Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
File: i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json)
Hash identifier: QPyJrzWRNJnU/ucOqCIdcx4EoVJulJAeDbbs2a21mZc=
Subject key identifier: F4:4F:4C:DA:CA:B6:A5:08:49:93:B6:59:1F:31:7E:48:DF:82:B1:19
Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
Manifest number: 01CB
Signing time: Fri 31 Jan 2025 02:19:22 +0000
Manifest this update: Fri 31 Jan 2025 02:19:21 +0000
Manifest next update: Fri 07 Feb 2025 02:19:21 +0000
Files and hashes: 1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: M9cIs3yjHq8bCdVtbCRzBGd3aPm0R+kmvegJeHnCZA4=)
2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: GQNwSDUwzmX4l5wsYUCHS1XYZfJoT7fdlpD23IsAxJ8=)
3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: Eo0BohzaoHsq9WS4rYAJO6lxA8uatGkVav6XDwgjJJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Validity
Not Before: Jan 31 02:19:21 2025 GMT
Not After : Feb 7 02:19:21 2025 GMT
Subject: CN=679c332a-4b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:aa:01:a1:61:3d:69:1f:20:76:3b:06:94:
01:b1:ca:f9:d6:9b:26:3a:f8:96:06:b2:e5:2b:a1:
a7:ad:be:b8:1e:f6:ef:3e:81:6c:07:a6:33:12:ff:
cf:fc:46:82:6e:80:f3:e1:47:a9:f1:9c:ea:ed:31:
15:1a:b3:b1:17:c2:5d:83:b8:9c:8b:c4:a2:6c:96:
b9:8a:f2:23:72:28:eb:de:0f:f0:75:70:e0:09:72:
ca:4c:e7:76:90:82:0a:73:d0:53:5a:e7:0c:46:a0:
00:4e:ac:d1:fd:68:ba:9c:a7:1f:be:bf:4e:c0:01:
48:8a:13:e4:42:d3:c8:11:55:88:e9:06:b2:ad:ca:
f3:18:a3:1c:d5:c6:fd:9c:dd:d7:21:51:a0:ee:ab:
47:14:87:d3:ca:df:90:26:c4:09:07:24:e1:b0:f5:
f7:01:d5:82:fe:d3:0c:60:18:4e:7e:4a:34:53:b4:
ca:d0:6a:1e:10:75:74:c0:83:a5:92:c4:b3:cd:f3:
8d:6a:3e:f7:40:ec:7f:6f:2b:a8:9c:c9:7d:6e:92:
b0:a4:21:fb:ae:d0:73:50:1d:72:18:4d:c1:ac:b5:
2d:ad:1a:b4:b0:95:c4:1f:89:38:af:ea:6d:31:0b:
51:c0:87:10:54:51:bc:f4:be:ff:6b:4b:b8:fc:58:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:4C:DA:CA:B6:A5:08:49:93:B6:59:1F:31:7E:48:DF:82:B1:19
X509v3 Authority Key Identifier:
keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:07:0d:1c:d1:3d:bb:bf:71:6f:95:a6:0d:79:5d:f8:6b:db:
0d:06:04:93:2d:f2:88:45:93:65:db:97:da:74:c3:f6:f0:52:
ab:95:81:12:3a:d7:e2:64:a1:2f:3e:41:85:c4:f8:33:09:45:
c7:5e:2f:d6:69:d1:84:59:75:44:6d:fc:31:9a:75:18:6c:14:
b1:85:06:93:66:b6:b5:f2:66:04:04:5b:89:fd:28:ef:42:81:
96:e7:3c:9b:16:b1:98:b2:f4:09:f4:5d:77:a7:81:1a:78:fb:
91:0a:24:ff:77:63:c5:80:ba:1d:eb:b0:6d:30:39:4d:03:c5:
20:f5:f2:1a:52:bb:d0:90:ae:7d:de:e5:ce:bd:bd:dd:79:89:
99:a2:b5:8d:e7:21:40:3c:c3:3b:20:c1:97:b1:45:78:c6:91:
db:7a:65:ae:80:e3:10:9e:f6:84:cc:e6:74:ed:e5:38:a0:c8:
ed:72:aa:31:a0:49:bf:14:81:e8:bd:81:99:63:da:f4:6c:2d:
22:93:6e:7c:0e:7e:3d:f6:b5:75:5d:c6:28:e2:cc:b9:73:bb:
fb:f9:60:7e:bd:aa:af:5d:a2:6c:97:f4:3d:9e:d3:06:6f:b6:
65:29:02:15:26:5a:04:d8:0e:1b:ef:3f:08:e7:2c:49:5f:02:
e5:c6:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:26 2025 by rpki-client