Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
File: _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json)
Hash identifier: cLC71Al8O2q4noNsXr8CiASkhst3W8QveYxSG+2qCO4=
Subject key identifier: 40:1A:28:C9:E5:EB:2D:CB:C0:69:87:E5:7A:F3:8E:EC:13:DA:41:7D
Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A
Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
Manifest number: 0253
Signing time: Fri 31 Jan 2025 01:51:51 +0000
Manifest this update: Fri 31 Jan 2025 01:51:51 +0000
Manifest next update: Fri 07 Feb 2025 01:51:51 +0000
Files and hashes: 1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: DQ/kVLNZzDyjdce3hzcHoaKvLRzUn7y1qoJfQ870t1g=)
2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: O80CPOj7379bSxSD9tMHO1NK7nDoOkP7AeQy26Fb7V4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A
Validity
Not Before: Jan 31 01:51:51 2025 GMT
Not After : Feb 7 01:51:51 2025 GMT
Subject: CN=679c2cb7-a596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:92:36:8a:34:e7:22:aa:07:b0:7e:17:0d:
dc:88:cc:26:84:60:a4:0c:99:e9:13:a8:c6:d6:f9:
05:fb:60:05:40:09:b1:63:04:98:b5:ff:45:4d:08:
95:ff:6d:b0:8f:4e:57:2c:ec:ce:36:af:59:c3:63:
89:bf:96:3e:97:e5:e3:89:c5:63:7d:87:49:8f:a9:
3c:ab:38:32:da:d6:f3:ff:5d:fe:9e:13:b4:6a:ff:
c3:ca:09:c3:12:65:2c:e9:ff:e0:b2:1c:e2:d2:dd:
21:f8:34:cf:d0:8c:2c:ef:4a:34:61:b0:aa:1f:87:
17:a4:d5:4c:b4:34:d7:3d:31:65:d7:ba:88:cb:19:
40:d2:ed:b8:59:e5:06:e2:43:23:8c:7a:92:47:92:
d1:48:a1:d5:27:8d:77:71:82:55:07:82:9b:4a:1f:
b5:b4:93:a2:80:74:6a:57:99:53:9b:71:f1:2c:d8:
a5:76:3f:d1:72:d4:e7:a4:38:c7:c6:c0:7e:8b:84:
dc:5c:13:15:ab:79:16:44:4f:8c:0c:af:9e:1a:dc:
93:e3:eb:1b:a0:de:05:b3:7c:e9:ac:aa:a7:44:fa:
d5:f4:37:36:c4:18:ce:b7:95:89:eb:8e:d0:df:55:
ad:e2:73:68:46:a9:7b:9b:35:f0:bc:59:2f:e7:4f:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1A:28:C9:E5:EB:2D:CB:C0:69:87:E5:7A:F3:8E:EC:13:DA:41:7D
X509v3 Authority Key Identifier:
keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:de:f6:c1:6d:28:e5:d3:82:26:e2:70:1b:8d:95:be:12:09:
ab:9f:a3:3d:0e:7d:ab:dd:d5:df:0f:8c:a8:a8:ea:d9:67:2d:
5d:97:ec:87:81:7c:72:9d:2e:e6:19:35:40:17:6e:b1:84:b2:
a7:8f:39:b0:4e:fc:a4:0a:a6:be:c7:11:6c:62:91:a2:09:d3:
6a:a2:e9:4c:4f:cb:da:92:4a:63:be:e1:ec:72:b4:4a:98:cc:
54:2d:15:41:67:24:b5:a8:00:e0:b8:87:60:fa:b0:b5:e8:89:
e3:18:a3:14:c9:e9:74:1c:e7:ce:b7:37:4e:e0:fb:7b:47:ad:
11:3d:da:ac:b6:0a:1f:7b:f8:93:77:f3:13:d5:94:2f:0f:e0:
07:ca:1e:88:4c:f3:f4:5d:e1:b9:58:de:4d:12:66:7e:fd:98:
d2:23:6c:c8:ea:d8:41:b0:de:c8:b3:37:01:23:69:4a:12:76:
de:df:c0:2a:53:03:08:0f:bc:d2:97:ad:b9:97:ac:a1:e0:ab:
a2:87:d0:fb:03:d4:97:85:fa:29:a6:bd:67:64:2d:76:8d:0a:
e4:4f:04:64:bf:54:6a:ae:e7:c9:4b:d0:4e:38:64:9a:75:49:
82:01:2f:76:74:ab:6a:5f:0d:e1:51:11:7f:7e:ea:2f:33:18:
23:6e:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:34:22 2025 by rpki-client