Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json)
Hash identifier: 7F/1K9YgwVpTnLhO+MJ1I1u8vlnTN7rjGO0Z34TSLRo=
Subject key identifier: A3:E9:0F:D8:FF:38:81:DF:12:70:99:54:39:6B:D1:2C:75:8C:4C:E4
Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Certificate serial: 02B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
Manifest number: 02A6
Signing time: Fri 31 Jan 2025 01:40:21 +0000
Manifest this update: Fri 31 Jan 2025 01:40:21 +0000
Manifest next update: Fri 07 Feb 2025 01:40:21 +0000
Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: GBLmOLtBQVSVOsBAuXLGAA7irdzzlOr5iii6TvMpnMY=)
2: 5C236C16552611EFA2BEAC53C4F9AE02.roa (hash: iZ6c16QJfgq60QRYgFglwDZaB7UfKpWeC5/RltitIB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439
Validity
Not Before: Jan 31 01:40:21 2025 GMT
Not After : Feb 7 01:40:21 2025 GMT
Subject: CN=679c2a05-b8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:f9:01:ae:97:e0:4d:6f:c7:55:bc:9d:17:
af:14:ce:f6:ef:68:04:3c:6c:c6:18:ba:ee:0e:d4:
d4:b1:42:70:3d:71:f2:50:6b:4b:b5:bf:5e:54:92:
42:af:21:c2:3a:99:84:8c:7d:f1:9b:c3:14:68:26:
d4:a4:aa:97:0f:a8:99:25:b0:8f:38:1d:0b:a1:5b:
1d:8c:0b:3a:72:47:e5:2e:dd:6c:55:90:57:c9:f5:
f9:9c:f4:b3:79:e6:12:4e:4d:bc:9e:27:72:4a:b5:
6c:0c:f6:5b:39:1a:16:72:1f:5b:1a:2a:78:c2:c2:
40:cc:3d:30:7b:9c:c9:b2:02:94:6d:2e:da:57:58:
68:36:27:82:7d:ce:5d:0f:d7:aa:5a:5a:c8:0c:60:
ee:61:05:32:dc:6b:e7:45:b7:44:2f:f2:a9:37:27:
a4:b1:29:c9:f6:67:50:b8:37:e4:ea:0d:fd:bc:91:
c8:8a:dc:b7:93:54:c6:6d:87:3c:db:98:25:f3:10:
6a:a2:f9:f2:91:1c:db:12:15:60:68:c6:97:b5:1d:
c5:38:67:61:34:63:75:8e:da:d0:3e:39:fb:a3:32:
08:84:12:af:30:ed:f9:2f:69:ba:21:0b:2d:5f:d1:
b6:bb:fd:83:27:5d:19:71:47:23:94:21:8e:0d:c7:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:0F:D8:FF:38:81:DF:12:70:99:54:39:6B:D1:2C:75:8C:4C:E4
X509v3 Authority Key Identifier:
keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:42:bb:5a:c1:94:6a:0a:62:10:45:bf:59:fd:06:4b:9e:2c:
42:df:5e:6e:9b:4f:57:14:4f:36:5d:49:a6:69:39:e7:37:d5:
c6:41:f0:a6:43:39:29:1f:b1:f4:e8:95:6b:cc:63:47:f6:a7:
e1:81:c0:a0:6a:ce:6a:b1:c6:42:95:85:85:ea:3d:83:48:4c:
93:c6:d5:a6:9b:67:39:e5:43:72:22:54:5d:d1:94:3b:99:23:
bd:34:4a:65:8c:12:be:c4:fb:0d:1c:06:42:cd:b6:64:0a:f5:
80:44:84:7b:19:f9:58:77:2b:10:34:b3:54:f4:2a:a9:7c:55:
96:da:ab:f2:aa:c8:a6:27:89:cb:5a:f3:ac:68:7d:1f:e6:87:
42:f3:2b:a1:5b:9e:43:78:fe:9a:7b:7e:1c:5d:8b:bd:7b:fc:
bb:16:ea:48:4f:36:8a:8e:52:dc:2c:5b:b0:7a:30:26:1d:aa:
c1:65:6d:26:d2:a5:73:b5:1e:51:29:b7:28:5a:c7:21:ca:9a:
f6:40:f2:87:c0:eb:62:15:0a:1a:53:00:85:20:f1:4d:3b:be:
52:d0:00:e7:22:b2:94:7f:ba:3f:45:d3:5a:ad:2a:24:d0:72:
41:25:56:fc:ff:5d:58:7b:28:ef:10:fb:a2:16:42:ff:c6:be:
8c:b0:e3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:30 2025 by rpki-client