Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json)
Hash identifier: rjsxGfiej7q52Kj/aCrs9cZBybaEjLnoRm6DAgWIH20=
Subject key identifier: 3D:CD:93:D8:E6:E8:A1:6B:8C:65:F3:05:CF:FD:88:C5:22:3D:06:EE
Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Certificate serial: 0A3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
Manifest number: 0A22
Signing time: Thu 30 Jan 2025 19:54:50 +0000
Manifest this update: Thu 30 Jan 2025 19:54:49 +0000
Manifest next update: Thu 06 Feb 2025 19:54:49 +0000
Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: 9MoMRjJH5OCrHCAB2Ng/FJrppnvkSJQu34xwzeo5QdM=)
2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: nBUoblotDyN0/Ui1SLb2Vd1fmIjqvsKS8zhy8qSXzhY=)
3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: GuMyFs8mowkXrX6mHMVeKiU6aeZe3E0B32jb5heztzI=)
4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: lYCr6kAfGaxdZr+eWwEYwFIaASsvVDDBGvokBcs3KLg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2620 (0xa3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Validity
Not Before: Jan 30 19:54:49 2025 GMT
Not After : Feb 6 19:54:49 2025 GMT
Subject: CN=679bd90a-0fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:70:2b:d2:8f:5d:2f:dd:ec:ef:5e:93:bb:
c1:25:fb:ac:3a:f9:8f:6e:bf:a6:81:64:c8:be:cd:
65:0a:17:f0:80:ad:35:71:a8:3d:49:5a:b5:36:f7:
a5:51:25:0f:9c:ca:c0:6a:78:3d:57:bd:45:fb:fc:
06:87:79:1e:12:a7:8a:0a:39:9b:19:f6:c1:7d:d9:
c0:2c:87:e3:ed:8c:6c:91:ab:54:3a:90:ef:a4:6e:
e1:ad:08:0f:d5:10:1f:af:c5:d2:54:e7:d3:4a:b0:
99:7b:8a:1f:35:4c:24:b7:34:a2:bc:f9:28:f8:e8:
61:ac:ff:bc:0f:91:2d:8f:fc:3e:6d:87:b8:c4:3c:
db:03:22:96:43:96:1a:74:7a:d3:c7:6c:ba:6d:8d:
70:e6:dc:39:ae:74:5a:a7:b3:df:7b:ac:86:43:20:
0a:88:81:27:ee:4d:b3:c0:9e:cf:d2:eb:b2:cf:79:
bb:8a:1e:f9:1f:a0:ec:6f:2b:ec:82:00:72:44:c1:
f4:52:a6:83:b9:97:7e:00:15:57:af:6e:01:3a:f4:
26:e8:a5:93:9c:a8:d4:4e:d8:2c:8a:2e:f0:f7:c2:
5e:78:29:67:00:6f:bc:df:72:aa:99:4f:41:d0:cf:
4f:f2:89:78:37:ae:09:2d:a4:33:b0:06:60:b9:a0:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CD:93:D8:E6:E8:A1:6B:8C:65:F3:05:CF:FD:88:C5:22:3D:06:EE
X509v3 Authority Key Identifier:
keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a6:27:a4:93:1f:a5:1c:36:22:19:e2:c4:3f:12:e3:d5:5e:
59:00:32:06:fe:4c:8d:91:53:23:09:05:05:6a:5d:60:2a:45:
af:bf:79:1a:34:c6:81:3d:61:02:f8:cb:f6:fc:2b:d6:48:c0:
80:63:8d:79:31:b7:4d:45:13:15:a0:b2:9f:14:78:c2:de:e5:
43:f8:ae:19:98:48:4e:b4:23:0f:98:b2:c4:82:64:51:6e:80:
6b:a8:70:53:84:08:f8:1b:6f:21:f9:f5:bb:ad:24:fe:0d:9e:
cb:8c:1f:18:42:ab:c3:7a:70:4e:52:c0:ea:19:71:6f:45:bf:
90:14:88:6a:71:1d:32:98:20:85:12:c2:39:ed:55:36:95:b8:
41:d3:65:ba:ab:cb:ec:5e:47:0c:e6:32:d5:a1:26:3c:a2:08:
47:98:94:7b:29:a1:9c:ce:4f:65:ab:28:7d:ef:72:7e:e8:51:
91:6a:9b:e6:a3:7a:94:f3:8b:e6:8c:fe:7c:a1:de:81:fd:3c:
0f:35:fa:43:ef:b9:91:43:fb:bb:7c:28:d7:59:fd:9f:3a:0f:
4f:e1:10:c0:90:cb:7b:5e:0c:81:91:ae:19:a8:6d:fb:12:4d:
58:7e:a1:06:bf:6e:5c:38:16:48:87:a3:47:30:14:08:1f:aa:
b1:d5:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:24:08 2025 by rpki-client