Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
File: xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft (raw, json)
Hash identifier: +1DbR8YrTvjb5sCPhrFyJ5/DcNRPcSIIv9FSIv92TFY=
Subject key identifier: 9E:A3:1F:73:95:7C:60:6D:18:BF:B5:04:59:12:E4:01:08:7F:AD:93
Authority key identifier: C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36
Certificate issuer: /CN=A91E3BF2/serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736
Certificate serial: 0277
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
Manifest number: 0272
Signing time: Fri 31 Jan 2025 01:43:23 +0000
Manifest this update: Fri 31 Jan 2025 01:43:22 +0000
Manifest next update: Fri 07 Feb 2025 01:43:22 +0000
Files and hashes: 1: xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl (hash: kvQ903dZ5V65qtjAC0YnyfSdar3f2FmQitJYhmJeUSA=)
2: 6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa (hash: jZodcyxZ4nUw78pUbwh5qrFajwuNLHaye10ReDwTgoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3BF2/serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736
Validity
Not Before: Jan 31 01:43:22 2025 GMT
Not After : Feb 7 01:43:22 2025 GMT
Subject: CN=679c2abb-9475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:e5:88:8f:59:82:21:9e:02:91:1f:3a:5f:
76:ae:31:6e:43:56:16:70:46:7f:2c:47:80:fd:1b:
ed:32:54:17:3f:28:38:de:be:a8:0c:1b:c5:e7:39:
e6:83:8f:40:f9:dc:42:2a:72:40:57:86:25:0c:7c:
52:45:a5:7b:26:fd:73:4d:93:43:29:19:1d:ca:68:
8f:4f:4f:34:7f:2f:bf:2f:2c:7f:af:53:ff:d2:d1:
a3:bb:1c:d9:aa:42:f8:63:bf:84:b7:7c:3d:23:f7:
cf:5d:df:ec:aa:61:e6:45:c8:5d:a6:c9:68:20:7b:
73:7e:31:33:fd:a7:91:4f:f8:59:6a:e0:08:6c:8e:
35:84:16:27:ff:57:ae:c3:4d:e8:5c:ff:c1:26:5f:
e7:67:a3:1b:77:84:14:f2:5c:9b:d7:6e:a1:11:97:
de:e2:30:f8:c7:39:a8:91:9f:a8:ca:d5:6d:eb:0e:
71:1d:b3:af:91:1a:b7:34:66:5b:ab:bd:16:73:4d:
b6:6d:73:2b:e3:4b:b8:1d:41:6a:b2:30:65:46:af:
bd:49:0a:0a:75:79:9f:d6:80:9a:32:2b:be:7e:3a:
81:24:34:6e:68:37:94:2d:77:ca:3c:53:4e:ea:0d:
08:1e:8b:13:0c:9e:ef:3d:6b:36:57:58:5c:a8:51:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:1F:73:95:7C:60:6D:18:BF:B5:04:59:12:E4:01:08:7F:AD:93
X509v3 Authority Key Identifier:
keyid:C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ae:64:78:cc:4b:cb:2e:c7:61:a3:c4:a1:85:c7:7a:5f:0d:
e2:90:17:2a:c4:80:97:72:a9:63:bb:cd:16:08:e1:ef:5a:00:
af:e9:1d:af:19:c4:75:93:f6:16:7a:78:22:89:f6:09:a6:03:
26:99:a3:b0:23:3a:77:c9:70:28:19:18:af:03:b5:38:81:9e:
e8:82:52:f0:ec:e5:88:3f:08:12:5b:e9:0a:79:ef:fa:89:17:
56:34:50:d2:f5:56:be:8e:b6:53:d5:f6:a5:cb:63:13:10:24:
46:d6:fe:84:8c:78:0b:8e:63:6c:14:9b:ca:83:fb:d8:19:9d:
6c:c8:02:48:03:49:a0:61:de:1f:87:6b:4b:a6:10:19:05:2d:
ab:a7:31:3c:c2:dd:ac:d2:7f:9d:a6:5a:aa:3a:f5:d7:b9:33:
bd:0e:5b:bf:37:3a:e1:aa:8a:e8:84:d3:6f:b2:6b:15:b1:04:
b0:0c:f8:87:22:f3:84:18:99:71:c5:10:d7:42:a4:a7:cf:06:
cb:29:4e:fb:f6:a5:49:4f:cb:71:bc:5c:b9:c8:5f:df:a6:0b:
47:f2:73:28:fc:42:25:42:24:9c:0d:d4:b1:55:6c:4b:32:a0:
e5:7f:e2:e7:63:57:28:df:2d:e2:ab:c4:b8:85:2e:0c:29:e2:
cc:b9:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:43 2025 by rpki-client