Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
File: aamToYghmKytXxzqNQZrr0nn1dA.mft (raw, json)
Hash identifier: D49vacmNMG535ID64NlPQuXrD2RlEoS9HeBlY2wz+LA=
Subject key identifier: 8F:7F:8E:D3:D0:25:1F:70:E0:D3:DF:EC:18:5F:5C:A4:EA:1E:DA:73
Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
Manifest number: A7
Signing time: Fri 31 Jan 2025 05:18:38 +0000
Manifest this update: Fri 31 Jan 2025 05:18:38 +0000
Manifest next update: Fri 07 Feb 2025 05:18:38 +0000
Files and hashes: 1: aamToYghmKytXxzqNQZrr0nn1dA.crl (hash: YT0EmDUWnE2ZBsEpaDNZlG/zOGRbtBkXS8O5tdpvL78=)
2: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (hash: eMhCb8Y7hz6TbBI3GN4y5RWtGaIS6jYSPRe2ESsv3M0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Validity
Not Before: Jan 31 05:18:38 2025 GMT
Not After : Feb 7 05:18:38 2025 GMT
Subject: CN=679c5d2e-8f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:53:42:1f:e1:32:a8:84:24:ab:3c:9b:43:
96:08:d0:2e:5d:9a:22:0e:5d:f7:8d:2b:32:19:17:
cd:45:21:1e:e6:35:8a:ab:15:2a:1f:71:3f:a5:54:
d6:6e:07:03:54:dc:a1:d2:31:4f:c3:1f:46:91:1e:
70:d4:71:49:1d:2b:1a:59:0e:03:b5:27:f5:c2:f6:
2f:1c:85:f0:db:f0:04:6a:cb:c1:97:ea:ed:0a:de:
62:de:49:7b:88:9e:b4:88:b4:83:7b:be:7f:42:14:
8b:10:e3:ff:33:96:a3:9e:2d:03:69:a4:1a:78:6b:
a8:bd:f7:95:3f:c6:b3:96:a6:a4:82:00:0a:81:69:
78:68:d6:1f:50:b3:db:33:a1:f4:1a:60:17:55:ee:
61:1a:63:df:e0:97:3f:e8:45:e3:95:91:fd:2a:22:
26:1f:7d:9f:c6:ff:2b:3f:bb:a8:64:b1:38:06:99:
66:1f:ce:0b:71:49:ba:74:f4:d9:7c:35:e5:b3:37:
90:2a:d8:2e:ba:b1:bb:e7:ef:f5:73:86:b7:3c:cf:
b8:ab:fd:00:42:a6:99:b9:29:cd:df:80:d1:d9:a0:
50:99:87:44:b1:ae:57:f2:12:49:54:65:43:ca:75:
91:05:d2:41:c4:f8:95:5f:18:7b:3b:ae:1b:41:f0:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7F:8E:D3:D0:25:1F:70:E0:D3:DF:EC:18:5F:5C:A4:EA:1E:DA:73
X509v3 Authority Key Identifier:
keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:da:ce:f3:98:51:4e:06:57:1d:81:3d:ff:01:f7:2d:3b:0c:
c9:02:b5:96:c6:ff:d1:dc:de:12:46:8f:43:24:66:c7:ee:54:
12:64:30:ea:23:31:19:ed:d9:64:34:83:2b:bf:1b:06:06:c5:
ff:13:f8:f3:30:96:36:fb:26:69:4d:b0:e6:03:b5:43:a6:d8:
57:34:84:34:64:cd:ae:d7:2b:42:c6:a5:87:29:94:dc:63:87:
c4:d1:7f:d0:42:05:af:7c:27:17:15:04:f0:d3:e6:8c:d1:33:
12:0d:34:1c:99:e3:3a:c8:b4:01:34:1b:e3:f7:28:97:68:5c:
5e:44:ff:0e:11:2d:51:79:40:cb:75:16:25:c2:49:ad:b1:8d:
93:fb:f1:e5:3f:ee:dc:0f:0e:39:ed:05:6b:63:12:6a:53:41:
54:79:5f:27:9b:25:e6:2a:f2:44:22:6a:cd:b2:b7:3e:d5:73:
1d:41:93:cd:72:5e:9d:70:94:72:15:8e:1b:74:60:bd:73:9c:
74:8c:ce:c5:05:df:cd:43:3f:dd:91:89:3a:cf:cb:65:d5:2a:
ef:24:7c:79:32:94:c9:36:16:97:79:68:20:0e:33:3d:29:ed:
12:11:9d:98:0c:61:e0:54:36:f6:62:df:1b:0f:52:35:77:99:
67:9d:1d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:47:51 2025 by rpki-client