Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
File: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft (raw, json)
Hash identifier: T3jj6YvH+6DqPgOeXre0wRh/fbRNoUdfd4mz3n7cjCI=
Subject key identifier: 7A:A0:B2:43:41:BF:D7:1C:60:3C:80:92:65:85:13:E8:59:AC:53:05
Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334
Certificate serial: 03AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
Manifest number: 03A3
Signing time: Fri 31 Jan 2025 00:48:15 +0000
Manifest this update: Fri 31 Jan 2025 00:48:15 +0000
Manifest next update: Fri 07 Feb 2025 00:48:15 +0000
Files and hashes: 1: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl (hash: UwwHan9ifa7Ygy7gKzD1uhZPU+Uq5apQ8VPsYu+jhpQ=)
2: A3E1285880EA11EC9B13735BC4F9AE02.roa (hash: auLsvpyLRgjjhrC/dtzTDNak13fW4h7mYDoTdQuzyQQ=)
3: A5621F3480EA11EC9B13735BC4F9AE02.roa (hash: x++ow/ozKQNuOOe+dOBuvM0MJl4sFaxWwuESx1Sn7Y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334
Validity
Not Before: Jan 31 00:48:15 2025 GMT
Not After : Feb 7 00:48:15 2025 GMT
Subject: CN=679c1dcf-0279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:83:81:1e:56:47:12:5a:bb:9b:d0:d6:16:
b1:45:eb:50:c0:da:bf:ac:e6:6f:06:d4:91:44:d0:
d3:6b:59:fb:64:86:db:49:47:77:b7:03:27:82:17:
86:a9:82:90:f5:00:16:a2:3e:46:e7:ec:ae:c5:4a:
d3:1a:bd:a8:7c:cf:ef:fb:66:51:ca:3b:ca:b2:bc:
cd:58:c6:04:c9:05:7b:23:3b:59:0e:6b:34:e8:d7:
27:a4:52:c6:16:b9:b5:00:1d:cb:70:91:01:cb:3b:
5c:7e:8d:a7:7b:de:66:94:60:43:08:34:68:0e:a8:
e8:46:c6:49:a8:41:a4:67:3f:72:6e:47:3f:a5:d1:
b6:21:62:5e:10:fa:5f:ab:3d:0a:35:14:78:6b:5d:
8f:d2:ad:e4:2a:3f:b1:01:34:97:66:a7:44:5e:80:
95:28:a8:a1:a6:1a:b6:01:27:02:a2:01:e1:39:2a:
dc:1f:62:76:ca:63:15:30:40:2f:75:29:83:c2:43:
57:6d:39:24:e7:75:13:3d:41:53:11:85:16:31:a4:
68:dc:e2:c1:ad:d4:36:08:e6:c8:1d:7b:be:ea:e6:
12:d5:ef:8c:3a:00:5c:99:27:55:65:84:32:ab:07:
a1:34:5b:a9:ac:1a:ee:96:4a:9f:cf:13:01:c3:79:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:B2:43:41:BF:D7:1C:60:3C:80:92:65:85:13:E8:59:AC:53:05
X509v3 Authority Key Identifier:
keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:ab:23:48:d9:53:37:20:99:41:ad:23:9c:88:1f:57:aa:e1:
61:bb:30:dc:03:a1:8c:a4:8b:2a:c9:ee:24:3d:88:c9:b1:5b:
f1:cb:36:50:bd:33:b1:25:92:8c:73:0b:56:99:7c:5c:b8:ba:
0e:68:db:0e:6f:28:56:13:f4:04:5f:e1:77:11:04:35:f7:0d:
e0:db:b6:c3:71:b3:25:f4:c3:b1:a2:90:a7:ee:4d:4f:e4:76:
b8:55:35:9e:61:2b:f0:07:a1:2f:10:55:5b:da:27:84:27:93:
ae:25:11:7d:5b:74:04:49:fd:64:65:db:b2:7c:e6:18:82:4f:
a0:0b:39:5e:e1:5c:76:ae:6e:74:20:06:c1:36:1d:a2:38:af:
50:ad:c2:de:da:f7:87:20:7a:25:b9:a4:48:1e:a1:67:8d:c4:
31:23:79:fd:7e:93:ba:91:14:c1:5d:7d:db:53:fa:fa:3f:47:
e9:da:05:a3:6c:ad:06:12:bf:0f:f7:cb:0b:26:0b:e6:3f:32:
7a:16:56:01:dd:ed:df:80:cc:70:8e:26:cb:6b:ad:52:c7:21:
85:c0:81:16:7c:6a:14:0c:4b:93:c1:c0:29:55:e5:6e:11:d3:
ec:c7:7a:01:1a:b9:c9:81:c7:a2:ef:bc:d4:cd:e2:23:c2:a7:
36:91:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:44 2025 by rpki-client