Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json)
Hash identifier: 4RaN5mg3ufPn1N2Eiqlmv35iv/s4cZeFNyf6UD1BPoM=
Subject key identifier: 88:8F:55:7F:8F:C1:B7:18:3B:23:E2:B8:3F:5D:37:F7:1A:D6:88:19
Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Certificate serial: 16A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
Manifest number: 1696
Signing time: Fri 31 Jan 2025 16:40:58 +0000
Manifest this update: Fri 31 Jan 2025 16:40:57 +0000
Manifest next update: Fri 07 Feb 2025 16:40:57 +0000
Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: GwGJUi2w3Isj1mY5Y+tGk88UYFSJvV1hrcumXY0l92I=)
2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: zo25YC/oPN7LoCYNy9rkqq5CmjGFDNR2L9SiYpUiaJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5794 (0x16a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Validity
Not Before: Jan 31 16:40:57 2025 GMT
Not After : Feb 7 16:40:57 2025 GMT
Subject: CN=679cfd19-52d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:d5:67:a7:55:7c:cb:66:22:e0:66:92:59:
8b:63:83:00:16:b9:64:d0:bf:44:d8:02:dd:80:a1:
d7:3f:f4:97:42:82:7a:de:27:c1:0e:11:86:f8:a9:
ba:d3:8e:51:49:e2:d7:65:9c:65:e6:3a:49:fc:c1:
a9:24:6c:61:dd:04:08:6b:5d:9c:d6:d5:fd:0f:90:
08:e8:12:bd:8a:66:c7:c3:61:94:c1:b3:3b:e0:0c:
ff:6e:1d:25:9e:7f:60:d0:40:dd:6b:6c:98:6f:d4:
f8:53:3f:9f:2d:65:c2:30:bc:2d:fc:17:29:83:ab:
d3:f0:de:8c:00:4d:cc:13:0b:df:7c:e4:dd:ee:e2:
49:38:d4:86:75:a9:8a:9f:3c:11:90:ec:e0:40:56:
59:64:27:ab:ee:e4:ec:94:85:a0:2e:17:33:02:2b:
5f:ee:eb:5b:4c:f2:28:f0:e1:c7:bc:d5:e7:4e:2e:
28:82:cb:77:4d:e1:85:d6:78:31:b0:0f:58:bf:d8:
b9:f8:50:4c:11:42:13:ce:66:bd:c1:6f:15:ba:c2:
3d:2d:60:da:59:61:1a:61:5c:6f:dd:b7:76:ae:a0:
07:cd:42:79:89:a6:1e:df:6f:96:71:41:cc:51:ad:
2d:63:a5:ea:e8:56:24:b2:38:65:f5:2f:26:6f:27:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8F:55:7F:8F:C1:B7:18:3B:23:E2:B8:3F:5D:37:F7:1A:D6:88:19
X509v3 Authority Key Identifier:
keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:98:5f:5f:14:d5:2e:cb:92:f2:06:4a:fd:05:6b:f4:a7:27:
0e:78:13:eb:c5:f4:c2:10:59:fd:6a:94:de:fe:cf:fc:68:83:
2e:ef:a9:de:a6:3c:1f:b5:57:52:67:51:85:22:55:bf:3c:07:
07:ea:32:83:e1:e3:0d:c9:53:42:56:2a:9b:65:62:74:d4:80:
c4:ec:2e:92:47:42:f0:1f:8e:29:87:01:39:90:03:f1:40:5e:
d9:f4:51:6c:21:54:dc:cd:4a:a1:d9:e1:ef:b0:52:02:f3:34:
e8:79:1d:ff:ce:ae:34:a7:98:d1:88:de:51:f2:37:6b:f0:8b:
c8:18:d4:d5:25:fb:fe:bd:12:c3:d5:e1:ad:18:c0:b2:21:e5:
6d:5d:7c:b0:9f:ab:7b:d2:85:7d:0b:37:71:3b:49:9a:ac:03:
31:f6:24:7c:8c:ee:b0:09:b8:e3:99:b8:e2:e7:2d:56:0d:53:
27:82:3f:be:09:ca:7a:1f:9e:dd:1b:2e:21:06:c9:41:b3:52:
06:f8:0b:b6:62:59:f8:22:6f:b0:9f:52:ef:b8:e0:84:ef:94:
b0:fe:3a:da:c5:b7:85:7a:9e:a1:9c:98:8f:97:71:24:2b:99:
b4:d0:4b:ee:21:d8:41:1b:e7:1e:6e:1c:7f:7d:8a:52:87:33:
c7:be:5a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:12 2025 by rpki-client