Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json)
Hash identifier: ZzCgPjiZswtz7X6KMul575rhtqfwKCMaGcUP1kLDaTw=
Subject key identifier: F6:81:7F:D2:B4:AD:12:20:17:4B:2C:0C:3E:8E:25:3C:3A:0A:91:70
Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
Manifest number: 013F
Signing time: Fri 31 Jan 2025 03:34:16 +0000
Manifest this update: Fri 31 Jan 2025 03:34:16 +0000
Manifest next update: Fri 07 Feb 2025 03:34:16 +0000
Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: voMyJnlDbadQD12kFG08f8eIYv7X8Acv/O9gUbbibO8=)
2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: 46KG+z6AmefQLHET8V1p05YXMcYFBhvMuy+GbMJb6u0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Validity
Not Before: Jan 31 03:34:16 2025 GMT
Not After : Feb 7 03:34:16 2025 GMT
Subject: CN=679c44b8-3a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:68:e6:9f:94:35:6f:c5:a7:66:85:4b:d1:
b5:b8:cb:b0:09:2d:82:f6:a4:7a:fa:3f:68:ab:8b:
f3:39:e9:76:b9:07:6e:34:08:f0:b6:4c:3f:a3:80:
51:9b:00:4a:8e:c5:81:e1:f5:c5:22:1a:a0:4a:8a:
1c:6b:14:93:e7:b7:ed:a1:86:7f:9a:6d:99:bb:87:
34:9d:b5:5d:3b:57:3a:5f:05:92:35:51:7a:82:64:
c7:69:e8:03:5f:9c:e7:7c:05:58:3f:76:67:d0:17:
bd:2f:46:2f:ac:f8:4f:99:03:78:3f:dc:4e:a1:57:
f8:3b:df:ce:e0:07:5c:63:1c:77:09:39:e1:29:45:
4c:74:22:ce:1e:6d:a0:33:76:8e:87:89:7c:97:43:
b2:95:92:6e:72:38:e6:0f:06:43:96:95:af:56:5d:
c7:2d:46:a5:03:63:2f:d7:fb:62:c2:df:90:50:ef:
d9:15:4b:47:f4:61:80:bf:4b:3a:01:fd:18:84:3e:
1e:2f:a4:1f:8c:e9:d0:91:a1:48:da:23:3a:02:5a:
35:5b:bd:a5:62:e5:b0:52:d3:e8:bc:8e:20:5d:7a:
92:0f:75:50:c4:fe:60:c5:bb:8a:1b:e4:1c:a0:d1:
95:f5:49:fb:79:eb:73:3c:8a:eb:c5:a7:17:32:1c:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:7F:D2:B4:AD:12:20:17:4B:2C:0C:3E:8E:25:3C:3A:0A:91:70
X509v3 Authority Key Identifier:
keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4b:d5:39:db:6c:df:18:ba:8a:9a:ad:8d:e5:6f:8f:d7:46:
fe:7d:df:ae:3b:a7:3a:be:36:18:b9:d4:8c:5c:78:f3:00:56:
fc:0f:54:6c:f9:be:6b:2e:c1:bd:f1:46:e3:05:fb:26:d6:97:
22:7c:2d:3f:6e:c8:8c:5a:d1:51:8f:69:4e:c1:8a:d4:ce:0a:
87:d5:7d:9c:44:11:90:cc:38:82:a7:75:b0:2e:95:bc:8c:ee:
51:62:9c:5f:92:26:d0:a5:1a:e5:67:dd:dc:d8:45:31:e0:d8:
cd:bf:19:90:60:e3:bc:43:15:fe:3d:e7:53:3a:98:f7:70:c3:
b6:3d:82:8f:23:c3:6d:e1:ba:83:33:c4:92:e6:b6:d9:9e:a6:
45:2c:7c:ab:ff:c6:4a:58:cc:56:8e:16:52:d7:47:34:9a:5b:
e8:56:d1:ea:38:79:0e:69:81:43:96:d3:f4:7a:4f:e4:49:d3:
23:6c:4e:26:79:ad:97:8f:70:7f:ab:a0:d0:51:60:6b:aa:dd:
40:96:22:3e:85:f0:a6:5d:29:9f:81:db:f6:4b:0b:e8:4f:40:
92:8e:e6:41:7b:8e:8b:f7:92:0a:ec:bb:35:79:7a:70:40:38:
03:1c:ea:d9:2f:c5:9c:f8:17:6f:4d:b9:d5:cb:ea:af:30:68:
5f:86:09:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:53 2025 by rpki-client