:f3:d0:10:72:69:3a:4e:3a:f0:f0:12:ec:0f:b0:52:68:
bd:36:8d:b8:e9:18:e9:a2:5f:2b:27:97:85:84:20:c7:d2:78:
87:fa:82:62:c1:f6:bb:c5:3d:cc:6c:e5:d2:34:1b:48:7c:71:
80:ed:96:23:4f:55:70:fc:a4:c0:45:79:54:2e:93:3b:34:4d:
38:00:7c:d8:8d:62:6f:38:3a:f3:42:18:df:68:c2:1b:e6:b6:
87:0c:55:c7:a6:61:6e:49:00:cf:0c:2c:5d:b9:b4:1c:28:95:
12:fd:52:df:2e:a8:f4:0e:44:ac:ec:64:32:e1:3b:b1:3b:11:
61:8a:9c:a7:72:ae:28:6c:40:fa:19:46:03:42:5a:f8:1b:10:
7b:98:67:7e:8c:8f:c3:a4:9e:07:8f:5e:40:06:10:5e:cc:7f:
d8:56:a9:95:36:0c:29:18:23:bb:67:0a:f0:58:0c:0e:d1:2a:
62:fb:0c:51:52:f5:27:81:15:b5:00:14:f4:00:b7:a1:4c:da:
fa:59:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:55 2025 by rpki-client