Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json)
Hash identifier: 2zudm2zf47bTiPkR3aumO1yWZt/wCH6iNZ6RY9KwgPk=
Subject key identifier: 8F:D0:83:8D:EF:01:3D:7A:17:97:C8:BF:C3:9C:04:A4:0D:0D:01:76
Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
Manifest number: 53
Signing time: Fri 31 Jan 2025 06:17:43 +0000
Manifest this update: Fri 31 Jan 2025 06:17:43 +0000
Manifest next update: Fri 07 Feb 2025 06:17:43 +0000
Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: ad8Rrv57fhHSKHWrxR7sY8SpdSO9w+w6Fbl17bfc500=)
2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: +q7i8FT7aXv5TbfXQs0zmVnbFdJSpOU7FUV6yCY0qyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Validity
Not Before: Jan 31 06:17:43 2025 GMT
Not After : Feb 7 06:17:43 2025 GMT
Subject: CN=679c6b07-9dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:46:0f:4f:5a:16:b9:cd:4e:25:59:8f:67:1d:
0f:1d:01:ee:3c:04:79:5a:49:65:59:d1:3d:06:75:
bc:3e:e0:d7:d7:34:c0:9f:68:2e:8a:10:31:d7:03:
0c:40:e0:b9:ac:93:58:b9:d5:4a:16:84:40:4d:d5:
e3:c2:ec:3c:43:14:f9:51:35:b5:75:e1:b0:2c:18:
42:c1:7d:dd:d0:83:d9:17:f7:70:a4:73:9e:b0:ce:
e9:2c:c2:2b:04:db:38:ac:5e:6e:e1:6c:fe:b5:0b:
cf:c8:b1:8a:ee:a0:2d:7f:e2:04:28:f1:e5:8a:85:
c7:7c:42:90:32:16:a7:c2:d5:59:25:5d:b5:2e:3d:
54:ab:d9:9e:4d:6f:53:f4:37:ee:ef:d7:c6:e3:80:
1c:78:eb:5f:12:ab:cc:90:ac:ce:ea:2d:25:6a:25:
20:ae:f0:74:a7:d8:31:75:21:52:69:33:92:e2:25:
b7:64:e4:7e:6a:b2:ed:06:7a:2e:e7:96:ab:f7:b2:
f0:7c:ad:fe:22:af:0d:0a:c9:03:36:84:6e:af:0d:
a4:ec:64:25:bf:2f:ff:d2:79:60:48:ed:11:14:3d:
52:7f:65:c1:39:2b:a9:4c:9b:bd:ac:43:ea:a7:e7:
a5:19:60:61:4e:6d:99:e8:f6:2e:8d:53:33:32:8e:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:83:8D:EF:01:3D:7A:17:97:C8:BF:C3:9C:04:A4:0D:0D:01:76
X509v3 Authority Key Identifier:
keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:85:f6:bc:59:74:70:2a:ad:51:e4:02:c1:ca:40:28:78:af:
95:d9:e3:18:14:b2:ce:c7:3e:df:85:0b:2b:91:9a:98:b8:5b:
88:27:9b:78:bd:ed:2d:33:10:89:8c:59:28:d7:8d:20:e1:d8:
20:fb:87:07:c1:7c:35:d7:9d:b5:8a:ec:05:21:a6:10:62:99:
ca:8e:ef:4f:8f:41:1f:72:52:83:b8:f9:83:04:6d:b9:2a:a5:
6e:38:e8:9b:dd:fb:90:4c:53:27:5f:8a:e7:8b:1b:83:9a:90:
23:20:08:b7:d3:29:fc:0f:ac:e5:70:29:9f:ff:a4:f9:d7:40:
df:1b:7e:96:fe:7d:e7:72:80:0d:94:e8:03:ec:e8:e7:37:bf:
4f:5f:7c:9c:fc:dd:9c:75:0c:c5:0c:1b:0b:2f:f5:76:29:96:
16:7b:dd:af:db:96:26:8e:48:1f:12:60:de:f0:1b:e3:94:ed:
13:f4:9c:5c:48:77:42:37:86:e1:7f:40:54:42:cd:15:d3:05:
fd:f3:bf:94:c8:70:60:a4:d4:e1:15:89:02:e7:37:53:3c:94:
e4:49:a5:fc:f2:e7:f8:1d:3b:cf:78:35:fd:e7:6b:d5:92:d0:
39:ad:52:fc:ff:14:79:08:e1:b1:41:48:bf:8b:a5:b4:3b:95:
f9:8f:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:30 2025 by rpki-client