Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
File: EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json)
Hash identifier: lzge0U90wpD69PTDzxHArpJDvNfEPhoIrPgr7y+wQnI=
Subject key identifier: 10:53:EB:51:09:AE:CC:66:30:C1:63:A8:B3:EA:EA:BC:A3:36:37:11
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Certificate issuer: /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial: 0432
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
Manifest number: 042A
Signing time: Fri 31 Jan 2025 00:24:11 +0000
Manifest this update: Fri 31 Jan 2025 00:24:11 +0000
Manifest next update: Fri 07 Feb 2025 00:24:11 +0000
Files and hashes: 1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: Gz5pG1xAV2a1qhR6G8iIjHMmMXJ6If9/paCASs/oaz0=)
2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: d5/NJRnIjibSymNbNk/lOaJ1Q3nAQoqs/MS6HVTtaFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1074 (0x432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Validity
Not Before: Jan 31 00:24:11 2025 GMT
Not After : Feb 7 00:24:11 2025 GMT
Subject: CN=679c182b-295f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:2e:e5:24:e0:92:3b:4d:a3:e7:1e:82:5f:
97:1c:38:ce:10:5a:17:3f:f7:67:ab:05:87:2f:ee:
40:23:e4:07:09:4a:3b:dc:4a:61:22:30:9f:e7:dc:
f8:ff:84:05:31:64:92:05:68:52:0a:1d:b5:14:e2:
56:94:ae:e6:17:15:98:8e:0e:70:1b:12:ca:a0:6b:
4a:fd:08:3d:53:3a:13:5d:5d:b4:35:52:93:4f:b8:
16:95:33:2a:fe:6f:39:9a:50:4d:3b:52:0f:5e:a7:
91:a4:5d:f4:0a:2e:44:7a:6c:89:4e:eb:d4:1a:d1:
7d:3b:12:c5:1a:15:5b:26:f1:fa:2a:ce:af:e8:0b:
52:c2:d5:14:0b:7b:8a:a7:cc:6d:bf:ae:ee:9d:3d:
ee:1f:c1:c4:bb:88:ae:1c:ee:e6:a7:1d:38:dd:1a:
95:ab:2e:1b:98:d4:8b:d2:10:05:e4:9b:00:ae:86:
cf:23:00:1a:c1:8c:30:da:8e:59:9d:a6:e7:91:5c:
ce:5a:03:74:a7:e7:ba:34:15:61:0b:d6:45:57:3e:
69:65:ba:5b:12:92:8a:03:5b:7b:03:35:f7:40:59:
7f:07:85:a9:2d:bd:0b:5b:30:c2:44:2f:b9:95:c8:
0e:14:36:36:68:8f:c8:91:57:67:31:a3:12:8b:b7:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:53:EB:51:09:AE:CC:66:30:C1:63:A8:B3:EA:EA:BC:A3:36:37:11
X509v3 Authority Key Identifier:
keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6b:0b:69:6f:47:9f:cd:ef:18:6e:0b:16:53:55:cd:b4:88:
28:92:9c:92:61:d3:ab:f2:76:dc:c8:e1:63:74:66:61:66:9d:
a3:69:1b:b2:2c:81:cc:14:af:34:cf:cf:22:ed:dc:db:88:4c:
cb:fd:e2:74:22:09:46:f4:d3:62:ee:15:38:87:2a:c3:11:a5:
eb:72:27:cb:65:b7:c3:06:a4:6f:42:75:07:83:fd:0d:84:d5:
0c:c0:07:aa:99:03:84:7d:2d:c1:47:9c:6b:3f:1a:91:19:47:
bb:24:ad:50:94:4c:f6:e3:ff:ad:a2:5f:1a:5d:1c:14:9d:5e:
af:d4:e7:b1:9a:4d:dc:4d:59:cf:ce:a5:e9:f4:b8:05:79:0c:
39:cd:83:d5:e9:3e:1c:20:64:1c:95:8b:fe:0a:da:0f:ac:18:
83:9b:c2:43:5e:be:52:4d:88:7b:cf:75:44:63:63:3e:d4:53:
e3:85:19:86:00:cd:92:90:db:d6:d8:4f:59:2b:6a:ea:e8:7a:
fd:cc:48:7c:bd:ec:38:90:52:5f:b4:47:fc:26:84:40:ec:6f:
5d:27:80:38:ba:5a:2c:eb:a5:e0:ae:35:4c:f9:1e:8f:87:cc:
96:bf:cc:0d:40:ed:5b:93:bb:ee:ec:c7:6a:e8:fe:88:f4:ad:
b3:1a:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:29 2025 by rpki-client