Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File: Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier: 5L/ajdNeM3E8VA6dlmse2K+lIRM/cy71cr3lTg5HEFQ=
Subject key identifier: 45:E3:54:22:E4:79:4F:F4:CF:AF:EC:FE:E9:A4:26:21:F0:22:C6:86
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number: 012A
Signing time: Fri 31 Jan 2025 03:49:15 +0000
Manifest this update: Fri 31 Jan 2025 03:49:15 +0000
Manifest next update: Fri 07 Feb 2025 03:49:14 +0000
Files and hashes: 1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: uBjgM4WdO2jwWDgT62/2PF4++zglPapES5A+j03DKwY=)
2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: ghcy6JDfa3u1ukpc0kfcadEcqAXRi4dJb4eZF65dqFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Validity
Not Before: Jan 31 03:49:15 2025 GMT
Not After : Feb 7 03:49:14 2025 GMT
Subject: CN=679c483b-51a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:37:4d:33:fd:2c:53:ec:4b:b1:55:75:ca:
34:e8:5b:0d:20:99:78:48:31:7f:d4:20:e1:72:a2:
e3:b5:c2:a8:f3:a9:cf:0d:2d:fe:55:40:47:d5:f9:
a6:3e:69:6c:bc:a6:13:ce:4c:4e:33:8a:88:7c:4c:
63:1c:53:5e:44:26:03:e3:4d:cb:35:0d:2a:46:71:
f9:19:d8:28:56:73:c4:52:03:34:ad:3c:db:05:1d:
3d:54:b7:74:8e:51:48:ff:76:d6:ae:de:19:09:4b:
0a:d6:08:a3:45:ca:7e:6e:af:e7:ba:be:da:c3:14:
e3:b3:9d:d6:4d:24:4e:de:fe:1c:89:e2:18:2e:f1:
36:02:f5:0f:df:8b:d7:45:58:9c:f1:e8:78:d9:78:
a7:1c:6b:20:d4:75:ed:cb:68:c7:13:8d:79:d6:9f:
16:80:09:c3:b8:7b:9e:cf:d3:4d:94:2b:15:5f:25:
fc:95:44:74:1f:4d:c1:51:30:4a:f3:56:46:07:15:
2a:28:b3:e2:47:2f:04:48:df:51:aa:04:2b:82:45:
38:76:b0:0d:f8:00:cc:f1:df:d8:c2:e0:a0:87:61:
8c:39:13:9f:fc:0e:ff:6b:ca:b8:03:c8:5e:32:4e:
64:c2:ff:c9:67:65:e7:67:c8:d8:e7:6c:8a:c8:55:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:54:22:E4:79:4F:F4:CF:AF:EC:FE:E9:A4:26:21:F0:22:C6:86
X509v3 Authority Key Identifier:
keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:f5:f2:56:7a:14:a9:6b:38:02:21:80:23:79:b0:e1:9c:ce:
a4:ac:81:e4:b1:ff:aa:1d:62:84:1c:24:4f:98:12:cf:79:19:
99:c1:17:ef:44:59:c4:e7:b6:df:d2:28:06:b0:62:d5:1f:4e:
dd:c5:44:e5:f6:bb:9c:b9:e3:11:7c:40:1a:7f:53:e2:fe:66:
bb:4a:fe:6a:c1:9b:9a:fd:95:ec:6a:9e:4e:2e:41:54:95:b7:
25:a2:6d:c7:a9:46:e4:d0:45:00:8c:4b:0a:0c:b7:af:1a:07:
63:6d:69:ca:f0:62:b0:a6:67:d1:f9:ed:5c:c0:8f:e4:ba:93:
08:06:e0:b4:b0:08:db:d3:44:30:1e:6b:79:d6:e5:82:a0:3e:
fc:9d:b5:c8:dd:4c:e1:7e:40:02:ed:0e:d2:9b:d8:71:d0:82:
14:69:00:6d:e1:a5:ad:6d:97:78:c2:8c:15:69:fb:00:58:6c:
9f:20:e7:18:dc:3c:f4:33:c8:39:eb:1c:f2:6f:ed:8a:28:06:
ef:a9:25:da:2b:21:eb:72:7a:df:45:a7:af:52:de:1d:b4:65:
09:a1:4b:fb:f8:c6:3f:b0:75:8e:91:0f:bd:d2:72:38:12:5b:
63:76:d6:2c:49:50:c1:36:43:a5:f2:ac:c3:41:10:fa:b6:78:
3c:59:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:55 2025 by rpki-client