Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json)
Hash identifier: r+4Jh6VBYB4yc6Y3G/zEx1qilno7i3Qa889vVbgQupE=
Subject key identifier: D0:DB:36:43:FF:51:E5:5E:D4:EB:FF:49:95:6D:AA:8A:0D:0E:ED:C1
Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
Certificate serial: 1358
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
Manifest number: 1342
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Fri 07 Feb 2025 17:00:41 +0000
Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: gODX8/J70jDrxBwhfJ9VQNI9NvqaWi26YTh5+0g3Ogc=)
2: 4338FC5CFB5611EBB7032080C4F9AE02.roa (hash: jXq2yfYI+6Vq13ZwndDj/+d34MA8vN7mKixhRF47lwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4952 (0x1358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 7 17:00:41 2025 GMT
Subject: CN=679d01b9-67c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:08:bd:f7:59:4c:e7:69:ba:25:c1:b5:f4:
44:dd:dd:c1:05:c4:64:31:ab:f6:7f:f9:f9:df:c2:
3c:eb:8e:be:f6:e4:bc:1d:38:1e:23:bc:f1:b5:e0:
6f:e1:53:89:f0:fb:a6:f6:35:e9:e4:d9:c3:c1:c2:
4f:c1:15:fc:c4:95:de:e0:d5:76:78:86:d0:74:21:
8b:a9:ef:d9:f0:91:6e:2b:55:e7:b6:96:0c:c6:a6:
13:0a:e1:69:80:4d:09:71:13:fb:1c:31:ce:e1:90:
50:0b:65:7e:46:32:f4:73:6f:86:85:60:e8:40:eb:
be:1d:62:eb:95:4e:41:8f:61:86:c2:fe:73:89:58:
53:88:3b:31:c9:19:52:4e:a7:26:fb:1b:fe:68:e3:
7b:d2:5e:35:e7:92:6e:93:3e:7c:c8:30:a1:f6:58:
6e:c5:65:23:ce:27:91:c6:23:32:fe:71:3a:89:68:
87:38:85:e8:40:72:c2:68:79:85:9e:fd:d2:0f:64:
bc:04:36:13:b7:a2:22:81:9d:60:70:07:14:37:a2:
d4:75:3c:fd:e4:3b:f7:ed:43:91:c6:24:33:a3:ad:
4d:df:91:f1:b5:da:e8:72:94:b4:7f:99:f6:ec:41:
be:a6:f8:ae:fe:30:38:f2:1e:a8:7e:b8:ce:ee:ee:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DB:36:43:FF:51:E5:5E:D4:EB:FF:49:95:6D:AA:8A:0D:0E:ED:C1
X509v3 Authority Key Identifier:
keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:6e:e2:a1:9a:18:05:50:c6:b1:6b:08:2d:74:e8:50:a3:67:
61:62:8c:4a:a9:ac:d3:f4:5e:62:1b:99:4d:c2:fc:93:d7:26:
f6:7b:ab:2b:7a:f4:a9:61:a7:b9:6a:15:e4:89:d0:3f:d3:5c:
dc:e7:b4:c3:e9:7d:b2:81:e7:5d:eb:b4:b9:ab:11:44:77:4d:
30:fc:e8:f4:48:bb:ca:11:c8:71:29:b9:36:2d:5e:b4:67:60:
86:2c:b2:d1:90:63:23:99:5e:1b:64:39:38:c0:d6:31:36:af:
9f:e2:a0:bc:b3:f8:cc:b9:3f:b0:72:fd:f0:f2:bd:48:0d:36:
da:c8:69:90:08:2f:9b:7a:31:46:b7:a4:82:b6:b6:db:77:f7:
55:e4:42:ce:91:49:3b:34:55:d7:1b:62:17:8f:1a:28:1e:2a:
e5:55:0d:58:d0:b2:b6:ac:73:48:aa:2d:fe:a4:93:bc:02:da:
c9:31:52:2d:d5:e6:24:8e:ec:53:70:2f:84:fb:2c:7c:6d:87:
d9:b1:66:d9:9d:7a:6a:e2:c4:84:ba:a5:c8:b9:48:75:f2:0f:
bb:5c:b6:63:f8:f3:08:75:14:d9:b4:7b:e0:d0:e9:a9:a0:28:
e3:21:3f:6e:f6:d7:03:ed:84:58:f1:23:b1:2e:a0:d0:fc:8c:
ff:1f:fc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:46 2025 by rpki-client