Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File: b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier: XE2lLJCfYQWcrK9+p343aJDEAZM9r2ZQN46HFNc3mcY=
Subject key identifier: F0:12:82:D4:EE:44:54:D6:A7:59:1C:1E:D1:2E:42:2C:06:5C:3F:B9
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer: /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial: 10E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number: 1D07
Signing time: Fri 31 Jan 2025 17:17:52 +0000
Manifest this update: Fri 31 Jan 2025 17:17:51 +0000
Manifest next update: Fri 07 Feb 2025 17:17:51 +0000
Files and hashes: 1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: PEIW0GP3g8amRzkS+7F2L1sctwB8+yn+vouLgCT5YNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4325 (0x10e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Validity
Not Before: Jan 31 17:17:51 2025 GMT
Not After : Feb 7 17:17:51 2025 GMT
Subject: CN=679d05bf-1543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:54:f6:32:90:67:88:76:5b:6e:0e:01:8a:
b4:93:69:0d:63:c9:8f:86:6b:05:d7:9c:eb:69:51:
f5:1f:0c:0a:a4:59:b3:65:b2:2e:f5:c5:0c:a9:05:
6f:d1:bc:5d:cd:5b:c4:97:c9:ba:1e:25:f6:38:38:
75:cf:de:64:33:e0:a4:5d:b0:75:7d:6e:26:9d:50:
6d:76:f5:83:cc:d1:5a:77:04:63:4b:4f:b0:87:16:
66:b2:d2:bf:58:42:41:14:ff:98:3c:1b:1c:72:81:
ae:49:62:81:c4:e7:b2:2d:54:bd:da:07:19:42:49:
f0:e0:8c:da:19:eb:51:31:45:76:5f:4d:2c:b7:d6:
91:9b:51:b5:68:61:44:a6:15:26:da:db:c2:c1:7f:
77:3a:56:d7:27:3f:ae:0c:17:e8:b4:1a:48:49:fd:
c0:62:67:58:d1:a8:65:d9:b5:1e:3c:df:61:ea:f2:
e6:4e:73:e9:35:0c:d2:0e:0e:49:fd:3b:d8:63:06:
92:e0:af:9d:1f:77:ad:a4:f6:d3:af:8b:f3:75:48:
a8:16:03:d4:ff:69:e1:02:c5:8a:9e:5a:ba:f2:80:
4f:7a:ad:e0:97:e2:92:04:c8:22:39:a4:c3:1b:80:
4d:a4:50:71:92:ff:3b:d0:09:80:2b:b0:4a:74:6a:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:82:D4:EE:44:54:D6:A7:59:1C:1E:D1:2E:42:2C:06:5C:3F:B9
X509v3 Authority Key Identifier:
keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:75:0f:e2:e0:49:75:9b:d2:ac:ee:4b:20:7a:5c:e8:c8:df:
5f:7d:02:30:63:93:f0:ea:3b:76:0d:6b:fa:87:01:fe:9b:c2:
5d:f9:db:62:77:97:14:83:10:a5:54:5b:da:7a:42:30:7d:94:
3f:d2:e2:c9:b7:d9:9d:ed:99:27:9c:05:0b:59:19:38:ba:6f:
48:6f:00:b5:ac:0f:d3:f3:53:81:72:bc:18:39:d9:7d:0d:34:
6a:08:13:a2:38:98:03:0e:62:d7:2b:26:b6:07:88:c4:6f:f9:
70:1d:39:63:15:cb:a2:f6:77:06:e2:bc:a8:49:58:56:08:0a:
95:a3:3c:7a:0b:c6:9f:ff:39:36:34:4d:9f:85:50:58:cb:4a:
b5:eb:32:25:44:13:90:59:a9:3d:4d:0f:05:e1:04:96:81:08:
6b:01:f7:d0:7b:36:ba:fd:34:ac:d3:1c:ea:94:94:24:14:41:
16:0e:fe:8b:6c:a2:b5:00:2d:d5:92:20:b4:22:b0:d9:bd:48:
be:02:cf:08:b4:4c:e2:d8:dd:3b:a7:76:73:f9:23:11:23:ca:
0a:33:49:cf:c4:cd:d9:e8:62:04:a3:c2:12:6c:43:d7:98:3c:
b7:18:f5:e7:59:aa:7d:f3:7b:d9:8e:63:c2:f3:0e:f1:16:2a:
34:de:f6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:46 2025 by rpki-client