Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json)
Hash identifier: z9DGY5Qpo8rTMZJOlZo8JaysVpdIYfII+vAW60yiCN0=
Subject key identifier: 0A:91:9E:5B:8E:29:18:9F:85:9C:5D:33:30:64:BA:21:E8:8C:A6:BA
Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A
Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
Manifest number: E4
Signing time: Fri 31 Jan 2025 04:34:33 +0000
Manifest this update: Fri 31 Jan 2025 04:34:32 +0000
Manifest next update: Fri 07 Feb 2025 04:34:32 +0000
Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: hycFSBNQAv474OYVKFVvCNF8tevyJmERSquguLaOOQA=)
2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: secqQJuczQrOBoLhJh1bWX70I59NSlP/4Mk301elvvU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A
Validity
Not Before: Jan 31 04:34:32 2025 GMT
Not After : Feb 7 04:34:32 2025 GMT
Subject: CN=679c52d9-7130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:7f:56:28:5b:7b:48:9f:b1:fc:54:b6:59:
fc:ca:fe:f6:d8:51:c8:6a:c9:dd:5c:7a:34:96:df:
0d:d1:85:44:ea:d5:13:b8:85:56:2a:f1:4f:32:dc:
db:b0:cb:bf:e5:39:bb:16:9a:f5:d1:39:d4:1d:11:
3a:21:81:7e:d2:80:15:a8:ef:b9:e0:b8:c4:95:f4:
61:88:32:43:4d:6d:20:d4:40:69:b1:cf:78:30:39:
6d:d2:d3:a3:46:1f:37:24:6c:8c:a9:9d:7d:2e:cc:
e2:8d:1b:e8:45:b1:e0:f0:2c:d3:94:61:fa:25:e2:
0f:65:36:40:d6:7e:f1:42:f0:64:98:b4:51:5b:b6:
6b:df:f4:fc:26:ff:5a:6f:36:a3:af:13:32:81:94:
9f:52:ff:c1:87:03:9b:e7:c3:00:93:b9:a1:4a:d9:
53:7d:26:0e:f9:9d:69:a7:17:5b:6b:4b:d6:11:b3:
cb:f3:15:00:81:7b:a9:d9:67:be:ea:e6:8d:79:c7:
45:8a:87:6f:0d:33:ec:bb:f0:fd:ad:4c:9c:e2:0d:
b0:25:47:60:63:82:6f:b8:ba:6d:74:7f:c7:fb:c0:
6c:01:11:25:de:db:ed:77:70:cf:6d:89:cb:d9:92:
b3:d3:cc:21:1e:fa:7a:17:bc:2a:5d:ee:27:d9:d4:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:91:9E:5B:8E:29:18:9F:85:9C:5D:33:30:64:BA:21:E8:8C:A6:BA
X509v3 Authority Key Identifier:
keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:67:19:01:f9:b7:5b:0b:04:fb:bc:4b:fd:86:78:6b:2f:4e:
4d:60:89:94:24:92:a6:c2:4b:fa:d9:61:a2:4c:02:01:27:5d:
3a:48:c6:d2:66:f0:93:0e:4d:b6:38:c0:36:82:94:a5:5d:24:
4f:d9:03:d0:66:a3:b9:67:4d:da:6a:6d:a0:9d:ec:2e:c2:53:
f1:0e:c9:4a:6f:3f:18:ff:c9:6a:f0:dc:7c:7f:02:e4:7e:f9:
af:3b:0d:2b:ad:86:8c:44:ee:60:dd:1f:b8:ef:30:54:3b:3e:
2f:d5:56:f7:a6:23:ea:c8:d2:c1:84:e1:ec:be:1e:d5:01:62:
4e:2a:e6:6a:e4:59:5c:8c:f7:29:28:27:86:9d:c9:45:c5:25:
32:f1:6d:16:cf:04:cf:8c:d7:f8:40:fa:d7:7d:cb:e5:4e:66:
e3:ae:31:22:56:7e:6b:e9:9f:ba:d3:3e:fd:29:c3:ba:a9:fc:
7f:55:10:ec:83:86:1c:19:e4:31:59:1a:aa:c3:1b:fe:0c:49:
ec:48:3b:6a:6d:e2:fc:8b:67:51:ca:18:19:9f:45:71:68:28:
b8:97:a2:29:66:e7:c2:2a:88:a1:a8:5b:87:5a:6f:78:b3:65:
d9:ea:31:d1:20:8b:74:e1:84:af:80:a6:a3:ee:fe:e7:5d:0a:
5c:7e:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:27 2025 by rpki-client