Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
File: F19zLkbbq-mqcYHfg8cm729vW8I.mft (raw, json)
Hash identifier: Iw9QHD81vbtv4x3EQJ1y8cTua+s7fo299tdHsGYPHuY=
Subject key identifier: 5B:8E:02:AC:10:EC:48:FD:60:50:D0:2A:5E:66:BC:C4:80:C5:14:58
Authority key identifier: 17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2
Certificate issuer: /CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
Certificate serial: 03AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
Manifest number: 03A7
Signing time: Fri 31 Jan 2025 00:46:55 +0000
Manifest this update: Fri 31 Jan 2025 00:46:54 +0000
Manifest next update: Fri 07 Feb 2025 00:46:54 +0000
Files and hashes: 1: F19zLkbbq-mqcYHfg8cm729vW8I.crl (hash: h/mFyX6PnwTADFpjHqkyEnTtVQMVbI6TRLqBSNm4dg8=)
2: 76FA00E87EE811EC8D796C6EC4F9AE02.roa (hash: wgDb1KnVQWBoZ1T5BXpX71TMMnESBtSdKYU93dImmgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2
Validity
Not Before: Jan 31 00:46:54 2025 GMT
Not After : Feb 7 00:46:54 2025 GMT
Subject: CN=679c1d7e-9df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:ce:73:f2:32:87:84:49:aa:b8:a2:9e:59:
9d:53:7b:34:b1:16:fe:9c:fe:31:a4:41:d2:c8:7c:
39:01:bb:ea:df:a7:4c:a8:2c:2b:26:1b:f8:2d:21:
af:a4:59:dd:1d:bc:23:05:01:8f:d6:aa:9b:30:6c:
9d:5b:ae:71:8b:1a:9a:f1:a2:3c:3c:8d:c4:f6:9d:
7c:92:ee:6f:a1:0d:d4:bd:11:32:d2:e3:bc:1f:e3:
8d:93:96:69:ce:71:03:50:94:4e:99:72:29:ee:ed:
71:d6:94:49:8a:84:77:31:fe:d1:b7:5d:f7:8c:13:
57:ef:62:04:8e:96:da:da:9d:21:08:d9:ec:81:2b:
0a:85:e0:1a:06:bd:8f:ac:46:ea:14:9f:2d:48:43:
b3:06:c2:cd:30:00:d2:86:d9:83:a2:34:a6:fd:5a:
90:c7:6d:fd:b9:3b:4b:d0:8e:57:7f:3c:8f:2e:58:
e0:de:97:6e:be:94:4c:6f:19:56:e0:44:c2:d7:b6:
22:10:d4:0a:ba:3a:4c:22:5d:2b:00:a0:8a:e7:94:
82:5b:e9:cc:8b:d6:89:7e:8e:56:60:c0:9a:fc:f1:
32:60:04:c8:55:6e:34:2d:c7:c3:6d:84:8d:d2:ef:
91:00:df:fd:e7:ac:12:8b:de:e1:cc:e7:f9:06:62:
e0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8E:02:AC:10:EC:48:FD:60:50:D0:2A:5E:66:BC:C4:80:C5:14:58
X509v3 Authority Key Identifier:
keyid:17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:e0:d4:e0:0f:76:30:fb:d0:ea:08:5d:f9:0b:da:99:48:
ac:c8:e4:e0:d1:54:34:43:75:2a:be:9a:06:98:d1:ab:1f:76:
a0:8d:50:fe:3b:8d:a8:f6:5d:4e:e1:24:d7:a5:f9:c7:b3:9d:
f6:0d:fe:ff:09:27:52:e5:00:ca:aa:c7:36:a6:46:cf:45:91:
d1:0f:fd:9b:f0:17:d4:34:8b:1f:43:99:f4:0f:80:46:17:05:
fb:a5:18:45:3f:8a:64:cc:f7:79:b5:25:48:29:81:85:83:fe:
37:d9:7a:b7:e8:72:e8:f3:6b:aa:96:38:49:8a:80:18:ef:38:
f6:5e:9f:14:ef:92:86:f4:8c:e9:ff:7e:8f:dc:57:eb:36:bf:
d9:d8:cc:7d:ef:e0:08:ae:44:b0:ab:1c:78:fd:80:ba:a1:5e:
91:1d:b9:a8:e1:bd:06:99:f9:3f:30:6b:d3:f7:f1:ad:dc:57:
a9:76:58:b0:7b:85:ee:64:ff:21:70:04:e0:2e:12:ef:c0:ed:
4b:82:ea:5b:c3:85:ae:91:61:ac:ae:97:f0:9b:bb:fb:9f:4e:
07:1d:19:b9:04:e1:88:3e:5a:f1:18:cb:4c:a2:b7:4b:e7:55:
aa:ff:8c:25:dd:15:cd:96:af:39:95:1f:17:8e:c1:25:16:a2:
9f:a6:c8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:10 2025 by rpki-client