Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier: ThLcBJqIZWttx3z8kL/CoZDdYJYDYr0tJrHIBivOrm0=
Subject key identifier: 1E:34:40:B4:59:35:4F:51:8A:52:25:7C:99:A6:D7:64:E9:C6:64:A5
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial: 1CC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number: 1CC0
Signing time: Fri 31 Jan 2025 16:10:52 +0000
Manifest this update: Fri 31 Jan 2025 16:10:52 +0000
Manifest next update: Fri 07 Feb 2025 16:10:52 +0000
Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: w5gk0hpzFJoidEiJrohkHx7x92jmGtryYaqEr4JQGX8=)
2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=)
3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=)
4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7369 (0x1cc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Validity
Not Before: Jan 31 16:10:52 2025 GMT
Not After : Feb 7 16:10:52 2025 GMT
Subject: CN=679cf60c-f462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:cf:5b:eb:a8:20:3f:18:0a:d5:24:e5:fd:
5d:fb:5c:b2:80:49:8f:ec:70:84:f6:0b:46:f6:a3:
26:fc:04:4c:1b:ea:e5:78:b1:27:c4:3a:f2:5e:09:
47:c3:ce:e0:72:1d:ab:ed:ba:3a:22:73:6f:98:67:
ce:21:55:74:8f:6a:b3:11:3e:49:d3:c0:50:ea:e9:
27:57:f1:b9:8b:2e:ac:95:dd:c7:18:eb:a1:51:de:
ce:8a:f1:52:d7:d3:ce:3c:d1:8c:cb:2a:bc:38:53:
fe:12:1a:53:f4:5d:96:94:67:97:65:24:04:e9:31:
65:7e:d6:dc:b2:dc:75:ab:44:ac:4d:58:d7:d5:2d:
db:5d:d4:64:6b:80:62:c9:73:83:ca:ef:cb:da:39:
89:a9:63:f7:44:bc:b0:40:71:ec:ee:20:e2:ad:ec:
01:04:3c:8d:e9:f8:e0:0c:11:e4:4c:39:4e:94:b4:
fc:b3:a3:f1:3b:fd:85:c9:7e:9f:88:76:dc:a8:4d:
0d:3b:36:80:cc:cd:97:2e:3f:36:7a:e1:2b:a3:59:
82:d2:f8:0f:5e:21:8f:06:b9:ab:b0:8e:08:66:30:
d4:c0:87:20:29:2a:3e:83:b7:2d:7b:c6:10:8b:39:
09:28:ad:16:c6:48:8f:09:c7:fe:ee:62:35:ea:4a:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:40:B4:59:35:4F:51:8A:52:25:7C:99:A6:D7:64:E9:C6:64:A5
X509v3 Authority Key Identifier:
keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f1:44:2c:34:0a:3b:d7:55:ba:18:97:71:da:be:52:b0:1b:
02:5e:ea:f6:41:55:22:29:d5:47:64:3f:d5:4b:d2:ac:28:dd:
ff:77:9f:ce:f5:f1:78:29:ac:22:db:ed:7f:87:c5:f9:ae:69:
3e:a4:63:4c:4c:cc:a8:5b:86:72:50:d0:76:7b:80:7e:fc:89:
61:f0:30:73:bd:58:ec:6b:cc:de:bf:90:1b:eb:81:34:d2:01:
54:68:49:91:65:8d:90:41:5a:39:6c:5a:e5:e5:69:14:0f:eb:
56:6d:f6:19:9c:70:da:e4:f8:fc:99:0e:e4:af:61:f5:10:46:
8c:1c:c8:07:1f:72:ea:ea:68:77:77:43:12:65:4c:1e:c0:b7:
fd:5a:2f:95:7d:24:d6:c5:7f:5a:52:f4:6f:78:1c:2c:7d:25:
ad:86:ad:6a:16:51:a3:53:cb:b5:cc:4e:8b:68:27:13:58:2b:
2a:dd:22:7a:39:29:5c:b9:a9:db:ea:70:07:1e:f8:95:89:a9:
98:3f:25:f4:0f:08:35:42:4f:55:13:8e:28:4f:a5:84:dc:b8:
b9:52:ab:2c:49:cf:0c:77:a2:f2:e9:51:7b:d1:c0:ca:9a:2d:
bf:68:fd:b1:79:d0:e5:36:f1:fd:1e:f0:5a:5c:40:ad:49:c4:
22:c6:b2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:21 2025 by rpki-client