Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier: a/uUl8evY8gtUUwetApOyf/l14ABTw0ZJObgM3/c/BA=
Subject key identifier: E0:60:D6:0D:11:97:1C:E0:AF:B2:FE:F5:67:ED:FE:E6:A3:D9:97:99
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial: 02F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number: 02F2
Signing time: Fri 31 Jan 2025 01:22:21 +0000
Manifest this update: Fri 31 Jan 2025 01:22:21 +0000
Manifest next update: Fri 07 Feb 2025 01:22:21 +0000
Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: EdEyKH69hbb6gcviDioKIkjI6A+37jZ6qllfdiKpYzc=)
2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: BWjw8ZzgxeIsXktsSggwFqoGIGBV9RKmqBd6UmUawiw=)
3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: w5wAGuBp2YZuw7r2gpx/dOhrAuPlBh9HGiqoIoNxrIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761 (0x2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Validity
Not Before: Jan 31 01:22:21 2025 GMT
Not After : Feb 7 01:22:21 2025 GMT
Subject: CN=679c25cd-44bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:09:3b:3c:37:fe:a5:5b:71:94:cd:0d:90:
1c:d0:a8:75:b5:2e:e9:77:4f:f6:ce:77:38:b6:5c:
d2:d4:fd:48:d3:ee:3c:84:49:17:ce:8e:52:2e:49:
42:35:ee:f0:37:55:b4:2e:b5:61:b5:9f:2c:60:fa:
b1:e9:7e:f7:fa:35:be:25:ac:25:35:84:de:30:e8:
b6:86:aa:da:95:36:0c:a9:e6:be:c3:9c:fb:6b:08:
e1:31:cb:e3:82:f2:58:37:58:98:dd:a4:a6:15:d8:
5b:37:d1:01:78:7a:00:2e:d6:f9:48:db:e7:69:e1:
d8:33:a9:52:ed:04:3e:95:e4:42:96:9c:a6:11:87:
59:a3:56:84:b4:6f:6a:c9:64:9c:14:5e:2b:ba:00:
7a:c3:de:3f:92:07:19:82:56:68:66:c9:c1:48:bc:
28:42:c7:0f:ea:9c:b7:cc:e9:7a:f0:26:80:8d:cd:
08:8c:0b:e3:a2:5a:79:62:7c:53:95:82:c6:9e:e4:
e0:7e:e7:b4:be:85:e4:b4:10:31:d2:3c:1a:82:a5:
82:a5:f5:d7:0c:3c:10:92:7b:d3:da:c7:fd:01:86:
9c:a2:9b:97:2a:69:4a:03:59:9b:4a:33:3e:c5:ab:
ba:c3:bc:cf:88:dc:5d:bc:25:fc:21:f7:b4:22:34:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:60:D6:0D:11:97:1C:E0:AF:B2:FE:F5:67:ED:FE:E6:A3:D9:97:99
X509v3 Authority Key Identifier:
keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:bb:ee:1b:76:3c:8b:b0:32:93:fc:b0:e5:7e:a2:35:74:26:
08:6a:61:e6:80:8a:d2:de:00:77:0d:fe:84:10:c7:06:02:fc:
51:dc:09:a7:90:a6:90:ab:9a:da:69:b5:93:79:3c:77:d3:91:
47:a3:fa:9f:f1:47:66:dd:e7:3d:da:19:36:c0:89:15:49:5e:
31:62:80:e8:36:23:8d:b0:ee:f0:7c:b5:a7:0a:49:8e:bd:76:
58:3f:32:d0:6b:a0:a9:dd:09:f9:5c:00:8e:48:51:33:7e:90:
77:0c:50:f6:d4:63:73:45:c9:9f:db:70:e5:3e:13:39:20:cf:
0e:a9:eb:23:12:56:97:b6:83:9e:2b:40:e1:9c:00:32:41:79:
f3:97:9f:6a:50:e9:80:d2:90:50:2d:9f:a4:6a:b8:8c:64:b3:
72:61:ea:c1:3b:8b:2c:fb:76:bf:c0:fa:0c:84:a8:66:f7:24:
d6:3d:a1:7b:fd:d5:a9:20:70:44:5c:b9:49:27:07:c2:5b:88:
89:45:5f:42:fc:4b:93:57:8d:87:e3:24:d9:88:0e:db:00:e1:
f6:f9:60:6b:77:4f:be:bb:5e:b7:70:2b:31:18:cc:09:ea:47:
d2:9d:d0:c5:d9:95:16:54:20:13:0a:60:a0:18:eb:87:93:bc:
23:27:89:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:38:01 2025 by rpki-client