Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json)
Hash identifier: aK8yBoFdEJ173q1j+jykaMblQ9F4tOsGag0kWrXJWng=
Subject key identifier: 6C:AF:BE:F6:BA:3F:84:4A:E4:A6:72:04:EE:69:B2:37:B9:22:3D:97
Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
Manifest number: E6
Signing time: Fri 31 Jan 2025 04:32:48 +0000
Manifest this update: Fri 31 Jan 2025 04:32:47 +0000
Manifest next update: Fri 07 Feb 2025 04:32:47 +0000
Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: yUG3Lq9tXfxNw5v0QWU/m41Uc+lUq9/2r+HzS66Z5uQ=)
2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: TkT4HdmZjpk+8cGhxmm8nbs4lKvJ4oKV4NHPoh4GvFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Validity
Not Before: Jan 31 04:32:47 2025 GMT
Not After : Feb 7 04:32:47 2025 GMT
Subject: CN=679c5270-ffd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:96:08:1c:86:a5:b7:93:38:aa:3a:5c:6e:
55:d6:41:89:a2:de:24:9a:ee:df:b6:ee:cf:b4:72:
11:1b:4e:d4:30:6e:90:9c:19:a0:bf:cb:89:cf:40:
48:c9:62:5a:69:2d:7e:0d:74:af:66:d4:bf:15:0f:
bc:fd:35:43:54:34:f7:69:d6:25:07:f4:9e:39:65:
79:9f:8d:b9:e4:03:50:09:c6:08:ef:ac:76:90:7a:
50:26:89:fb:3b:fe:ab:c8:04:b3:d3:35:97:8b:21:
b2:e9:43:6c:4a:4f:dc:10:c7:a6:e5:6e:3e:0b:07:
2a:de:01:f8:a4:d1:e5:ca:76:c7:27:21:70:d6:1e:
03:47:73:07:a8:a8:12:4e:7b:66:45:2c:1d:ed:b0:
0b:18:5e:94:4d:ee:b8:1c:83:54:37:ee:87:14:57:
f2:d6:f0:e7:ed:7a:46:77:e1:88:66:b3:28:bc:3c:
ea:5c:23:58:54:73:0c:89:62:93:ee:0f:01:ad:35:
e8:fa:aa:80:17:05:db:60:fe:f3:a3:b2:9c:c0:ac:
46:b6:e5:5a:31:ef:e3:33:6c:f3:5b:54:d2:85:97:
c2:f9:81:91:f6:e1:b1:6b:e3:94:d3:2a:c2:f1:87:
96:ed:3d:9c:74:73:3a:68:e7:2d:b4:4d:25:4f:b7:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AF:BE:F6:BA:3F:84:4A:E4:A6:72:04:EE:69:B2:37:B9:22:3D:97
X509v3 Authority Key Identifier:
keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:ae:d7:89:d5:3a:45:a1:dc:a3:22:de:ab:84:9d:b7:3b:f8:
5c:4e:c9:d3:23:af:5a:e9:20:0b:12:6e:b6:ce:3f:ac:02:4f:
42:65:e7:07:6c:38:d6:c3:25:b1:95:27:7a:6e:d5:02:ab:96:
20:6f:76:a2:02:10:34:b3:f7:d5:1e:bb:a4:6c:89:fa:14:c9:
7e:a2:29:13:28:cf:eb:85:ab:be:1a:22:26:70:42:9e:1a:35:
47:67:51:12:90:95:70:ca:b8:ef:3e:49:d4:d3:a0:be:f0:0a:
ea:87:f9:85:6e:b5:ce:7c:40:b3:c8:83:c9:00:97:17:56:76:
b8:41:67:83:47:99:21:00:da:cd:d1:b3:36:d3:37:16:16:8e:
68:15:15:61:95:fd:7d:e6:5f:9c:7a:c1:66:c9:6a:9b:1d:68:
14:c3:43:6b:1e:29:3f:4a:b7:91:54:ca:4c:f6:52:84:fb:c8:
d0:de:ee:34:51:7b:cc:32:ff:4f:4e:49:b5:5a:61:ee:08:ff:
81:31:11:bb:38:d3:fd:b1:70:22:20:ec:97:ab:6f:1c:24:30:
a2:2f:2f:f3:16:92:fd:c5:ef:e4:80:f4:4b:52:59:91:1b:bd:
46:78:c5:e7:5e:94:8c:cc:86:c3:6f:fd:39:ba:32:e3:ee:f9:
37:00:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:08 2025 by rpki-client