Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json)
Hash identifier: kPM9fyatATaST/QZqDzTnIAtyTUhpbiRwcRYTkvX2fQ=
Subject key identifier: DF:E0:FA:C0:6F:7B:0D:C0:22:9D:93:DA:D1:42:6E:91:91:F9:FA:C4
Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Certificate serial: 0752
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
Manifest number: 074D
Signing time: Thu 30 Jan 2025 21:31:01 +0000
Manifest this update: Thu 30 Jan 2025 21:31:01 +0000
Manifest next update: Thu 06 Feb 2025 21:31:01 +0000
Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: GE0hf2a2ehDzuTWGbfGfEAiaYn2Vil6a5LU6dgjdXpo=)
2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: EnKj89o4/2sutrwYpg7UxwXHFBOFSGJviP9dKcMIsAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874 (0x752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Validity
Not Before: Jan 30 21:31:01 2025 GMT
Not After : Feb 6 21:31:01 2025 GMT
Subject: CN=679bef95-4541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b4:6b:9c:f1:21:73:5c:63:a7:5f:83:50:fe:
92:b2:7f:a8:55:11:d7:0a:49:6b:1c:48:fe:11:f5:
c6:11:42:24:33:94:f8:9f:65:f9:82:30:62:41:87:
48:13:4b:67:62:d0:b9:fc:64:69:51:30:1e:f4:64:
19:71:13:4e:c0:5f:b6:31:70:23:b7:fa:8d:b4:8b:
e1:4c:23:36:b0:24:46:dc:7a:41:af:5e:42:c2:cc:
08:5e:cb:24:2e:d5:8c:3c:6f:c4:f2:71:63:05:09:
e6:13:f8:27:21:15:22:1c:cf:73:f0:4e:11:0d:3b:
1e:06:34:3d:3e:3e:46:45:0a:44:eb:c8:65:1f:60:
ec:3d:07:89:89:03:fd:38:87:77:a8:3b:31:0e:0c:
38:28:f7:2a:6f:9d:30:ab:df:89:fc:7d:1e:71:02:
d2:08:87:8b:4a:c0:8f:f3:c7:de:c4:d3:ba:bf:ae:
f6:0a:c3:15:19:46:57:8e:02:35:b4:54:6d:93:eb:
39:db:61:71:10:cb:79:de:1e:4d:aa:d8:31:81:28:
4f:64:6d:be:0c:cd:f2:b7:40:23:60:94:f8:67:b5:
6f:2e:55:1b:45:33:e7:ed:b9:22:25:19:f3:a8:5c:
c4:96:7b:5f:42:3d:9e:eb:59:17:66:0a:c0:5e:4e:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E0:FA:C0:6F:7B:0D:C0:22:9D:93:DA:D1:42:6E:91:91:F9:FA:C4
X509v3 Authority Key Identifier:
keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:63:e3:89:6c:fa:22:e9:f9:97:3d:e3:6e:e8:75:b5:bd:50:
62:b8:7e:6c:bd:53:cb:8d:b2:2a:ea:83:d0:a8:49:fb:b0:3f:
ff:84:5d:78:47:49:bd:b6:28:9f:dc:79:6c:3a:98:a9:51:a6:
7e:80:63:d6:84:60:64:6e:be:7f:35:a9:02:ad:27:c2:da:01:
41:23:80:e1:db:56:f0:74:84:1f:a0:a6:d0:65:92:49:6f:04:
de:c5:d1:de:c7:e3:8e:7b:b1:ee:ad:cd:a4:22:4d:f2:6c:0d:
0f:cc:a5:b1:4b:ca:e1:26:99:15:22:96:47:7d:39:a8:54:52:
28:13:f4:78:2e:be:f8:7e:bc:28:00:c5:cd:6a:32:03:05:ee:
8d:b0:9f:dd:c4:ae:a4:bc:52:bb:8e:5c:33:0f:e5:1a:87:8a:
8c:c7:da:3e:e8:f2:be:e7:45:c3:26:7d:20:f0:a0:d9:6a:32:
ce:8b:79:82:84:a2:22:77:e2:04:b2:a8:63:a0:3e:fd:ab:f0:
b6:c4:f6:86:27:4d:22:e0:c2:1e:0e:b7:df:69:79:ee:95:9d:
e1:05:3b:0a:89:ad:b2:3f:65:b1:a3:d5:fd:b5:48:5a:62:7c:
2e:5f:98:28:dd:41:43:c3:75:c1:0d:37:2b:1b:4f:b5:e9:ea:
7d:a0:98:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:46 2025 by rpki-client