Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json)
Hash identifier: q+55FdoYyd8oomn4Y2jvZjhGkfMFeNYrMKStGEtV2Ww=
Subject key identifier: 8C:96:77:70:19:0A:3B:39:F9:58:BF:50:DA:F7:99:32:F6:9A:86:F0
Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22
Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622
Certificate serial: 02EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
Manifest number: 02DA
Signing time: Fri 31 Jan 2025 01:29:58 +0000
Manifest this update: Fri 31 Jan 2025 01:29:57 +0000
Manifest next update: Fri 07 Feb 2025 01:29:57 +0000
Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: mfWlJC5T1TqjE48BwVpW3wAsQUU41Vc31SmKfJLhwOE=)
2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: +2b/qGdWsAWR/BKJskTGfjOIk8WF3Jjfuxvh9LPPuaA=)
3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: QkUOxUdOqeDJq40oU7W9ZvA1XabLukGzl2cHkw2yMIw=)
4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 6J35YVUmzZ1s4Ice2keaYAnPdVe/zMmpQD23cIxvFqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622
Validity
Not Before: Jan 31 01:29:57 2025 GMT
Not After : Feb 7 01:29:57 2025 GMT
Subject: CN=679c2795-7feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:58:64:4b:ce:bb:63:4f:d7:df:f5:50:56:
59:df:01:18:dd:35:cc:67:42:08:45:0a:05:53:94:
f2:3b:19:bb:6d:4a:30:06:dc:72:96:0a:2a:ce:e7:
3a:58:10:95:35:dd:41:2d:c3:f1:e9:4b:45:71:87:
fa:0c:df:fb:c8:e0:5e:9a:fc:a6:29:ff:e2:52:23:
65:a9:e7:1d:30:c1:8b:ef:8a:9c:5c:2e:fe:6e:c4:
a1:f3:fb:4b:58:9e:6f:87:e7:51:5d:d0:bd:0b:8e:
fa:c2:65:02:96:83:06:de:56:4a:65:6a:fd:0d:32:
92:47:29:3d:e2:06:40:b8:a0:19:a3:82:74:eb:da:
79:2a:3b:0e:c2:21:c4:52:a8:03:4b:0e:ab:2a:77:
bf:70:8d:39:02:32:66:0a:ad:ae:81:0e:8c:c2:dc:
d9:14:58:0f:67:f7:3d:79:4c:83:1b:98:2b:74:64:
c8:d9:a5:35:be:ef:87:ea:98:e9:27:e8:c8:2a:52:
b4:9d:68:d4:38:9f:2f:e8:a6:54:09:77:75:90:ae:
65:59:13:9d:3e:42:ba:09:47:87:44:2a:d3:86:1f:
5a:5c:6a:da:15:f2:93:a9:97:8e:f1:3b:02:38:a7:
65:47:71:21:d8:d7:44:07:77:4f:8e:58:52:2b:ff:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:77:70:19:0A:3B:39:F9:58:BF:50:DA:F7:99:32:F6:9A:86:F0
X509v3 Authority Key Identifier:
keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c8:02:1b:2f:8e:f2:2b:b0:da:e4:e4:32:cd:1e:1a:66:1f:
10:b4:c0:2c:1a:9d:29:c2:68:4f:2a:26:27:23:31:de:53:2a:
f0:a5:61:dd:16:e9:e3:ae:d9:2c:cb:6c:26:71:f6:27:f0:96:
64:ef:97:74:dc:65:40:45:dd:bd:7a:d4:f0:34:0b:e4:ac:c8:
3c:d7:43:ac:e5:77:7c:7d:66:b2:a9:09:83:78:5a:bc:58:9a:
94:5d:5a:6d:2f:d3:14:03:c0:1f:2d:c3:0e:72:8d:8b:7d:ac:
58:38:bd:4f:d9:07:f4:6e:19:49:e9:06:f6:08:7f:06:8f:c1:
f6:93:66:e8:10:ad:51:e3:e6:53:b4:6e:60:ea:20:77:90:80:
60:96:42:fd:67:e3:4f:7d:e9:8f:9b:31:7d:06:76:04:10:f0:
9b:2c:54:cb:34:fd:53:e5:92:bb:3f:88:f1:0f:b1:b6:c5:1e:
b6:d5:b0:40:07:67:11:8e:bf:b5:f3:c9:f0:a1:dd:3c:67:49:
32:52:7d:03:df:c1:0b:5e:32:1b:ac:c8:ed:b2:47:eb:fb:4c:
7c:a0:e7:e3:8b:d9:aa:b5:47:4e:4e:b1:3d:2b:8b:d7:7f:91:
d6:09:51:cc:87:6c:6f:3f:2c:ca:36:28:c0:83:5f:1d:bc:7d:
fd:e0:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:40:22 2025 by rpki-client