Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json)
Hash identifier: 7P6AytKg5wyayaeHwVNKMCGA4jWLrApG5wxjhkdDZqI=
Subject key identifier: 11:BC:95:BA:06:3A:02:4B:DD:B7:58:F7:FE:7B:24:37:62:4F:75:E4
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial: 0788
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
Manifest number: 077F
Signing time: Thu 30 Jan 2025 21:24:17 +0000
Manifest this update: Thu 30 Jan 2025 21:24:16 +0000
Manifest next update: Thu 06 Feb 2025 21:24:16 +0000
Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: sI/t01yHeTcISngLErBYuo+VbqzZvmssoalGsI+ycFU=)
2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: lS99nYEJf47mH+uz3vQLejaGLFETexj9dK3L1OTP7SM=)
3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: +9tCipDB0aaHUVuA7yo8ZYQuS8o9q/CaWZgtKqaXci0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928 (0x788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Validity
Not Before: Jan 30 21:24:16 2025 GMT
Not After : Feb 6 21:24:16 2025 GMT
Subject: CN=679bee00-604b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:76:04:00:fa:5e:51:95:be:1f:77:54:a2:
f0:ae:f7:8e:89:1b:cb:9c:8a:e4:74:ab:48:70:11:
c6:3b:0b:03:51:de:8e:b0:fe:34:f7:5e:d4:e5:85:
d6:34:e9:8c:e4:8c:d5:5e:87:46:5f:a8:f8:ad:fe:
2f:e5:b0:0c:bd:1a:e1:fb:4c:b1:73:ec:6b:07:e0:
a7:96:f5:42:8d:ba:ae:9f:73:d0:c6:ae:1f:9f:e4:
57:66:4b:42:be:6d:a4:fe:a2:25:75:65:b8:ad:08:
06:21:be:b3:71:32:34:f3:e3:72:47:3f:ab:e7:6f:
8a:e1:f0:ad:0d:29:9c:61:0d:d6:73:ec:e3:df:2c:
17:2d:e2:97:bb:34:e5:06:80:af:cf:d2:c7:b9:3e:
dd:3d:42:bd:16:78:ac:ee:13:fd:69:5e:49:21:3e:
d2:09:f2:f1:22:00:f7:a4:93:84:31:8a:0f:8b:87:
c4:c5:10:df:92:ce:ef:92:21:a5:5b:27:41:1f:f2:
0c:ea:9f:82:56:68:4e:cb:be:7a:9b:00:d7:c9:7d:
c1:82:cf:e0:28:47:53:7c:52:18:e0:12:70:89:8c:
95:d5:62:0d:05:b6:51:ef:6c:47:75:f9:79:db:76:
0d:75:cc:88:9a:5d:19:a0:e4:b3:a3:9e:0e:b4:28:
74:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BC:95:BA:06:3A:02:4B:DD:B7:58:F7:FE:7B:24:37:62:4F:75:E4
X509v3 Authority Key Identifier:
keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:6f:a7:3b:61:2c:50:c5:51:df:bc:71:84:f6:1e:4b:bd:6b:
b4:38:41:c3:0e:f2:05:ff:8f:35:a9:0e:89:ef:7f:13:49:86:
48:00:9f:52:7b:2b:d9:a8:b3:8c:d1:eb:0c:54:65:bc:41:1f:
aa:c3:73:ac:c9:c6:24:ce:1e:a3:6c:e7:8f:82:78:bc:bd:81:
31:c0:09:b0:4d:ca:cf:c2:e7:6b:47:f3:91:85:87:d2:72:0a:
01:35:27:63:c1:3a:ea:16:9c:9c:2f:da:18:3b:29:2c:b8:8e:
37:a5:6c:84:9c:e4:43:af:03:67:a2:e7:03:6b:a2:2f:ab:87:
69:d4:d1:62:2d:2e:13:3c:a8:3a:ae:6c:3c:45:1d:28:e8:fd:
eb:b0:7e:30:68:ae:52:6b:24:99:bd:37:11:b3:0c:2c:04:84:
3f:e0:29:f6:cd:8d:f2:41:59:ad:34:95:7c:ac:2c:c6:d4:e3:
2a:e5:be:b0:1f:23:27:59:b7:a1:04:e0:49:26:56:cf:c9:47:
15:c9:f7:06:a8:ee:f0:9f:b1:dc:6b:1d:f8:04:15:73:1e:2f:
20:97:27:06:03:3f:b5:1e:07:8b:6b:90:86:c4:68:d1:d3:93:
45:14:b7:1b:f2:d5:44:bf:c2:d8:39:ae:b0:88:42:f4:53:84:
e8:ac:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:17 2025 by rpki-client