Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier: WuJTZZ0m40fAfaAU46sn3B8h/+daTPCcfDtUhxlw/+0=
Subject key identifier: CB:CD:F4:E4:CF:FC:88:6F:22:9A:D3:AB:34:61:23:4E:96:C8:C6:F0
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial: 735F9B351A24E2AF120CA52C15DF914F02A8FA22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number: 79
Signing time: Fri 31 Jan 2025 08:28:51 +0000
Manifest this update: Fri 31 Jan 2025 08:23:51 +0000
Manifest next update: Sat 01 Feb 2025 08:51:51 +0000
Files and hashes: 1: 3130332e3232332e3138342e302f32332d3234203d3e20313531313036.roa (hash: CBbZdYOvzs1t+tqtDF6Ts0Z4cSe+M4/U5oUl3sp2oLk=)
2: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: gBUh+jkXoGIfTfPEjbIf9Saja/tYhDtVItQbygufRKA=)
3: 3130332e3232332e3138362e302f32332d3234203d3e20313531313036.roa (hash: 5EZYnbNBnmMuoooKhi+JXfsSqTNbJA1q6nxShtBVdVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:5f:9b:35:1a:24:e2:af:12:0c:a5:2c:15:df:91:4f:02:a8:fa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Validity
Not Before: Jan 31 08:23:51 2025 GMT
Not After : Feb 1 08:51:51 2025 GMT
Subject: CN=CBCDF4E4CFFC886F229AD3AB3461234E96C8C6F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:27:67:47:da:a6:9f:8d:05:cb:41:f9:42:
bc:06:72:8f:b5:e3:62:ac:26:e3:e3:8e:90:12:f1:
b9:c8:bc:65:b4:96:1d:96:ab:20:b5:a7:bc:1e:84:
bb:f2:34:28:31:15:c5:39:ee:21:ff:c3:6f:87:e5:
81:98:ae:ef:31:a3:ba:3d:fa:52:2a:17:5a:85:42:
28:d1:92:25:e1:ef:9a:a1:3c:8b:ff:85:9c:f8:7c:
89:d9:de:bf:99:cf:ab:5f:ea:3b:6b:60:c8:ad:7d:
1c:ef:71:f7:e2:c4:06:2a:5d:ae:f6:ee:4c:f5:4e:
dd:de:26:39:5c:a3:5d:d5:0f:96:83:ba:2e:17:8f:
8e:6f:67:fd:af:af:f7:f3:54:6f:2d:15:f3:33:68:
c4:3e:f7:91:50:17:18:69:8f:88:2a:5a:64:c3:f1:
cc:02:86:9a:74:15:1c:62:30:50:2a:e3:44:c7:db:
dc:86:35:24:80:22:3b:cd:4d:3b:43:ae:9e:28:85:
7f:2e:20:d5:1c:07:f5:57:ff:72:9e:1f:d9:11:d3:
1a:0a:29:2e:b2:18:7a:58:c2:56:42:23:38:3d:64:
bb:9b:66:01:c2:d9:ff:53:25:b5:9e:73:ac:40:2c:
6c:07:03:e4:9f:32:5f:51:2b:d3:5a:be:3f:94:39:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CD:F4:E4:CF:FC:88:6F:22:9A:D3:AB:34:61:23:4E:96:C8:C6:F0
X509v3 Authority Key Identifier:
keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9e:ef:7b:cc:73:8e:d0:b5:85:fc:73:c8:3a:08:fa:41:06:
ee:07:e1:b5:b3:e1:1e:d4:79:31:0a:80:1d:dd:ca:01:3f:44:
3c:c1:09:0b:b2:a6:f0:5c:c3:79:19:0f:2f:33:cb:a1:c4:3b:
f6:05:e8:1f:65:18:f0:53:10:60:22:c8:5d:1c:aa:cc:c0:17:
c1:c6:60:17:05:50:51:7b:8e:d6:92:da:b6:5e:dd:d1:f4:bf:
6b:eb:68:71:fc:fe:fd:95:ee:4a:3e:eb:45:ff:e2:c1:18:3c:
2a:89:88:54:01:e7:55:73:e5:53:e5:d7:e8:53:1e:bc:97:3e:
e7:7b:65:d5:1e:73:6c:61:56:ce:ac:ff:04:b4:42:12:7e:7c:
a0:b9:08:ad:ae:c1:55:b8:70:ba:40:a7:2a:46:dc:ca:a7:8f:
da:b4:51:8c:7e:27:2d:1a:40:b8:b8:1e:cb:06:d7:2d:d2:85:
f9:ca:46:c2:4e:6d:68:7c:3f:79:23:32:21:73:c6:15:0b:7a:
36:d2:f2:c1:ed:78:8e:00:4d:62:7c:f5:c2:8b:80:1f:38:a4:
7a:db:70:26:29:5f:d1:fb:75:41:60:c2:a0:e9:d5:f5:fc:40:
c7:3e:c4:88:e3:f8:5b:62:23:d4:08:ad:b4:f8:9a:c5:26:d4:
f2:bc:ae:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:46 2025 by rpki-client