Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
File: 2lexkcVbszGevZGC3A1Oau8-Ddg.mft (raw, json)
Hash identifier: Amr6AkObXKKRV6TvrG2JXXNrRQY/wpHHLSgD9QT/HY8=
Subject key identifier: 99:47:A6:3A:A1:12:58:E1:64:71:20:48:8D:74:69:A8:94:4B:DA:23
Authority key identifier: DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8
Certificate issuer: /CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
Manifest number: 014A
Signing time: Fri 31 Jan 2025 03:27:20 +0000
Manifest this update: Fri 31 Jan 2025 03:27:20 +0000
Manifest next update: Fri 07 Feb 2025 03:27:20 +0000
Files and hashes: 1: 2lexkcVbszGevZGC3A1Oau8-Ddg.crl (hash: X2KgKfW0NJvHOAWqkRfLsDkGiYoitxwXy8U79rxHQZc=)
2: 5181F33CE8C011EDADA54A23C4F9AE02.roa (hash: 9wRwgsGB8Fy9z1Xq7bw5sLUsMsE1FSTZuA/DyllyXak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
Validity
Not Before: Jan 31 03:27:20 2025 GMT
Not After : Feb 7 03:27:20 2025 GMT
Subject: CN=679c4318-09d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:dd:22:0c:5b:b2:d7:7a:34:8b:5a:55:a2:
59:5d:ce:74:f0:9d:8f:97:44:4a:f5:fa:7a:43:ab:
ca:16:6c:35:03:18:fb:4c:04:02:a4:1b:b3:2c:fa:
f2:12:59:5f:e0:2b:dc:fa:0a:e0:e4:8a:35:1a:40:
af:43:c6:ba:4f:31:b9:7b:55:e2:5f:2e:b1:18:0b:
c8:69:ce:00:29:d6:4b:7c:a0:59:83:f5:1a:cf:e0:
59:19:be:bf:8a:38:ba:55:46:bd:6e:35:45:02:58:
9a:c2:07:c7:ea:e4:47:34:48:21:45:d5:e6:cf:ed:
40:8d:71:37:12:c8:2a:51:70:3c:76:bc:fe:84:ff:
80:a0:0a:56:18:63:d7:2e:ae:e2:b2:bc:f1:74:20:
69:80:14:c0:03:7b:eb:75:8c:79:99:50:c9:be:67:
b6:ab:77:3d:83:b6:e5:6b:14:37:19:2d:f1:f6:08:
5e:97:05:b3:48:34:25:4e:3a:34:f1:a4:5f:58:3b:
b8:46:4d:a5:d1:25:69:ec:ed:03:76:b2:ea:cd:85:
53:31:39:78:4f:03:79:53:13:6d:98:40:e3:86:80:
73:7c:1c:bf:6d:13:bd:7e:42:70:6e:c2:72:fc:06:
84:73:2b:21:67:9c:7c:72:d4:3d:fe:2c:87:df:da:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:A6:3A:A1:12:58:E1:64:71:20:48:8D:74:69:A8:94:4B:DA:23
X509v3 Authority Key Identifier:
keyid:DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:0b:73:a2:eb:e6:8e:2a:b5:8f:01:1b:b8:88:6c:d8:fa:07:
5f:a3:d0:26:48:90:53:a6:a1:28:3c:74:b6:5a:af:41:f0:a3:
c8:0c:2d:a3:74:18:2e:72:09:68:ca:68:8b:6e:60:b7:75:21:
45:4f:71:21:a2:b1:23:13:f3:8f:09:ff:89:78:90:11:dc:a4:
29:94:20:da:3e:fe:21:8d:d3:26:05:7e:86:16:c1:06:fa:cf:
e3:f7:90:7b:2d:ca:45:d0:f4:83:e2:5e:d7:e8:70:48:fb:7a:
fc:3f:40:89:a3:20:a6:38:c5:f6:53:06:f5:68:52:03:f4:2f:
e8:b3:90:69:c5:17:44:c7:9a:ee:b5:fd:a9:df:04:d8:fd:e0:
05:c1:25:86:32:c9:e7:5c:2c:7f:72:70:4b:1c:64:27:4c:77:
46:ea:48:5f:2d:a8:b8:80:6f:91:0a:e2:9f:8e:82:d5:0c:e6:
9b:11:ea:0a:58:8b:5c:84:b0:dc:4b:c0:b7:31:48:e4:03:bc:
c9:a6:18:fe:84:b6:c1:77:ad:ad:0d:95:f2:70:4d:ff:02:56:
43:66:65:48:28:8d:d2:6f:6e:f0:be:1a:a3:20:fc:19:e5:c6:
5a:5b:79:e9:39:18:51:56:84:17:2e:cf:af:1c:14:12:f5:a3:
da:c3:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:53 2025 by rpki-client