Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
File: C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json)
Hash identifier: 4SPJ9P//4DSoS2Hx+K3sRLf/LUtW506JZGxQwoXZHAw=
Subject key identifier: BE:89:C9:1F:45:5B:57:12:25:F1:75:1E:27:48:D4:C3:15:4F:8B:C1
Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5
Certificate issuer: /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
Manifest number: 1D
Signing time: Fri 31 Jan 2025 06:59:44 +0000
Manifest this update: Fri 31 Jan 2025 06:59:43 +0000
Manifest next update: Fri 07 Feb 2025 06:59:43 +0000
Files and hashes: 1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: mTv/OAY+citqLm5C9DFlV96lOsIALvPFveB1D3W0Zjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
Validity
Not Before: Jan 31 06:59:43 2025 GMT
Not After : Feb 7 06:59:43 2025 GMT
Subject: CN=679c74e0-3b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b1:6c:99:9c:53:c5:8a:23:db:fc:df:2f:5f:
4d:24:5b:dd:a7:1b:92:fc:0b:96:00:29:f1:b3:f1:
5d:45:7f:25:a4:16:3a:7d:01:9e:92:4f:dd:9d:21:
dc:23:5c:a1:2c:4f:a0:69:2a:c6:81:8c:58:b7:a5:
3e:04:64:9d:4e:fb:65:43:57:e5:77:84:88:00:96:
2a:75:39:c0:63:d7:81:38:b7:7c:df:df:32:68:3e:
c3:8b:89:cc:a1:12:4d:97:b5:67:64:48:d1:28:17:
3f:12:f7:1d:37:70:eb:37:93:63:49:e6:c0:bf:eb:
5c:bb:00:d5:e1:28:b7:eb:6a:0b:2c:6e:16:4e:92:
74:27:1e:f7:e6:b6:d3:b1:e9:05:25:07:a7:a9:80:
96:2a:4f:a6:77:c6:8d:89:5a:e4:bc:78:a6:4b:96:
58:cb:de:20:43:1f:1a:b8:ec:b6:a6:36:ec:e9:be:
16:30:34:7c:24:09:76:b7:15:92:e4:38:a5:97:fc:
af:8b:f3:91:66:f7:dd:5a:87:1b:88:3b:41:7d:99:
8c:e4:ef:a2:05:a0:1b:b1:7c:9c:54:17:6e:f3:36:
fa:a0:5b:b8:6d:53:dc:01:13:70:27:be:af:c9:16:
10:0a:1e:f0:91:54:74:65:bd:f4:90:c2:c2:91:66:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:89:C9:1F:45:5B:57:12:25:F1:75:1E:27:48:D4:C3:15:4F:8B:C1
X509v3 Authority Key Identifier:
keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:e7:9c:56:df:47:92:62:02:9c:11:cc:ff:3c:8c:ae:da:8c:
4a:9d:ea:c9:26:98:9f:24:d2:51:67:db:40:4e:58:6f:27:04:
14:50:8e:fb:3f:c0:69:3a:99:da:68:3f:eb:f0:e5:79:47:5b:
51:dd:57:07:ba:7a:01:a1:2f:4b:6c:1b:69:d4:c4:c1:49:bd:
86:b2:10:ba:5d:45:46:73:69:ba:8d:81:f6:eb:06:9c:31:26:
25:f3:7f:e7:aa:ab:a8:fb:af:16:49:c6:8b:f4:5c:d8:f2:ba:
f6:50:fb:5d:c6:f8:60:5e:de:78:af:e0:bd:06:57:72:7b:84:
b9:6b:ce:28:ce:76:14:b8:1a:50:18:26:40:6f:50:25:95:df:
51:77:7c:22:5c:f9:61:16:d2:0f:b1:81:bf:3e:78:aa:b7:d7:
32:4b:c4:4c:ff:71:49:4a:87:b5:2c:96:42:41:b6:00:31:89:
f7:4f:b4:27:58:3b:6c:d3:23:be:10:0c:b4:a2:fd:07:9a:3a:
d2:e1:bf:a5:82:08:91:82:3d:06:fa:bb:6c:08:b7:5b:42:5b:
27:96:d5:9c:12:c1:ac:9e:a8:c3:f4:b6:16:49:f9:b0:9c:e6:
3f:d0:c9:92:88:43:f9:96:42:0b:39:0e:90:5d:c8:6d:4c:3f:
6b:75:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:43:06 2025 by rpki-client