Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft
File: xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json)
Hash identifier: HqBToAmcmeXNaAX91yEDfKGRnCpzNW9zKqa4mEfNImU=
Subject key identifier: 11:A7:49:43:CE:2F:C9:82:D4:38:D7:B9:75:F4:D3:78:E7:8C:DF:C7
Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F
Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F
Certificate serial: 105D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft
Manifest number: 1045
Signing time: Fri 31 Jan 2025 17:22:32 +0000
Manifest this update: Fri 31 Jan 2025 17:22:31 +0000
Manifest next update: Fri 07 Feb 2025 17:22:31 +0000
Files and hashes: 1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: Jx/jAgYsr5KqskZZXJRwYpcEY9ItDCo7ixJ3091vRIc=)
2: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: o4IiEMeA6RrIyI4EIGSr0hvBNlyD3kRf/X6yW/XL/pk=)
3: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: gqFP1IUKKDRvNeAUOIr33aKVzsawxI23lvIfLsK890s=)
4: 9FC6F664BE2A11EFA17DA82CC4F9AE02.roa (hash: d9+6pujUBneRtiWbsmdA7mkX7mWCWgeN3Tiun0q2C0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4189 (0x105d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F
Validity
Not Before: Jan 31 17:22:31 2025 GMT
Not After : Feb 7 17:22:31 2025 GMT
Subject: CN=679d06d7-972a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:da:6b:c5:ba:2c:5f:f7:e8:c0:8e:25:df:
13:d8:57:b0:de:84:eb:93:c1:09:7d:01:dd:cb:ef:
eb:ef:6c:71:60:09:b7:7b:e5:b3:0a:59:de:c3:11:
c9:74:86:73:dc:38:9e:1f:2b:db:22:38:87:29:27:
76:72:b8:27:35:fc:9c:85:56:fa:72:d0:24:4f:ad:
c0:f2:05:20:c2:62:7e:e1:dd:5a:d0:30:05:6e:13:
34:f7:45:b4:9d:bf:e9:d9:b2:c6:77:9c:8a:3c:6a:
4b:47:7d:64:7c:b7:da:f3:e2:49:0d:6b:e4:ea:fe:
4e:a3:5b:58:a5:24:51:96:96:64:f9:9e:ec:80:64:
b2:22:24:bd:9a:1f:a0:c8:91:c9:3e:71:47:60:c9:
72:9a:4d:31:d9:c8:aa:33:a7:c7:e7:6e:75:b1:7a:
31:10:75:0a:6b:67:cb:71:7f:6f:18:2f:14:79:2e:
6b:ff:30:0d:9e:48:80:47:c2:d8:43:60:e0:3c:7e:
5a:74:38:99:84:67:71:24:14:96:27:52:b4:ea:63:
fc:b2:e3:6d:13:94:db:2b:2c:78:72:44:90:b8:e7:
51:c5:75:ba:1a:d1:14:e6:81:bb:fd:66:26:87:8a:
0c:55:5a:ee:40:86:39:cd:09:32:59:cc:cd:1a:f4:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:49:43:CE:2F:C9:82:D4:38:D7:B9:75:F4:D3:78:E7:8C:DF:C7
X509v3 Authority Key Identifier:
keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:67:41:fc:c5:d1:e3:ea:c1:72:14:36:cd:67:9d:0f:8f:b2:
39:cf:e5:6c:5c:a6:61:3f:6a:37:bb:c7:68:05:ec:bb:78:38:
64:84:8f:b3:1d:fd:45:63:e1:60:63:21:d9:08:27:bb:9c:f2:
46:fd:20:b9:1a:57:b5:5c:f9:7a:49:8c:20:14:ae:c7:31:23:
3d:bc:34:05:c8:63:dc:5f:6e:3b:f6:9e:af:91:d8:82:d0:1e:
cc:20:4f:cd:fc:88:03:f5:61:96:56:0e:6c:55:10:04:72:09:
41:86:3e:b9:30:93:fe:4e:9e:44:4f:bc:b2:b4:6f:a0:3a:44:
d8:3b:64:70:fe:59:89:77:78:83:29:4e:04:de:d1:93:7d:71:
63:3a:36:b7:ed:45:ff:a2:e6:57:7f:67:16:3e:f7:d1:37:46:
ee:2d:d3:f2:55:10:ca:f2:ad:8c:c2:d1:b1:55:cc:61:03:b5:
a7:53:94:72:ac:31:46:62:89:aa:ad:5a:7e:64:7f:cc:e4:29:
d7:c8:32:9e:ba:2e:27:81:d5:a6:38:d6:4c:b8:ea:b8:74:5d:
42:1d:ed:7a:03:02:dd:7e:9d:d8:c5:61:23:eb:92:fd:ab:40:
60:14:0b:01:54:c9:3e:be:d8:98:2d:e9:51:97:08:8b:f8:36:
e4:52:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:25 2025 by rpki-client