Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft
File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json)
Hash identifier: mOscQ9N5QRfzzfsFmkgnIMiEOVbSKYAep9/3Bwn86qE=
Subject key identifier: B8:A1:13:07:B7:BB:5F:05:32:52:57:27:36:70:08:C7:6A:FE:E9:1F
Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A
Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 04:06:29 +0000
Manifest this update: Fri 31 Jan 2025 04:06:28 +0000
Manifest next update: Fri 07 Feb 2025 04:06:28 +0000
Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: G37+kJKjjYzF7d2PcsjvL4VCRzMjKXvkCeCtxQXhhw0=)
2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: LhhhRZ9rRf4tKP+wa+0RqCOvGKNOYKeYqEjxUmyjiLQ=)
3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: QFhCans14JnqpL9Jwv4rbJ2pg2u9bZu64HPsOXqSkiA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A
Validity
Not Before: Jan 31 04:06:28 2025 GMT
Not After : Feb 7 04:06:28 2025 GMT
Subject: CN=679c4c45-a7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:d9:86:e5:a4:c3:95:74:8c:b4:c0:44:bb:
1d:32:8d:3d:b2:cd:66:7f:12:b5:2a:c7:82:a0:eb:
c5:b4:38:62:6e:55:c3:a7:e2:72:af:3c:7b:88:a0:
f2:57:a5:77:7e:e9:24:9c:df:dc:8c:fc:59:85:ce:
9a:8c:78:99:cb:65:ae:dd:42:40:b0:2c:ca:e2:0c:
bb:5f:d0:82:88:ed:c9:02:eb:4a:13:5e:8b:9c:8b:
d3:12:8e:82:2d:b0:59:02:9e:c6:19:fd:6b:5b:0b:
67:5f:64:d1:40:12:19:fb:35:53:f7:53:be:7e:58:
6c:88:59:6c:07:b2:fa:a4:9e:4f:53:9a:63:4f:df:
b8:3e:79:79:ff:51:a0:61:f4:37:0d:b6:f2:07:26:
c8:14:79:da:2b:4f:8e:b6:ec:1a:f3:ce:79:ce:22:
8e:59:e6:bb:b4:8e:f3:ed:f5:eb:05:ce:45:95:fe:
bd:c2:1d:fe:4c:d2:6b:56:3b:f7:14:d4:5a:00:45:
6c:42:45:1e:4f:e1:cb:7a:ae:3b:5c:ee:26:c5:a0:
13:f7:98:f0:3a:d5:91:d4:59:bb:9c:bf:27:4e:d9:
b1:3a:1a:ea:48:82:5d:56:bc:b2:6a:66:50:cd:cf:
48:fa:0a:58:fe:22:99:fd:62:54:65:58:61:9f:b2:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A1:13:07:B7:BB:5F:05:32:52:57:27:36:70:08:C7:6A:FE:E9:1F
X509v3 Authority Key Identifier:
keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:0a:61:20:88:75:a8:71:5c:09:d4:97:fa:2e:70:f7:58:fa:
54:8b:f5:29:1c:c3:2f:75:7f:2e:9b:32:5b:d7:74:54:1e:10:
1a:93:d6:db:64:dd:72:2c:1b:ef:24:b3:64:f7:f0:c7:fe:9e:
09:e1:c8:27:88:2c:11:0b:e8:ab:3b:d5:7e:79:90:5f:b4:6d:
fb:1f:3e:0c:86:6d:87:91:08:60:83:77:dc:80:8f:71:07:07:
7e:d4:b5:18:58:e9:36:43:97:0b:dc:a7:0c:56:b5:58:0c:96:
5a:d5:5c:fa:ca:ff:57:28:25:17:d9:99:2d:17:7d:8a:58:ee:
03:c2:2a:ec:bc:5f:5f:80:d6:83:f7:cc:bc:25:93:2e:14:31:
43:a8:a3:a4:04:f9:84:43:ae:78:97:05:7b:a1:29:3c:a7:a1:
7e:f1:a4:f8:d8:ae:c8:73:1f:9e:99:97:96:5e:40:4f:55:8b:
66:cc:4c:e7:87:52:95:fa:1a:22:d8:87:37:a6:57:0c:f6:16:
71:42:3e:b8:c6:2b:b2:bf:98:0e:8f:f8:1a:b4:d5:7b:4f:a4:
b6:d4:5b:d5:c8:06:7b:95:ca:bd:d2:3d:f4:f1:ac:fc:6a:dd:
c8:ac:a9:86:3e:41:98:83:d5:ce:dd:aa:27:4a:6b:2f:43:bc:
cf:5d:38:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:29:10 2025 by rpki-client