Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier: C8bE10ewXflaFPaQ3usJloKM4hlrEX3pSfz/t18Q2as=
Subject key identifier: 8E:E3:59:5E:93:6F:B2:FA:68:44:B8:04:22:89:40:02:4F:9E:71:70
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number: 01B1
Signing time: Fri 31 Jan 2025 02:25:52 +0000
Manifest this update: Fri 31 Jan 2025 02:25:52 +0000
Manifest next update: Fri 07 Feb 2025 02:25:52 +0000
Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: qqHAQ49pdkay5U3G0afIqP6j//qfNhHUDCfVYGRUouU=)
2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: RQB2RLULGV5D9o8SykaXsVa4IAX2Ix9OkCIOGbXqXJc=)
3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: 1vie/BGCNQgncTtAE895UIuHGNyFzttxRArpojokubI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Validity
Not Before: Jan 31 02:25:52 2025 GMT
Not After : Feb 7 02:25:52 2025 GMT
Subject: CN=679c34b0-4ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6b:02:1a:5c:5c:3f:90:f8:3f:ac:63:01:d8:
ac:f8:a4:35:f9:f4:3e:e8:4b:fd:e5:ab:7d:57:4e:
8c:33:93:c6:12:fc:4d:04:39:10:34:05:fd:dd:07:
a7:2b:22:e3:a3:86:78:ba:0b:72:af:87:e8:62:58:
91:89:8b:8c:4a:c9:e9:51:aa:ef:51:b4:2f:f4:cd:
f1:5e:37:8f:a0:57:79:f7:20:c4:c2:1d:28:0d:15:
21:dc:2c:3d:ba:aa:11:cf:86:37:31:68:00:08:01:
f0:94:2f:da:66:7f:62:b0:2b:bb:9e:30:92:07:d6:
52:40:73:23:6b:6d:b9:c6:6d:21:af:2b:e2:43:2e:
0a:a4:dd:28:74:c5:00:a0:d1:c1:3c:87:18:20:da:
01:af:f5:7b:3c:f5:77:e4:9c:8e:a1:59:e8:e2:29:
1b:9e:da:4b:e7:47:0d:80:55:b1:22:88:3f:9f:64:
8e:d8:43:e6:b4:89:e5:83:07:00:49:76:96:75:64:
4b:e2:34:b8:fe:59:58:b0:f1:6a:27:cc:26:1f:a3:
f8:42:4a:1d:10:3f:77:7e:ab:a3:19:1d:87:79:85:
61:17:b6:bb:5f:23:28:a0:cb:8a:f6:85:94:bb:b3:
dc:75:1b:f7:58:ca:f1:96:c0:9b:6b:c3:dd:38:9d:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E3:59:5E:93:6F:B2:FA:68:44:B8:04:22:89:40:02:4F:9E:71:70
X509v3 Authority Key Identifier:
keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:59:a0:df:2e:25:ab:c4:64:e2:ac:d6:63:00:e1:32:38:cd:
17:5a:c6:6b:62:21:48:44:48:05:d2:75:27:79:9b:6e:05:de:
87:57:58:cf:1b:1e:6f:06:58:e5:a2:9d:6e:da:64:9a:75:e8:
4c:ea:0b:1c:d0:6d:da:88:09:49:78:67:98:59:03:bb:78:77:
60:80:47:c3:60:87:ca:18:c2:3f:ca:a6:fd:8c:27:2c:24:51:
65:a3:e2:49:dd:6b:95:4f:29:04:35:43:c5:81:81:2a:95:c9:
65:c2:76:a1:e5:1a:c7:b2:7d:f5:f4:81:a5:5a:16:d8:2b:18:
4c:05:1b:43:57:c4:6f:8b:e0:f0:88:8d:59:84:0e:45:c8:e6:
12:fb:fd:a2:41:36:ae:57:de:5f:bb:40:61:26:d0:33:34:2f:
51:27:d3:7f:62:ab:72:eb:aa:2f:3b:13:e7:af:95:31:bd:81:
5e:91:18:7e:10:23:e3:ce:e6:e4:83:f5:4c:a4:96:80:f0:b6:
36:e3:cb:32:86:d8:98:7f:19:d7:c5:c8:5c:16:25:9b:12:01:
2c:54:44:78:d3:c8:e3:b1:e1:9e:95:18:a7:39:57:7c:be:8f:
54:66:72:e2:b2:3c:16:4b:14:3f:eb:65:ae:f9:a6:43:9d:c9:
1a:2e:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:40 2025 by rpki-client