Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
File: RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json)
Hash identifier: QW9YjnU7rVHg0Ixt+SQTbLaqVVVpV5v0CO2WZxi41+A=
Subject key identifier: 83:68:FF:CC:FF:97:41:2B:AA:20:0B:40:C9:9D:D9:58:9E:33:14:C8
Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03
Certificate issuer: /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
Manifest number: 9D
Signing time: Fri 31 Jan 2025 05:23:48 +0000
Manifest this update: Fri 31 Jan 2025 05:23:48 +0000
Manifest next update: Fri 07 Feb 2025 05:23:48 +0000
Files and hashes: 1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: x72T8UABlp7bnnHjeSVXiRCknTQsNpKNPos7slEer6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203
Validity
Not Before: Jan 31 05:23:48 2025 GMT
Not After : Feb 7 05:23:48 2025 GMT
Subject: CN=679c5e64-f493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:c7:01:06:a4:9b:a4:3d:7d:0d:12:51:49:
0e:b9:5e:f4:83:5d:df:28:0e:59:5d:b1:8c:16:85:
82:a9:12:f3:3e:ad:9a:0e:90:bc:24:4f:25:6d:1b:
86:cb:12:2e:21:56:54:8e:b7:68:b0:4b:33:5d:00:
ec:d2:04:14:e2:88:fd:cd:1e:5e:81:a5:2a:d1:5b:
c7:9d:69:7d:0a:dc:0e:49:7a:ac:52:0b:25:c3:d5:
19:2c:d8:34:7e:cb:e6:a7:fb:91:15:0b:c7:ce:d8:
4c:c1:78:79:59:ac:5f:82:b3:45:01:37:b4:16:14:
ea:fb:26:9b:fa:a6:25:bf:24:e8:40:5c:f8:26:ab:
cb:43:14:be:f0:d2:65:50:5c:44:71:d9:8c:e3:a3:
f2:cc:48:81:f2:24:d7:4c:3a:e3:b9:c5:be:e2:a6:
05:5f:cc:3d:b7:21:10:ae:97:21:29:bb:db:7f:a6:
f9:ca:de:ca:12:d0:d7:b9:b7:5a:5b:44:56:0c:a7:
b3:e2:62:d0:5c:2a:c0:60:f6:53:c3:66:4f:bb:ed:
1b:e0:8d:0e:7e:5a:dc:7c:53:c9:9f:b8:14:95:25:
d3:3f:0c:a3:a6:3d:5f:7f:80:b4:75:62:04:96:63:
95:b5:c9:2a:43:6f:be:ce:93:8d:34:29:42:32:47:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:68:FF:CC:FF:97:41:2B:AA:20:0B:40:C9:9D:D9:58:9E:33:14:C8
X509v3 Authority Key Identifier:
keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:62:9f:27:5b:86:5a:64:eb:03:29:fe:c8:40:71:dc:15:a8:
1f:cf:da:f4:2c:b1:27:1d:42:29:09:31:09:d8:51:b7:1b:9b:
60:ff:3d:d5:9a:c2:6f:ee:6a:7d:8b:41:1e:df:bb:28:af:57:
ca:79:84:39:25:ca:60:65:31:e4:db:04:d1:08:44:2e:41:4c:
cd:b1:e1:4e:64:58:94:0f:f7:24:32:2c:d9:18:06:80:bf:af:
42:4d:32:ad:49:97:ec:22:90:56:66:31:af:15:d7:d5:a1:bb:
db:60:38:26:2f:83:bd:3d:e6:ab:ef:15:a5:4b:ea:2f:41:82:
be:56:d0:4b:9f:28:75:c5:8b:9a:08:39:a9:df:4d:32:2c:b1:
4d:3a:50:6d:59:52:19:4d:b1:3a:5e:57:00:53:83:98:d8:21:
e0:9a:5a:a5:0c:e1:c9:09:71:86:17:f1:82:6e:76:08:3e:3c:
3b:8d:54:c5:42:bc:29:f0:37:78:3c:ee:ae:39:00:26:ee:3b:
e3:0e:67:75:24:69:82:c1:b9:2d:6c:3f:e3:75:cd:ed:0e:a9:
4b:19:aa:da:fb:c4:80:17:07:8c:8b:3a:a7:2a:b3:a7:55:1c:
8a:5f:e4:b8:0d:c5:57:e0:8c:c3:7c:2a:3d:d8:cf:a3:b9:70:
46:df:4d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:27:05 2025 by rpki-client