Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier: g5mHthpEkQ4xWNU/KMu20oC7hWHhsMw9r1c/MKzsLrA=
Subject key identifier: 13:D7:4A:B0:85:BB:9C:C3:66:55:06:D8:2D:56:FB:40:11:77:98:01
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number: 01E7
Signing time: Fri 31 Jan 2025 02:17:32 +0000
Manifest this update: Fri 31 Jan 2025 02:17:31 +0000
Manifest next update: Fri 07 Feb 2025 02:17:31 +0000
Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: dhDi0glKID0ZhZ9KkF2Vh2gfEmzUnv3V0i/g13HYDnU=)
2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4=)
3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Validity
Not Before: Jan 31 02:17:31 2025 GMT
Not After : Feb 7 02:17:31 2025 GMT
Subject: CN=679c32bb-d53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:40:ba:aa:df:a0:d7:ca:48:1f:03:18:ba:17:
6f:28:13:49:91:0e:71:d9:f6:8c:14:73:4a:87:a0:
fa:ef:b3:45:d5:ca:8d:ce:14:35:a5:ec:82:5d:be:
4f:e1:73:23:31:f2:e0:c2:01:5d:45:5a:37:dc:20:
54:69:6a:44:1f:e4:e1:ac:fd:86:27:0a:8c:4f:de:
27:6a:b7:f0:ec:6b:02:4a:db:1a:e4:20:57:74:0b:
68:c1:cf:a4:ec:a5:77:7a:b6:c1:3c:0b:02:93:d7:
14:eb:2a:61:41:f1:90:f4:9b:1a:a0:44:7f:e9:d9:
e0:16:43:9a:d5:71:cc:71:c5:f2:1d:f2:e4:2f:d8:
07:e9:80:46:30:d6:a1:bd:10:46:d1:29:17:2f:90:
4e:ac:a7:be:d5:e0:41:98:ed:95:47:0b:2a:bc:d6:
a4:d4:82:65:70:af:5a:cc:53:43:75:2f:8c:48:1e:
a4:e5:b9:dc:d5:74:5a:82:57:76:e1:a5:68:df:03:
9c:48:ee:41:53:ad:da:fd:c9:54:52:2e:1e:7d:dd:
39:6f:cb:a6:b1:8e:03:89:3b:43:e0:0a:a0:62:e6:
6b:49:70:a6:be:77:12:c9:5a:6e:ff:5f:56:ed:69:
5e:52:22:e5:6e:21:97:09:3b:d2:7c:e0:bf:13:56:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D7:4A:B0:85:BB:9C:C3:66:55:06:D8:2D:56:FB:40:11:77:98:01
X509v3 Authority Key Identifier:
keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:d7:f2:e6:36:c6:24:a8:70:87:be:ee:35:d1:f8:a5:ab:57:
88:76:b6:0c:01:0f:e4:c0:61:7e:c2:31:70:e0:dd:c1:35:c2:
31:a0:f9:4b:c9:d0:bf:6b:f5:dd:1b:ee:b8:98:08:40:ef:4f:
a4:c7:5c:5e:c9:f2:e4:26:ec:e7:30:ab:9c:27:2a:26:4f:0c:
58:c1:4c:1d:54:5b:d3:c6:77:5a:a8:3c:bb:ef:98:99:7e:d1:
47:58:93:ea:4d:9f:ba:03:f0:b0:f0:5d:46:be:2f:bc:ce:4f:
d9:aa:8b:dc:fa:15:21:76:9b:d6:d7:5e:79:0a:d2:97:6d:be:
81:57:d3:fa:55:53:ad:9d:e5:d3:b6:85:2e:8d:4a:cd:d9:4e:
8b:9f:d0:40:38:64:30:89:19:98:5f:bf:c8:f6:c3:4a:6e:e9:
29:f9:84:70:25:cf:3a:7d:0e:c5:8c:c4:c8:47:4d:07:56:f6:
21:3e:07:4a:89:ba:c0:6c:ee:8f:58:06:92:2f:0e:17:f0:5a:
5c:13:83:6d:53:f0:b0:da:76:f6:ea:87:e5:6c:61:d6:07:f5:
88:5d:d3:9b:f8:49:59:59:0a:76:10:13:fc:90:97:4e:03:8c:
da:e9:e6:b8:2b:92:e3:65:6a:a7:c6:97:33:70:1e:4a:74:c0:
8c:96:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:11 2025 by rpki-client