Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
File: Mh0Kt4oavjUafbeTINn_03KgjEU.mft (raw, json)
Hash identifier: NogISgHGdo5Glu9C8QAPNCnC1tDEeEuaf5zfKJeDogw=
Subject key identifier: E1:13:E9:12:5F:6A:7B:8E:A0:9C:FD:A8:86:A5:FC:93:F7:3E:F6:81
Authority key identifier: 32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45
Certificate issuer: /CN=A9110FEF/serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
Manifest number: 01A8
Signing time: Fri 31 Jan 2025 02:33:59 +0000
Manifest this update: Fri 31 Jan 2025 02:33:58 +0000
Manifest next update: Fri 07 Feb 2025 02:33:58 +0000
Files and hashes: 1: Mh0Kt4oavjUafbeTINn_03KgjEU.crl (hash: Qn6RYmD+b1CrD7gmprY83cWS1dmquiBw6W/CrQ5/74E=)
2: 47DA361A3F8F11EF8FA3802DC4F9AE02.roa (hash: J1WS3Wr+Cq+Ya2W/A8acH4GDeK/tNPuqzs+ITQkHcD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110FEF/serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45
Validity
Not Before: Jan 31 02:33:58 2025 GMT
Not After : Feb 7 02:33:58 2025 GMT
Subject: CN=679c3696-66db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:ef:4f:60:8e:25:49:51:f4:43:9b:e8:48:
2b:3e:60:f9:20:04:33:31:66:11:b3:98:ed:a8:8d:
a4:45:5c:22:72:ff:94:d2:bc:53:c4:49:a3:35:d9:
3c:ec:71:e0:5b:39:cd:b0:e1:f1:85:d7:3c:62:7e:
f5:aa:80:4b:e8:28:d0:fb:ec:c1:b0:6c:65:e1:89:
27:28:ab:3b:ae:6a:0f:58:48:cd:04:39:50:6b:dc:
23:0f:4a:cb:80:9c:bc:10:0c:42:48:0b:72:31:7f:
7b:d4:67:69:8b:6c:96:b8:dc:b0:36:f9:87:19:42:
ee:6a:77:bc:c2:0a:55:fd:57:8e:46:da:32:85:0d:
9c:5a:42:16:fc:c5:c6:f7:b8:70:d3:ba:7a:5c:6e:
0f:7a:30:bb:a8:a1:b3:86:14:ff:45:c9:a3:0a:9f:
58:ae:7b:eb:6a:2c:e4:cb:83:41:c3:fc:8f:26:67:
46:69:1f:2f:ba:dc:b0:fa:8e:4a:94:b0:b8:90:f1:
74:1d:6b:30:76:82:59:44:4a:47:4b:df:54:1b:f5:
c0:92:f0:d8:5b:c5:80:2a:a0:c4:de:14:17:02:86:
dd:5f:65:30:5d:5f:a4:07:43:29:4e:15:c2:05:cd:
6b:74:61:f6:eb:cd:5b:19:a8:fe:6d:17:68:70:a3:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:13:E9:12:5F:6A:7B:8E:A0:9C:FD:A8:86:A5:FC:93:F7:3E:F6:81
X509v3 Authority Key Identifier:
keyid:32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:99:fd:69:b3:36:73:af:9b:06:3b:fd:2f:8a:45:f4:b8:2d:
fc:1d:d2:29:f7:a8:58:ba:55:99:78:87:37:01:29:cc:7f:de:
dd:22:18:ed:26:20:87:d9:f3:73:d5:40:26:2d:7f:b5:a2:ba:
f8:c1:ed:91:0c:24:ca:8c:d1:5e:ea:a1:7c:44:b8:74:c9:48:
00:7c:1a:ec:6e:df:01:0c:8f:c8:b8:ce:2f:2d:aa:85:88:d4:
46:46:d8:f7:c1:b4:a8:a9:ed:8a:11:d0:77:da:4e:fe:17:fd:
da:c0:c7:f8:ab:da:b0:99:ad:7e:e6:78:48:e6:06:d4:df:1f:
e6:e2:f7:e3:e6:20:ca:a9:b6:69:46:f8:01:39:46:ba:45:18:
68:af:15:6b:9a:c3:9b:f3:2a:09:25:96:ae:ba:74:b6:0b:b2:
80:6d:3c:bd:af:14:8f:4c:63:68:4f:41:59:5a:b0:c0:4d:d8:
6b:f2:28:bd:2b:3f:a4:48:c8:cf:59:ee:75:c7:16:40:90:fc:
b2:39:8b:04:96:eb:aa:18:46:ee:05:38:c2:02:fe:a1:ac:2b:
09:a6:db:c3:46:9a:e2:6c:b3:42:63:46:4a:7b:78:8c:f0:35:
09:77:91:59:ae:f8:7e:0f:f6:66:99:3b:df:73:01:2b:7d:20:
ff:05:05:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:21 2025 by rpki-client