Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json)
Hash identifier: XE5/wuwMY/zGWuN58h7Du2o6LBcbwE8HIIcOGCVKzmw=
Subject key identifier: 92:50:53:EB:CF:46:51:45:CE:22:31:6D:B6:4D:53:B1:44:3A:69:EA
Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
Manifest number: 0108
Signing time: Fri 31 Jan 2025 04:10:09 +0000
Manifest this update: Fri 31 Jan 2025 04:10:09 +0000
Manifest next update: Fri 07 Feb 2025 04:10:09 +0000
Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: SErNb8W0Xgi0+S7Qph6Mh5Umc0gjsO7vEYQGZI7zIJs=)
2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw=)
3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Validity
Not Before: Jan 31 04:10:09 2025 GMT
Not After : Feb 7 04:10:09 2025 GMT
Subject: CN=679c4d21-dbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:a1:d5:da:28:bd:d1:1f:ba:06:bc:94:d2:
52:cd:ab:8f:a0:dd:72:a6:2b:7e:14:d1:21:0d:a9:
7a:72:f4:c4:48:b6:51:8f:8f:f0:a5:94:15:65:28:
a2:ae:c7:a6:b7:ca:61:8a:8d:4b:96:d9:3a:81:cb:
a2:bb:c7:5e:65:73:c9:30:6b:f5:23:a2:91:b4:ec:
e2:14:3a:46:7b:d6:ba:70:5d:4f:b3:b8:fb:ba:65:
70:ad:43:78:18:66:48:65:59:dc:04:7f:22:98:ae:
19:78:ab:64:ac:e3:db:46:ca:69:08:6a:fd:2e:ac:
97:1e:ea:f0:b0:c7:da:fe:35:ec:fe:cc:6b:3f:83:
30:b1:fa:94:5a:05:34:50:69:54:b3:e8:dc:f0:bd:
22:17:c3:6f:8e:71:da:58:af:ef:e8:73:ce:d8:f8:
77:fe:18:69:18:f6:ab:7a:28:53:24:4b:e3:c9:ea:
86:06:80:ef:67:04:fd:15:6f:b3:39:44:b2:a0:aa:
36:da:be:bc:6a:de:96:2a:02:06:ec:9c:46:8b:db:
45:3a:b6:18:ab:23:ad:b5:9d:bf:7e:03:e1:17:1c:
64:f5:b6:c4:e6:fe:29:3e:9a:93:98:b6:be:64:a7:
a8:bf:29:5b:f3:6e:52:4b:c7:e7:df:47:8c:d2:ac:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:50:53:EB:CF:46:51:45:CE:22:31:6D:B6:4D:53:B1:44:3A:69:EA
X509v3 Authority Key Identifier:
keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:8d:a8:40:7a:c4:39:31:68:57:97:56:c9:8d:8f:e1:e6:c2:
52:f7:21:56:b0:91:3f:7a:f9:97:79:2d:af:89:d4:e7:ea:1f:
ca:9f:ad:2a:f6:fb:fd:2b:98:4e:07:85:4e:1a:bd:73:f3:17:
ca:9d:b6:09:c2:71:7c:0d:dd:7e:a9:d0:84:5f:53:c4:9d:fe:
0b:a9:88:63:1c:1e:a7:bc:b5:3f:6e:be:67:d4:15:b2:23:f7:
5d:9a:db:d6:82:59:c4:10:0c:a9:4c:b5:e9:05:75:bb:47:af:
4d:32:7b:88:ef:93:ba:a3:56:6a:ba:f0:dc:95:c0:92:27:03:
9d:68:82:46:4f:24:a6:eb:54:cd:fb:07:89:a9:cf:d7:02:6e:
04:22:91:ab:04:06:4e:06:17:90:e3:d0:4e:99:c2:6f:32:b6:
07:6d:62:81:97:19:64:d2:0d:e7:91:17:e4:66:b4:5c:3b:6b:
2c:47:47:50:38:95:21:4f:ca:c4:fe:12:43:ec:85:13:b2:57:
0d:24:de:63:2b:3a:61:7d:11:06:79:9e:50:de:3b:cf:07:ab:
c9:8c:8b:71:35:a7:67:38:2a:d3:fd:79:5f:67:d2:56:46:95:
54:a1:7d:d6:f6:78:a5:c7:ea:52:72:91:b6:6d:94:ae:ba:a9:
2a:28:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:06 2025 by rpki-client