Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
File: rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json)
Hash identifier: pwBawJhHxIEd7wLJqE00Lh4Qa5gMQ9sQIP64qli2bTo=
Subject key identifier: EE:10:C1:6F:F5:42:60:7F:74:1E:E0:EE:CC:E7:E4:32:17:84:0A:0F
Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2
Certificate issuer: /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
Certificate serial: 0B05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
Manifest number: 0AFA
Signing time: Thu 30 Jan 2025 19:20:54 +0000
Manifest this update: Thu 30 Jan 2025 19:20:54 +0000
Manifest next update: Thu 06 Feb 2025 19:20:54 +0000
Files and hashes: 1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: H98LQ6gWm+emMIQl3bapc5T/5vFhPKHjsm1YguNMlYM=)
2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: F4+ANWrgSV1BYAbYrEyoAC+HEYBZsl5dMdzlHwWIwy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2821 (0xb05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
Validity
Not Before: Jan 30 19:20:54 2025 GMT
Not After : Feb 6 19:20:54 2025 GMT
Subject: CN=679bd116-8d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:1b:47:6d:ea:6d:4d:79:15:07:2c:8a:eb:
9a:bc:ff:73:e4:e5:8f:fd:d9:da:ea:21:b9:90:26:
2a:85:6b:2f:22:d4:9c:6e:e0:3b:f0:eb:cf:ee:d5:
aa:e5:95:de:27:6c:37:1f:0e:ec:b0:59:3c:44:34:
f2:3e:7e:b6:4e:7d:77:c2:a4:d6:d0:41:b3:2a:92:
e5:1f:6d:ab:49:a4:89:f4:38:d9:2b:f7:95:b6:96:
a2:00:cc:a4:cf:e5:6c:d9:bb:0a:d8:93:00:c1:2d:
6e:26:c0:69:66:21:fe:a7:6c:33:4a:f4:05:aa:1b:
45:e6:db:34:02:f7:9c:22:08:7d:46:3d:98:b7:1e:
de:db:0d:67:99:32:82:58:34:25:c7:15:0b:4d:e0:
39:f2:82:03:2b:59:61:f6:28:c0:79:58:da:06:45:
13:d7:16:3a:3d:b5:ef:62:99:f7:e7:88:43:4a:53:
90:be:85:10:b5:a3:e8:2d:06:8b:8f:f0:1b:cf:fd:
fe:44:a2:02:03:50:93:88:88:7d:cc:79:da:76:83:
ad:c6:5a:15:4e:52:56:0f:52:26:44:52:91:81:0e:
27:ba:a4:d0:2b:fc:fe:40:58:39:0b:cd:7c:73:18:
89:fe:31:1d:d2:6b:f0:ba:44:8c:a7:18:7b:bf:ab:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:10:C1:6F:F5:42:60:7F:74:1E:E0:EE:CC:E7:E4:32:17:84:0A:0F
X509v3 Authority Key Identifier:
keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:e1:c0:42:07:a4:5a:62:77:b4:b9:f1:d6:06:21:7c:45:c9:
70:10:92:20:eb:ee:08:2c:8c:e9:61:b9:08:2f:8c:3b:cc:6d:
eb:05:50:75:5e:13:d0:9b:07:9a:e1:20:8e:5a:1b:73:50:da:
93:1f:18:56:de:f9:e4:84:4e:2b:5a:47:68:1a:3f:b6:d1:2c:
8c:75:9e:38:a2:d5:d7:d9:8f:55:86:9b:6d:2e:5c:d7:77:bc:
24:64:00:bd:7e:2a:4f:56:ca:d3:eb:87:9a:28:61:53:cd:ec:
0e:a0:30:81:00:51:84:46:86:e3:91:df:fc:d4:9d:ca:45:6f:
9e:4a:f2:63:18:61:46:70:b0:fb:06:80:f6:fd:9d:b2:8e:1f:
72:48:38:af:c3:63:a9:d7:fb:49:f7:47:71:bf:af:33:5b:ab:
86:63:f7:67:5e:86:23:f9:78:14:f0:51:87:c6:45:93:f0:6c:
fb:d8:8f:ca:4f:40:f1:92:bf:c7:a3:73:07:a5:cf:26:c8:06:
23:e6:af:15:d5:a6:b7:bf:3b:01:96:1f:de:6f:56:b6:d1:a4:
ff:8a:06:c5:e8:a4:d1:ac:d7:bd:8c:08:66:5c:f7:13:b1:04:
bc:84:12:6d:ca:00:d6:1a:ee:de:9d:e2:dc:21:ad:69:cc:b5:
dc:8c:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:39 2025 by rpki-client