Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: f7YIX5Zi1IO3Bdx3ZXP0xGZLjHPmGOf1saOp8293nSE=
Subject key identifier: D3:A1:92:57:66:12:4B:1B:E6:F1:F0:C5:16:85:C8:64:7D:46:F7:9F
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 1E47339961E0861C33378D8FDDD60069718813EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 0690
Signing time: Fri 31 Jan 2025 13:15:01 +0000
Manifest this update: Fri 31 Jan 2025 13:10:01 +0000
Manifest next update: Sat 01 Feb 2025 14:15:01 +0000
Files and hashes: 1: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: s6GpFm++Td2vziv7b8evt+nq8qsZvz/bpd1yFaiS6N4=)
2: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: IF/4kXyQvCk2vLXASCGOpPJIaiQusLGQBkhRvNAq2Hs=)
3: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: XNpTfw0GR0xZwJyCQLIkDsV7NTLx+baYV6zLrseLr90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:47:33:99:61:e0:86:1c:33:37:8d:8f:dd:d6:00:69:71:88:13:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Jan 31 13:10:01 2025 GMT
Not After : Feb 1 14:15:01 2025 GMT
Subject: CN=D3A1925766124B1BE6F1F0C51685C8647D46F79F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:92:18:75:47:3a:13:56:fa:95:48:e2:15:
9d:82:ee:a8:b8:f3:9a:5c:a8:dd:73:4e:74:6c:cd:
1a:3c:90:04:9f:a8:7c:f2:43:0e:09:6a:1b:27:ac:
3b:a2:e2:22:a7:2d:58:29:6a:bb:2d:5b:78:65:03:
c9:32:e6:28:8c:ee:69:2b:b8:68:0d:e9:1c:af:33:
6e:b2:28:59:ce:24:06:37:ec:0d:5c:bf:db:55:09:
c4:2c:44:ef:d8:3b:30:08:17:65:80:08:61:ed:5b:
82:0f:c7:11:36:e5:89:9b:d1:93:04:5a:3b:d5:32:
62:cc:ba:bd:a9:e9:a6:48:9f:ff:64:0a:f6:a6:4a:
50:63:e0:09:86:8c:23:d4:2d:05:24:72:ae:d3:76:
55:1e:36:11:9a:56:c7:e1:42:df:05:83:4a:9a:a1:
1f:e9:d8:c9:d1:da:30:7c:45:ef:7e:28:24:7d:db:
d3:b8:41:0b:c9:8f:7c:3a:cd:eb:4a:1d:4f:93:e6:
91:5d:a7:60:33:e2:95:ca:b0:f6:70:c2:62:27:a1:
b1:bf:53:40:31:7c:6a:90:61:4a:f4:1a:a4:ae:d8:
9d:64:c2:8b:80:7a:66:cc:bb:c6:83:85:2d:d0:6b:
d6:5f:76:f0:e7:8d:fa:b1:3d:42:f6:e1:af:a9:26:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:92:57:66:12:4B:1B:E6:F1:F0:C5:16:85:C8:64:7D:46:F7:9F
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:46:a9:c4:ae:24:11:35:1c:43:ed:84:aa:8d:99:28:d5:52:
81:73:43:00:10:78:c7:2e:69:74:5e:5d:49:aa:33:83:34:99:
ed:92:2d:10:83:8a:10:70:72:ac:f3:90:d2:21:77:c4:3c:6f:
e7:c2:17:5e:3c:14:b6:d3:d4:52:33:f0:18:ea:ae:75:cc:50:
65:c5:52:52:f9:c4:42:78:0f:70:8f:4d:4f:bf:d3:e1:5c:84:
f2:eb:4f:da:d4:1e:6e:c7:20:aa:3c:2f:7e:98:3a:07:16:42:
c0:6b:e5:ee:ee:6e:37:ba:3a:1d:f7:c6:c3:14:e6:ec:19:5f:
f8:76:c8:a6:15:e7:a9:35:26:48:ad:c3:70:34:58:59:94:e2:
ed:fb:e5:04:dd:df:e0:a6:66:06:8f:bb:cd:cf:d4:8d:23:31:
af:c1:cb:62:8f:ff:8c:a5:8b:34:a5:71:26:75:e8:56:f2:d4:
f9:d4:e3:0c:f3:b8:fb:c9:05:4a:a7:dd:2a:1c:22:d2:a2:00:
2e:b1:dc:29:82:53:0f:2b:53:50:19:0c:5e:9a:2a:33:8b:47:
a7:ab:96:2d:d6:71:6b:57:ce:93:a7:d9:d0:1a:c4:b9:27:e2:
bc:3a:2a:d1:32:f5:cf:5d:29:6d:01:cc:2c:08:5f:63:fa:b6:
94:12:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:38 2025 by rpki-client