Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
File: 38I-PZBdDoNoEhlZbQgimmlPrxM.mft (raw, json)
Hash identifier: PENN1hyAyIh4V/2lgT84GxCMkV/3dfxXn7tqZz79HX8=
Subject key identifier: 70:9D:4B:7F:60:80:D4:25:F9:C3:AB:45:0F:E9:01:B2:9D:2C:B4:E5
Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13
Certificate serial: 0DE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
Manifest number: 0DCD
Signing time: Fri 31 Jan 2025 17:52:12 +0000
Manifest this update: Fri 31 Jan 2025 17:52:12 +0000
Manifest next update: Fri 07 Feb 2025 17:52:12 +0000
Files and hashes: 1: 38I-PZBdDoNoEhlZbQgimmlPrxM.crl (hash: 83v/DaTFVh53zMK4n82aBacW/Lg/BjnV7rvAqMo6gV8=)
2: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (hash: 6DLxtAbKI0TdBhmj3SbmREK/S1JyCj5OlF8tz2zn8hE=)
3: AB52C51AB96B11ECB44AC533C4F9AE02.roa (hash: BFItKdByLIEkXoft9kFeiVrhIrvjybyyrxXKRRvzUHA=)
4: AC641C88B96B11ECB44AC533C4F9AE02.roa (hash: TrGSIyh6C09xmAUxJKHOBcNW39FMNadQbNfVuEP5YqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3557 (0xde5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13
Validity
Not Before: Jan 31 17:52:12 2025 GMT
Not After : Feb 7 17:52:12 2025 GMT
Subject: CN=679d0dcc-7daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:bc:c8:e0:05:5a:aa:a9:49:34:39:eb:2f:
c3:4e:5a:f8:2f:65:e9:d8:40:5e:7d:ec:20:c3:ff:
80:f4:8f:43:d0:10:9c:54:69:65:db:9b:36:bc:78:
18:f4:e0:cc:17:f7:4c:6d:c0:7e:9d:97:a5:06:59:
f6:5d:2b:03:c9:c9:54:49:a6:18:82:fb:56:88:0e:
52:b6:fa:ae:3d:f8:0e:19:cd:0b:24:d3:60:15:af:
3f:45:dc:df:b7:f7:80:96:ed:3e:70:4d:b0:23:ca:
c6:db:7d:95:75:82:79:81:c2:15:8a:61:38:22:b4:
6e:6b:d5:42:c8:6a:c8:11:db:5c:d4:3c:22:31:33:
90:eb:45:fe:94:01:fd:4d:6f:85:eb:ad:28:10:47:
c7:ad:dc:9e:b2:45:d9:f8:d1:d8:3e:b5:70:d5:0e:
39:f7:b2:8f:e0:ab:62:04:d9:a8:da:b2:2b:81:bd:
ac:7e:8f:14:4a:92:c8:ee:65:16:dd:db:6b:c3:20:
29:c3:ab:1f:92:38:7d:15:81:ba:a6:61:ec:a2:c5:
2b:17:84:de:28:4d:cd:30:8f:09:c5:4f:03:98:c9:
eb:7f:81:5c:5c:74:b1:2d:a2:47:fd:81:7c:b8:5b:
fc:01:26:44:fc:e3:97:86:0f:8f:10:1a:74:44:58:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:4B:7F:60:80:D4:25:F9:C3:AB:45:0F:E9:01:B2:9D:2C:B4:E5
X509v3 Authority Key Identifier:
keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:41:62:63:f2:ee:92:86:09:40:78:08:73:f8:f4:bf:54:30:
8e:49:4b:dd:4e:55:4b:47:e4:bb:18:c7:7f:2a:36:42:a3:1b:
7f:3b:6d:89:4e:ad:8f:11:8d:19:53:5e:90:13:f1:83:b8:e5:
87:b5:71:6c:a7:f5:68:f9:52:7f:70:0c:e6:3f:7c:2a:ee:23:
77:87:bd:d5:90:c7:19:3f:c8:24:c5:c4:eb:0f:d1:92:8c:dc:
f7:5d:99:cf:de:7d:a8:c7:21:54:b1:6b:7d:23:51:92:f1:10:
44:67:93:33:5b:92:86:b7:44:f6:26:e0:23:00:90:eb:7c:93:
6a:ba:02:5f:d9:32:f3:d6:46:d1:f6:a2:5f:78:e8:f4:aa:4d:
d9:37:6b:9e:68:70:c0:bc:ff:4b:59:17:37:e7:a2:c6:51:4a:
60:b7:e8:2b:10:d9:18:cb:cd:4a:17:40:5c:98:49:76:71:c2:
9c:49:1b:76:db:86:d9:e3:41:35:af:10:d4:38:ce:e6:b8:91:
b9:08:3c:19:a0:0b:8a:bb:ca:b5:44:dd:5d:74:91:a2:e2:86:
8d:6e:c0:0d:25:a4:ae:4a:a1:51:5b:b2:2d:4f:74:25:63:8a:
6d:28:9d:c6:5b:5c:6b:4b:56:c0:e2:1f:25:b3:36:3a:70:5e:
d8:24:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:50:51 2025 by rpki-client