Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
File: DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json)
Hash identifier: pzXgY1PYhx4htyZb0ouN2f94XKFQRRlX+dSzGyYP1jU=
Subject key identifier: 59:50:6F:08:E6:3A:1F:27:FE:E8:A4:DD:59:E5:0A:A3:C5:0F:0E:E6
Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46
Certificate issuer: /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
Certificate serial: 043E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
Manifest number: 0439
Signing time: Fri 31 Jan 2025 00:20:42 +0000
Manifest this update: Fri 31 Jan 2025 00:20:42 +0000
Manifest next update: Fri 07 Feb 2025 00:20:42 +0000
Files and hashes: 1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: mcZd7LVNMh2di3+yhq7CTBPahwGsxecrJF1grgCdIPw=)
2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: /gF/xK28sNelpy3YvqWdqKZg63snceMhv1ZlXEV6p+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1086 (0x43e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
Validity
Not Before: Jan 31 00:20:42 2025 GMT
Not After : Feb 7 00:20:42 2025 GMT
Subject: CN=679c175a-c496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:53:85:33:f9:a7:a3:56:78:cd:a0:c3:ed:
09:93:ae:f5:1e:f2:81:aa:74:16:4d:69:ff:77:ba:
a0:98:6f:ed:1f:ac:d8:e4:7b:f5:76:a5:ba:dd:37:
28:0e:d6:12:93:f4:9f:31:97:55:e2:02:fe:66:64:
90:f6:c0:17:03:72:81:20:dc:71:5c:92:0f:d5:24:
10:bd:d6:3e:2f:bc:6e:56:99:54:10:2e:1d:76:c9:
3d:f3:ad:1e:bd:bd:7a:00:3d:be:27:da:2b:f3:3b:
4b:78:7d:9f:40:af:3e:52:1c:88:c9:29:2b:64:d3:
02:89:9e:30:a2:b4:6a:dd:40:04:96:2e:9e:11:fc:
b8:03:a0:5a:df:5a:6d:9c:1f:03:cc:d4:b3:66:a5:
19:ac:09:22:6e:9c:98:0a:89:42:aa:d0:88:0e:dc:
96:8d:80:5d:b3:60:e3:d6:cc:23:50:d4:0d:89:23:
f2:8c:e7:fb:8b:58:28:b8:31:02:60:5d:00:8e:c8:
c6:64:a1:bf:35:1e:04:88:f7:b8:c0:df:e0:9e:6e:
5f:a8:56:ce:2a:f7:21:46:56:a3:6e:b7:96:87:05:
1e:96:4a:aa:a9:86:45:ea:35:a1:00:07:48:a4:a7:
e9:33:46:2e:1f:05:67:e1:7a:11:e8:2c:a9:52:ae:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:50:6F:08:E6:3A:1F:27:FE:E8:A4:DD:59:E5:0A:A3:C5:0F:0E:E6
X509v3 Authority Key Identifier:
keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:03:15:27:cb:eb:93:be:f1:d8:8f:31:23:fa:33:b0:5a:65:
63:3e:1f:85:9b:2c:44:17:b1:08:80:ae:c7:51:79:14:93:8d:
d1:9b:4e:13:c5:2f:95:b0:0f:25:ca:95:eb:2d:68:b5:a5:1d:
50:6f:f6:b4:ca:7a:e8:f3:26:75:e2:e7:f7:39:00:2d:f2:0f:
e6:49:d2:aa:4d:46:b5:23:c5:b1:80:eb:e6:c9:85:a7:61:31:
e9:2e:12:8f:77:2e:71:a1:c5:f5:d0:93:a8:50:e7:66:de:ed:
36:30:bb:67:50:8c:46:b1:a9:77:3a:c3:f9:c8:23:aa:1f:5e:
bf:7f:dc:b4:53:40:32:10:84:f0:d7:20:a8:fe:8b:05:9b:7f:
68:05:ea:0a:f2:44:ef:2d:57:e0:0e:30:47:d5:b2:c5:8a:c5:
b7:8f:c7:e4:a5:20:e5:0b:89:33:b5:cb:a9:15:bd:af:b8:33:
1c:4d:64:a7:e7:29:32:ef:15:ec:9d:4e:0c:98:2c:3b:8e:f0:
09:6f:4a:2a:62:81:00:1b:af:22:56:52:ed:ac:b5:e4:c0:d2:
23:a7:1e:ee:bc:aa:83:ae:94:b8:c7:d2:b3:34:d4:e9:76:26:
a1:78:01:44:e8:7a:63:86:72:e6:47:73:38:37:af:c8:a0:c5:
6a:eb:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:44 2025 by rpki-client