Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
File: iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json)
Hash identifier: KK3e/pe0c7bxK7rYmVwI6uQ4AHrWoffyVf0Xov1zGKU=
Subject key identifier: 71:BA:1A:6C:6F:7F:0B:BB:BC:60:4D:09:4A:2D:E5:91:9E:4B:41:D4
Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2
Certificate issuer: /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2
Certificate serial: 3444
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
Manifest number: 3444
Signing time: Fri 31 Jan 2025 14:51:49 +0000
Manifest this update: Fri 31 Jan 2025 14:51:49 +0000
Manifest next update: Fri 07 Feb 2025 14:51:49 +0000
Files and hashes: 1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: SC4g90vlf2dmLl1B3VazGxH4XjYWf87yhxJJ1EdnBjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13380 (0x3444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2
Validity
Not Before: Jan 31 14:51:49 2025 GMT
Not After : Feb 7 14:51:49 2025 GMT
Subject: CN=679ce385-3b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:31:b2:a4:49:be:7a:bc:36:b2:e9:53:c2:
89:64:3d:de:51:18:6d:98:8d:80:72:28:82:18:f1:
11:96:c5:a9:1f:22:9a:72:01:60:e7:c6:76:7c:19:
9d:98:b3:ca:69:12:eb:38:78:b0:c9:bc:5d:23:c8:
ac:2d:db:ce:6d:1c:84:60:b1:5b:5c:77:92:73:38:
30:4b:9b:aa:37:55:c0:ad:cf:bf:5a:db:ca:0a:90:
3f:c8:62:27:df:69:28:7f:46:82:ab:21:94:18:a6:
c7:8b:56:d1:86:9f:a0:47:1e:e5:03:dc:9d:9b:b2:
30:f5:53:4d:30:88:4e:7c:8b:fa:50:2e:69:52:8a:
f5:02:c6:0f:35:e8:28:6c:d7:46:fe:b1:de:77:e0:
c3:cd:1b:6c:f0:73:1b:0f:6b:f2:3e:b5:16:11:7e:
29:88:67:d8:fb:ec:d5:70:ec:25:13:9b:6f:12:42:
97:3c:fb:0f:3a:86:77:7a:06:12:ee:bf:79:14:ff:
66:c9:52:80:e4:55:77:f3:a3:f7:1d:84:a2:fe:45:
19:0c:f2:8c:1d:2e:ab:76:3d:c1:80:66:c0:a1:1a:
4f:f6:4e:57:b8:5f:57:a9:77:bb:20:5c:20:03:62:
9d:d9:97:70:66:c7:46:ad:ba:df:00:0d:cb:19:86:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BA:1A:6C:6F:7F:0B:BB:BC:60:4D:09:4A:2D:E5:91:9E:4B:41:D4
X509v3 Authority Key Identifier:
keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:65:34:bf:cb:40:bd:79:f7:a9:7d:e9:69:dd:1e:72:d3:b3:
3e:1b:ae:92:fd:70:7b:7a:ec:2a:59:dd:a0:47:92:df:43:1a:
90:e2:a1:9d:37:3a:a0:9e:30:33:af:06:35:dd:3a:38:55:69:
3d:5f:1f:c3:4a:b7:5c:eb:47:a2:4d:2f:d0:af:9d:ca:3b:fe:
93:56:b9:eb:64:1d:83:32:b9:86:e5:f7:b6:28:6c:0c:53:ce:
65:33:c1:d1:49:aa:2d:db:8a:b9:a9:0b:f6:61:c7:cf:b0:0b:
85:9c:16:3a:b7:86:0d:b7:ee:46:f1:dd:35:01:b1:4c:8e:58:
4c:08:a3:23:75:e5:a9:0c:34:d2:0d:de:4a:b6:dd:5b:47:a0:
b7:c7:e7:fb:02:cd:85:1e:14:d1:b0:17:fa:8b:ce:6e:5a:67:
a5:40:8b:3b:34:78:35:92:4a:0e:4e:ec:95:55:21:f9:44:87:
9a:35:44:bb:1a:cd:d1:7b:db:99:87:e6:5e:4c:5f:57:15:04:
d8:49:7b:8e:87:4b:83:61:57:7e:17:3e:4e:1c:30:d8:8a:ac:
22:c1:a5:65:ac:8d:07:35:38:b8:57:fa:3b:2e:ef:75:72:7a:
5b:8d:ef:60:b0:78:4a:57:a3:80:25:cc:66:35:53:b0:9c:00:
89:8e:6b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:46:21 2025 by rpki-client