Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json)
Hash identifier: R4j5rfYJ8tDqx/QsHVwj4oUDbgW6KpqUBvieacTY7Ys=
Subject key identifier: CA:9E:01:75:E7:2A:37:90:1E:49:92:F5:67:43:D2:70:BF:6E:B8:49
Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Certificate serial: 0C5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
Manifest number: 0C55
Signing time: Fri 31 Jan 2025 18:12:57 +0000
Manifest this update: Fri 31 Jan 2025 18:12:57 +0000
Manifest next update: Fri 07 Feb 2025 18:12:57 +0000
Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: s3wxvb1vzl4/pe2NPn3/03TXoPxcTgeRXx7nuyCR6Wk=)
2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: gtQBI4S78oRGzDerxcGVhnFswIklyjzdp1Q/C1it5xw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3163 (0xc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Validity
Not Before: Jan 31 18:12:57 2025 GMT
Not After : Feb 7 18:12:57 2025 GMT
Subject: CN=679d12a9-bbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:47:b9:bd:dd:c1:a6:9a:0e:79:20:8b:f2:
c1:7f:9e:d9:89:cc:4b:bc:4e:43:f4:39:fb:c9:b5:
48:bb:e4:bd:85:7e:f4:55:ad:05:bd:d6:04:7b:58:
c6:b2:e5:66:f6:a7:e8:44:62:cf:dd:3d:ef:e1:2c:
44:b6:34:2f:76:26:d4:b4:e9:d3:36:a6:17:7d:6b:
61:68:8d:fc:32:87:ca:7f:b0:a3:85:6d:5d:6d:7d:
4b:aa:bc:34:79:f8:75:47:9b:3a:78:43:69:2a:96:
08:fe:b6:e8:cc:f9:7e:34:3b:9c:ed:10:44:c7:44:
39:d2:fc:82:55:af:aa:40:87:d2:26:31:c1:a0:45:
3f:38:0f:d2:49:be:c1:80:80:62:29:d7:c6:ac:70:
61:84:0d:8a:47:a5:66:a8:73:5d:6a:87:f4:8f:98:
af:f3:84:1f:c5:d5:01:55:6e:a2:a9:e9:be:10:44:
69:d3:7e:23:ff:fa:40:0c:73:90:c8:37:b0:5f:20:
f1:47:d4:49:87:3e:2a:e9:2e:31:dc:0c:5f:f4:b6:
6f:c1:9d:a2:52:2f:dd:7a:46:20:f6:2d:3d:a8:34:
35:31:ec:88:3c:db:e1:bc:cf:73:dd:02:7a:51:6f:
d1:ef:39:ce:32:41:e7:8f:44:2b:40:f6:d4:c1:7f:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9E:01:75:E7:2A:37:90:1E:49:92:F5:67:43:D2:70:BF:6E:B8:49
X509v3 Authority Key Identifier:
keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d6:c4:28:5f:2c:9e:d4:9f:42:d5:53:a2:a4:09:e0:4d:b4:
6c:a0:a0:2e:f3:0e:90:a0:5d:99:89:08:72:dd:37:9c:c3:40:
3f:2a:77:72:9f:2d:f8:83:07:a7:53:9c:28:33:55:ce:4b:79:
96:2e:e9:69:03:ee:c1:c6:89:99:59:c9:f0:52:c0:fa:5f:7f:
dc:57:87:33:fd:69:cd:c9:1b:3c:6e:de:3d:1e:39:ae:ff:a0:
b1:ed:64:a6:0a:18:c0:64:41:95:c1:ab:b3:e4:37:6b:87:24:
8a:82:f6:8d:d1:1d:43:d4:d3:ec:e7:79:c9:8a:2a:fd:f7:20:
79:dd:5e:f9:8f:8e:7f:25:bf:94:54:4e:e7:f1:d2:95:ed:29:
6a:07:48:ec:65:7e:60:60:54:8b:70:ab:5a:83:d8:22:b4:53:
20:df:25:4f:52:64:fc:e6:30:c6:05:5a:95:2a:1d:c0:dd:44:
23:b8:bf:e0:de:d4:4b:35:7a:5e:78:74:d1:2b:35:36:e9:38:
1d:b9:72:0b:31:4d:78:93:39:79:db:8e:43:08:50:1b:6e:de:
14:08:5e:dd:85:df:2f:31:34:f2:84:af:8c:72:7f:70:9d:71:
62:c6:c8:60:9b:02:41:e5:67:95:5b:a0:16:c9:8d:ed:63:e9:
64:cd:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:52 2025 by rpki-client