Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
File: 755Sv59IZcr4eHrZXObeT2R2hA0.mft (raw, json)
Hash identifier: B8CsZZqs2ZrmmchH6iCAtdcW8N0Dou6pl7aMZ22+kPA=
Subject key identifier: EE:BA:ED:9A:5A:BD:4C:93:22:A3:29:F9:60:66:D7:07:5F:5F:6B:FB
Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D
Certificate issuer: /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
Certificate serial: 0A4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
Manifest number: 0A45
Signing time: Thu 30 Jan 2025 19:49:44 +0000
Manifest this update: Thu 30 Jan 2025 19:49:44 +0000
Manifest next update: Thu 06 Feb 2025 19:49:44 +0000
Files and hashes: 1: 755Sv59IZcr4eHrZXObeT2R2hA0.crl (hash: agPj+Hf9koO2Vyg4omBoCauUSecDk0TubbUXC+H2eCg=)
2: 9E1721445CFB11EAA377D527C4F9AE02.roa (hash: DDWfC2SDa6mkLERH2fLjEnqKEWrtJ+AhIE6qZcqqt1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2637 (0xa4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
Validity
Not Before: Jan 30 19:49:44 2025 GMT
Not After : Feb 6 19:49:44 2025 GMT
Subject: CN=679bd7d8-396e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:78:b0:e7:22:d6:c4:7b:5f:6b:6d:3b:ad:77:
91:cb:21:de:f2:df:d8:32:c1:84:bb:84:99:1c:d9:
57:c2:b6:0c:7c:af:ad:14:39:2e:a5:17:67:6f:a5:
d4:42:ae:90:1a:40:03:54:e7:af:7b:8b:16:d8:e3:
a8:ea:0f:f4:86:eb:8b:ab:b4:f9:cf:dc:67:61:88:
eb:db:e0:5b:28:30:6f:8d:4c:0f:32:64:b3:d7:cc:
f8:2c:fe:dc:72:5e:86:0c:6e:01:38:9b:d5:53:f7:
23:47:f1:22:1d:be:59:1c:5e:85:9d:69:a1:3b:19:
f7:ee:f9:c9:34:a7:dd:63:ec:ad:6d:e0:43:a5:35:
db:a9:7b:be:76:0d:69:70:fc:d2:6b:f4:23:c0:1c:
44:ce:f7:2b:5b:34:59:97:20:55:a1:64:13:e9:28:
01:23:ee:72:31:92:3a:27:82:b1:51:ca:37:c0:03:
78:2a:c8:a6:a8:64:9e:dd:16:93:d4:cb:a4:08:35:
c0:2f:0b:59:9b:15:b4:82:47:7d:2f:ad:fb:bc:c2:
2c:55:7a:62:36:cc:64:d1:d4:51:95:11:2a:37:43:
81:52:1e:a7:29:9b:1a:33:f7:84:f1:39:3c:ff:9b:
e8:4e:71:c3:b1:a3:a3:25:c2:5a:9a:7f:11:30:b2:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BA:ED:9A:5A:BD:4C:93:22:A3:29:F9:60:66:D7:07:5F:5F:6B:FB
X509v3 Authority Key Identifier:
keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:19:60:0f:86:06:67:49:8d:f5:ad:87:bb:67:88:c4:6e:e4:
85:59:e5:a2:54:55:07:a8:ba:48:6a:7f:43:72:88:1a:ed:cd:
3b:63:0b:e0:7e:e9:75:38:33:a1:71:67:c8:5a:b6:67:73:27:
bf:5e:1e:f2:bf:78:9f:f3:49:f7:68:47:28:ff:af:f6:be:30:
ac:8d:70:e7:db:f9:6b:44:86:2d:da:55:2f:39:c8:d8:9f:a2:
ce:32:a6:bd:16:7b:e3:f6:7a:04:31:35:03:e7:ad:56:18:21:
82:ec:14:17:71:2f:49:9a:b1:bd:e4:38:27:47:01:ba:e0:cd:
8e:b0:ff:9b:3f:c2:45:d6:f5:48:2c:da:e2:46:cc:4d:28:66:
f1:6d:98:1c:2d:44:58:76:08:bd:86:60:db:b7:78:b6:b3:53:
c1:bc:db:76:55:32:40:a9:a6:66:a5:67:0d:65:dc:32:e3:f8:
c8:3b:10:1d:13:ea:c2:5b:4b:62:3e:88:9b:c2:5b:d9:99:8c:
01:16:d5:b3:a9:25:53:5a:d8:ec:19:51:ad:e1:9f:4a:c1:97:
62:42:c8:ff:32:5f:25:e3:75:dc:b0:7d:ac:e7:88:58:52:15:
80:20:44:f3:df:1f:3b:56:19:88:6b:81:cb:85:3f:63:99:61:
80:43:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:51 2025 by rpki-client