Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json)
Hash identifier: hFJgLD69PTe68+85m6Jk67CiViOkOeGYtrrqOSD99c8=
Subject key identifier: BF:5A:23:B8:24:A5:20:1D:0E:91:3F:2D:6B:6B:32:82:98:DE:DC:8C
Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
Manifest number: 20
Signing time: Fri 31 Jan 2025 06:57:54 +0000
Manifest this update: Fri 31 Jan 2025 06:57:53 +0000
Manifest next update: Fri 07 Feb 2025 06:57:53 +0000
Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: XSd+crpqoguo4lF/NThQkZlx1hCi9y6/g23GkumFxRc=)
2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: 8xVme3gCmPdfKt+x4zDr/XrfAGwH3vnJGiPzKA2L3io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Validity
Not Before: Jan 31 06:57:53 2025 GMT
Not After : Feb 7 06:57:53 2025 GMT
Subject: CN=679c7472-2cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:95:b9:57:f2:66:d3:9b:0c:1c:b8:68:7b:
40:35:ad:2c:22:f2:fc:c4:75:c4:84:4b:35:08:b6:
7b:1d:61:d5:36:61:16:c5:48:97:0b:9d:a2:40:72:
8f:66:18:b7:20:1e:b8:11:25:84:4e:4b:2e:18:01:
a0:20:22:2c:97:15:b6:fd:0b:06:b8:c9:58:10:08:
99:c5:8e:88:95:f2:0d:5a:82:76:89:99:65:14:ea:
81:5d:40:73:1c:af:60:d7:b4:d4:46:15:c4:37:fd:
5a:dd:86:95:31:1b:a4:db:26:bb:65:90:f3:d1:70:
5c:bd:0c:c6:40:5d:dd:e2:24:03:69:e2:36:d4:7b:
42:a3:6b:ec:cb:c6:03:7c:4b:85:65:42:ef:f9:eb:
6b:23:42:31:9e:af:0a:76:27:1e:9f:e9:85:a3:8e:
ae:62:fb:9b:c2:c4:f8:67:75:14:69:fe:60:c1:02:
01:fd:b9:b2:50:e0:e1:7f:5a:fc:18:c2:38:8c:53:
d5:e5:5e:2c:90:a4:2e:f4:1c:f6:b3:f3:cd:7e:6f:
99:cd:e3:d3:4f:6c:b1:40:7e:e7:b2:ae:cf:78:43:
f0:da:af:e5:da:1e:d4:25:1a:aa:67:3e:8e:f6:ea:
76:fe:25:3f:49:91:0e:44:30:ad:d2:5b:02:67:de:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5A:23:B8:24:A5:20:1D:0E:91:3F:2D:6B:6B:32:82:98:DE:DC:8C
X509v3 Authority Key Identifier:
keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:cc:18:ae:db:e6:46:b5:4d:fb:7c:59:af:ce:6a:4b:f6:
c6:4c:dd:85:15:f6:85:bc:00:2b:17:48:18:c7:1e:38:7a:f1:
ef:47:91:55:05:29:23:63:b5:3c:ed:03:f7:7b:59:bb:20:89:
4b:27:35:6f:f9:96:6b:de:21:72:8b:ec:51:49:01:cf:5b:b3:
63:33:61:62:3c:c9:73:70:aa:6d:e4:13:31:8e:db:97:34:8f:
52:05:db:b6:56:86:18:c0:2e:7b:92:83:4b:78:c3:34:ea:67:
bf:81:e0:ac:eb:5f:d6:a4:18:f2:01:7e:80:62:cc:ec:85:9f:
66:b6:1f:55:ee:a7:10:3f:48:9f:0e:d9:c4:c9:c9:b6:87:29:
7e:61:60:35:e9:69:6c:e8:dd:36:f3:59:2d:e5:fe:7d:01:38:
4e:79:ef:fe:11:fb:0b:84:00:87:ab:31:c7:55:64:9e:a5:ee:
33:78:1c:06:80:a9:1b:e8:b7:63:de:e6:31:e5:3e:81:2d:5a:
30:60:c7:38:6c:54:bf:c5:b3:05:72:50:95:35:38:29:ea:1e:
6a:95:19:84:ec:59:91:63:94:70:78:ad:17:e2:94:75:6a:0d:
fb:8d:18:16:fd:d5:7c:cf:30:b2:f0:df:b2:2e:2d:17:b8:4e:
b2:04:02:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:21 2025 by rpki-client