Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
File: 4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json)
Hash identifier: lf0AWEkJhFa3OTYEpm5QYpGT4po7MGktl8wzJGZpwq8=
Subject key identifier: 5B:3A:1C:4B:66:54:94:5B:99:7C:0E:EF:8A:03:4E:61:86:3D:06:50
Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Certificate serial: 218D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
Manifest number: 216E
Signing time: Fri 31 Jan 2025 15:55:07 +0000
Manifest this update: Fri 31 Jan 2025 15:55:06 +0000
Manifest next update: Fri 07 Feb 2025 15:55:06 +0000
Files and hashes: 1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: SLRlc81DfZVRY8H2JRb2klYo+cPyE2AeJdZ6dp23ETM=)
2: B72206B4554B11E791BA5861C4F9AE02.roa (hash: XD+rHi9pnwHv8fBlfHeLTMU0mL7clm3BjJgqv+KaLy8=)
3: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: 8CIY/gFR5kFD/nBvCMuT75QcV3nOcarL1vc/JnhoNpo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8589 (0x218d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Validity
Not Before: Jan 31 15:55:06 2025 GMT
Not After : Feb 7 15:55:06 2025 GMT
Subject: CN=679cf25b-500f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:71:4c:b8:7f:d9:5d:82:bd:01:a9:09:fa:
9a:37:46:a7:a4:91:7c:20:e3:5f:04:7f:16:bd:ad:
1a:84:f1:9c:31:c5:2a:65:5b:82:33:89:32:cc:0c:
70:8f:b0:30:4d:31:c6:a4:ea:ff:ea:69:be:52:52:
0c:b9:d9:44:6c:6b:e5:f4:33:53:02:8d:d7:35:32:
8f:4d:63:af:29:ad:b0:66:2a:15:fe:c9:0b:1b:2f:
97:6c:b7:7c:95:70:8c:14:51:02:4e:d6:f5:41:00:
6a:ec:33:8c:0e:51:71:aa:a0:a8:ca:13:ab:60:14:
fe:e0:a1:43:c0:c4:a6:51:b9:37:c6:f6:9a:2d:60:
44:d2:79:a8:c6:a0:58:6c:95:fa:b4:69:69:b9:db:
f2:d8:7f:c6:88:73:f8:e9:ec:56:57:7e:6c:46:9f:
a2:7c:3e:ff:19:dc:76:19:e5:19:01:f3:46:37:9e:
32:a3:10:53:53:32:ad:4c:6b:b8:d5:ad:5e:45:49:
e2:db:2c:b7:c5:d3:84:5c:3e:04:2c:43:e6:e8:e4:
cd:b3:84:24:fc:dd:d2:8c:9e:4d:c3:cc:f5:6e:7f:
ed:7e:b9:17:1b:df:fb:2b:a4:f5:ff:a2:0a:ac:40:
20:3a:c1:17:1e:bf:d6:cc:23:dc:e7:82:ac:2e:21:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:1C:4B:66:54:94:5B:99:7C:0E:EF:8A:03:4E:61:86:3D:06:50
X509v3 Authority Key Identifier:
keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:15:1e:7c:55:d9:b8:f3:05:9e:83:52:00:09:5f:9c:2d:
ab:32:6d:6d:b0:8a:d3:51:ca:dc:78:f0:5a:50:e5:56:36:c1:
9c:e0:8b:4f:35:27:71:22:63:f5:10:99:54:74:be:04:bf:0f:
2e:b0:51:3c:a0:9b:8a:18:42:db:99:89:3c:f0:93:84:4b:0d:
b0:eb:9a:eb:a9:65:e0:4f:b8:de:ec:08:64:ee:b3:22:9c:c9:
06:3c:cf:c9:fd:2d:17:17:f9:00:ee:ed:ec:ff:a4:92:82:ab:
5f:24:03:58:c9:1b:56:78:25:ef:f1:77:a9:79:bd:ff:47:8c:
73:fb:90:ad:e1:b0:ad:a2:15:78:d6:52:ed:32:29:6e:bc:b8:
46:b8:dc:f4:8d:4c:ea:3f:80:98:4f:d7:02:7b:d1:58:2b:94:
40:a7:06:ed:9d:01:de:74:07:6d:25:7e:39:b8:63:71:2a:5b:
66:d7:c1:93:78:8d:29:1e:12:3d:f5:9f:72:9e:3e:39:7b:d1:
bf:1d:b8:b5:ba:33:0b:1b:74:eb:61:2b:5c:48:5e:61:32:98:
8b:4e:79:2b:e4:05:36:4d:54:48:08:f7:c7:78:3b:aa:27:98:
5a:43:39:62:b3:52:c1:37:57:89:cc:d0:b4:73:ff:d6:26:24:
b0:34:a8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:40:16 2025 by rpki-client