Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
File: XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json)
Hash identifier: GJbIkgs731skEwN7t1qYwngof3Sr1hHq7yH6KVe5BuU=
Subject key identifier: F4:C7:C9:FB:41:3C:98:5D:CC:4C:0C:C3:0A:B4:52:48:A2:0C:D4:BF
Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Certificate serial: 07B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
Manifest number: 07AC
Signing time: Thu 30 Jan 2025 21:08:49 +0000
Manifest this update: Thu 30 Jan 2025 21:08:49 +0000
Manifest next update: Thu 06 Feb 2025 21:08:49 +0000
Files and hashes: 1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: QEslz/5542MLml6s979q/hAz0oM1ayR91QPwwLmwmTk=)
2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: 8MctpWGtN4TB9CaLOxK2lVRFp6WdGzpjql1y9Hz4Ctk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970 (0x7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Validity
Not Before: Jan 30 21:08:49 2025 GMT
Not After : Feb 6 21:08:49 2025 GMT
Subject: CN=679bea61-a70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:5b:58:45:7e:fa:ed:9f:b8:19:07:72:14:
86:34:b5:2d:21:e1:c3:17:7f:5d:32:cf:5c:02:31:
5c:d0:19:be:a4:19:3d:e1:fe:5f:b0:0b:d3:98:16:
ad:2b:df:54:c4:2d:79:b1:c6:69:3b:86:f1:ea:4b:
e7:1b:f4:7a:0d:f8:9b:00:e3:52:d0:c4:8d:5e:c8:
f4:e5:08:66:7f:a7:46:a1:a9:94:f7:b4:82:2e:79:
77:0a:fc:43:00:ec:99:02:5a:49:43:9c:06:d7:0a:
e0:14:b5:e4:7e:95:94:03:c1:a2:bd:f2:a7:4d:a1:
bc:25:0f:44:8f:7a:88:1e:cf:9c:c3:72:bc:76:41:
e9:e1:c5:11:58:e4:46:ae:f7:4d:6d:99:6a:c1:53:
c1:f1:bd:c4:22:72:bc:21:61:24:5d:bf:08:fc:22:
d4:68:63:90:6c:56:a3:63:66:f3:cd:9e:63:5c:40:
cd:b9:8a:ce:2d:6f:a3:41:d0:91:af:89:1e:28:60:
42:f2:4a:78:da:f3:e3:6f:41:87:05:bd:78:cb:4c:
5e:f3:b1:ec:5b:1b:b8:7c:60:25:4f:94:ab:06:ad:
ec:17:5d:ba:8e:1e:96:07:ab:42:c6:4d:6b:08:80:
0c:de:0e:9f:8e:f1:5e:97:57:d8:a5:9c:f7:7f:f1:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:C9:FB:41:3C:98:5D:CC:4C:0C:C3:0A:B4:52:48:A2:0C:D4:BF
X509v3 Authority Key Identifier:
keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:81:51:b5:c1:7a:5a:95:4b:be:a4:a8:28:40:84:ef:1f:fa:
33:d7:16:f4:ff:38:1c:d8:90:ed:67:10:fd:f5:e9:7c:8f:27:
bb:f6:6b:83:be:2f:9c:f7:d7:f9:7e:9c:0e:d8:20:b2:96:e6:
ee:a8:34:f3:89:26:bf:49:f1:e3:eb:f1:9c:38:15:03:25:67:
31:0c:ab:8c:ac:88:1b:26:67:d7:a2:ab:ed:95:18:68:92:01:
e1:8f:0a:3b:8a:03:b3:df:d4:09:f3:c5:56:77:c6:72:d0:37:
14:52:24:9c:44:ee:c5:1d:15:05:e1:26:e3:81:da:72:c1:03:
e6:f9:71:10:72:10:9f:24:3d:d0:c1:3f:8f:df:a3:54:a2:43:
d2:d2:03:8b:df:76:e2:66:64:76:69:61:10:ed:66:a2:1f:af:
5d:66:d8:9f:d4:8c:9f:3e:b5:93:e0:93:be:27:24:f5:ee:5a:
ad:cd:e8:88:77:aa:74:05:1e:ac:55:53:8c:d4:ee:d4:04:ba:
ed:28:9e:ba:38:78:0b:76:2f:68:31:c5:b7:3c:4f:5b:a1:36:
50:48:aa:55:23:69:39:86:af:37:bc:7b:14:1b:ae:55:d1:4e:
9c:fc:3f:88:c5:90:77:e5:4e:b0:81:75:a0:9a:5d:31:6f:bf:
ac:0c:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:14 2025 by rpki-client