Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft
File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json)
Hash identifier: A74QQYHARS9wv8GYjGh6hjy3glREesnvKeMAythbpu8=
Subject key identifier: 0F:27:93:E9:03:ED:E1:72:47:06:7C:47:0B:1A:38:FE:EC:37:6F:BE
Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A
Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A
Certificate serial: 158D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft
Manifest number: 1580
Signing time: Fri 31 Jan 2025 16:47:56 +0000
Manifest this update: Fri 31 Jan 2025 16:47:56 +0000
Manifest next update: Fri 07 Feb 2025 16:47:56 +0000
Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: Sv0haKZTe2Rl+jlnDJX6QtRx7lhXmSyDJHDj7nrkv6M=)
2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: 4H4+YRS4PlEbIBAUOpRTR8xQkQgHSLqxXY4Nc9mbKmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5517 (0x158d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A
Validity
Not Before: Jan 31 16:47:56 2025 GMT
Not After : Feb 7 16:47:56 2025 GMT
Subject: CN=679cfebc-1982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:fb:23:be:aa:6b:6a:4d:33:b1:2c:24:ef:
fc:b8:86:ac:1d:1d:1e:ce:e0:2c:95:ba:2e:cb:c8:
28:da:ab:81:35:4a:87:bd:4b:4f:22:fa:15:23:b0:
ac:94:62:c2:38:50:57:77:78:36:a7:a1:52:aa:fc:
ed:22:58:bb:29:b3:d6:f1:eb:78:08:4f:d1:b4:24:
f1:9e:af:e6:05:8e:a9:12:4c:b5:c7:91:ad:90:88:
98:98:c3:47:4e:ee:e2:8a:fa:09:80:3c:89:38:f2:
3a:2f:5c:f8:78:31:8b:6d:29:e1:b2:e6:79:c4:7d:
be:4a:29:e4:3c:38:f1:c0:17:7b:6a:97:a7:95:2b:
36:8c:3f:04:0b:2d:e5:8d:c6:4a:87:2a:d7:ab:a0:
63:2e:95:49:b5:f2:87:5d:d6:29:3a:da:09:7f:6f:
78:c3:95:d4:b3:1a:1e:36:d9:67:ae:1c:32:a2:c6:
1f:35:73:8f:28:b6:67:19:70:e8:75:b4:c7:04:4e:
45:6c:6e:30:51:7b:b2:eb:c7:5e:95:7b:55:99:f2:
11:a1:bc:46:e9:38:3b:c5:ea:be:b2:18:28:29:82:
27:63:6f:e3:d4:74:69:4c:59:3b:c5:8f:be:da:bb:
bc:e8:4f:a0:f8:0f:87:3a:9d:09:62:f6:9e:d2:f5:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:27:93:E9:03:ED:E1:72:47:06:7C:47:0B:1A:38:FE:EC:37:6F:BE
X509v3 Authority Key Identifier:
keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:9a:bb:f8:c3:84:77:48:c0:28:f0:ef:13:11:b9:38:e1:6f:
48:b0:a3:66:e1:f6:74:75:32:1f:25:30:52:96:b5:08:e0:ed:
98:ad:78:37:cc:6a:37:01:cd:9d:1d:a4:13:8c:e0:e2:72:be:
b9:a8:cd:6e:f2:75:54:34:f0:7e:e6:b8:e9:7f:14:27:74:27:
3a:d0:fe:91:6f:38:c0:5b:66:47:06:fa:51:01:49:c1:74:a3:
f7:d1:b1:57:0f:90:53:fd:62:cd:ad:d6:70:a3:53:d3:43:e5:
bc:41:4f:96:5f:9e:4d:fa:05:1c:a2:9a:83:67:6f:06:55:7d:
e5:d5:b6:2a:d1:ca:94:7b:9e:45:5d:23:87:e4:43:3c:12:ad:
0c:c4:95:1a:97:98:26:51:47:d7:b0:f5:d9:ed:55:a4:d3:83:
7f:75:d1:0c:49:d8:cb:b0:e0:eb:cc:62:b6:60:c3:7a:18:52:
a3:3a:9a:8b:63:a9:b9:30:c4:00:cd:78:d4:d4:b2:10:cf:78:
66:54:bb:79:9c:58:fa:45:40:d4:4e:04:75:c2:d7:b3:8a:ce:
c5:ea:21:f8:94:74:62:9e:06:5c:c5:c7:e9:9d:c9:7e:56:78:
13:51:16:ca:fb:c5:d4:05:fb:93:4e:92:3a:d0:a5:9c:a9:b3:
73:ee:67:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:50:52 2025 by rpki-client