Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json)
Hash identifier: U/kIe6xLZyCZFKxSJN8gmQVBUrNxh9fXzGihvVCKfxI=
Subject key identifier: 44:E9:C8:A1:20:10:02:AF:0A:8A:8C:AF:2A:37:3F:A6:A7:DE:0B:38
Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47
Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447
Certificate serial: 0947
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
Manifest number: 0947
Signing time: Fri 31 Jan 2025 15:03:42 +0000
Manifest this update: Fri 31 Jan 2025 15:03:41 +0000
Manifest next update: Fri 07 Feb 2025 15:03:41 +0000
Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: b/ctSg+t9NV/g1Y53vq2QwrezlXxyn/dEch2gHXjdkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2375 (0x947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447
Validity
Not Before: Jan 31 15:03:41 2025 GMT
Not After : Feb 7 15:03:41 2025 GMT
Subject: CN=679ce64e-942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:25:34:f0:2b:9a:78:26:75:3f:cc:4c:31:
f0:00:8b:24:8c:34:9a:6a:3f:e9:6a:ff:e4:89:f7:
df:44:4f:de:c0:2c:39:7c:e3:d4:df:32:84:3b:d8:
f3:67:cc:1a:bc:1d:bf:59:41:9c:02:2a:98:c0:d2:
fa:ba:e8:f2:e4:c2:5a:d7:d2:80:ff:0c:c9:e6:34:
6f:ca:60:7f:98:3b:e9:c2:08:ba:81:cd:b7:c4:75:
80:08:3d:99:ae:86:ab:4d:d0:10:bf:b2:1a:fc:8e:
6c:a3:cd:a6:bd:99:bb:9b:fa:3d:f5:ac:cd:dc:bc:
2c:85:f2:fe:59:31:a9:f6:4f:72:af:12:46:9f:38:
c0:d0:c4:8f:c2:fa:a2:3a:2e:83:4b:dc:09:87:e4:
8c:b5:1d:0f:99:24:27:a3:13:51:b3:8d:b4:ef:35:
31:e2:61:8d:b1:c5:15:18:9e:84:3d:27:f4:ee:05:
eb:b1:93:ad:fb:2a:22:3b:c7:ee:04:fa:2e:8a:bd:
21:c7:d4:2a:a5:37:17:0a:5c:63:44:a7:8f:0d:09:
53:e0:d8:10:41:f0:97:5a:29:6d:30:f1:fe:ad:88:
c7:46:36:95:24:60:96:38:98:48:1e:72:43:46:af:
55:78:ea:3f:80:f0:7d:ee:a4:bb:ad:ff:69:9c:67:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E9:C8:A1:20:10:02:AF:0A:8A:8C:AF:2A:37:3F:A6:A7:DE:0B:38
X509v3 Authority Key Identifier:
keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:70:cd:3e:7c:14:3b:23:2e:56:de:42:f6:84:f9:e2:cb:1f:
d2:7f:96:4f:fa:c7:2a:cc:91:1b:64:cb:28:ce:7c:fb:91:0a:
d3:73:95:87:e4:e1:86:b4:fd:c4:16:53:f9:ac:89:17:a8:77:
ee:5e:fb:c6:d2:78:36:8d:12:ae:95:06:25:9c:1a:85:f5:f1:
23:ff:3b:b6:9e:bc:21:e4:4c:e9:0c:3f:18:ae:49:d4:2d:eb:
26:eb:fb:fb:44:68:76:83:12:d2:88:14:ee:86:e2:20:3b:7e:
9d:2e:3a:96:b0:75:fa:90:7e:13:75:1b:91:f5:77:0d:bd:7e:
25:7f:cb:23:10:25:d4:21:94:1f:a7:3f:b3:4f:73:d7:bb:47:
76:6d:ac:4f:8d:00:6d:b1:25:0b:2b:4f:63:38:5e:3b:f3:36:
66:83:bc:29:5a:c7:8d:f0:6b:39:d7:ea:72:b1:0b:c3:cc:6b:
47:ed:d4:90:19:98:80:ff:14:7f:0d:10:06:d3:60:12:46:1f:
4f:09:2a:1b:3f:b6:f2:c2:04:a8:b4:36:2a:4f:77:ef:95:ed:
f9:74:eb:3a:bd:bf:31:df:87:e3:04:79:34:de:d8:eb:05:43:
f8:ec:7a:66:a9:61:31:31:b0:b3:7c:93:a8:a1:13:32:47:ed:
e5:32:94:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:25 2025 by rpki-client