Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json)
Hash identifier: FQeNsvhJbHqCIEtmK9ul4T3qZsbEeMqFJCSofZs274k=
Subject key identifier: EB:46:17:95:0F:03:FE:CC:EE:8F:2A:36:63:45:3F:78:8C:2E:6F:2D
Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Certificate serial: 05A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
Manifest number: 0599
Signing time: Thu 30 Jan 2025 23:12:52 +0000
Manifest this update: Thu 30 Jan 2025 23:12:52 +0000
Manifest next update: Thu 06 Feb 2025 23:12:52 +0000
Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: dECIspKktwTmuZOUQtV4mlhgag4DbZBwvY+JTvviNSo=)
2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: 4+8EOl0IVC0WYPREjgU4SQ2gBQ7SWbeC1nS8R2xM7hU=)
3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: Jks+wAurz0A89wXrN9oPKVJZcdKUluPelZM2Gsz3YvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Validity
Not Before: Jan 30 23:12:52 2025 GMT
Not After : Feb 6 23:12:52 2025 GMT
Subject: CN=679c0774-aacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:d1:a1:35:9b:a3:c8:8e:60:83:8a:5b:d0:
db:74:c2:64:49:e5:61:f6:67:47:88:a6:3b:16:17:
96:e2:f7:d0:13:dc:f3:4f:2c:04:4d:15:b6:d0:1b:
02:26:62:62:ed:42:a2:c3:b1:8d:6c:ed:31:14:ab:
15:0e:13:87:46:79:58:78:2a:7b:0f:dc:12:f6:11:
85:d1:d4:e9:47:b1:8c:d2:ad:3e:c4:7a:6c:c6:51:
09:19:03:57:1a:ef:f6:ee:de:12:82:21:90:00:30:
d8:df:34:d5:0c:51:8f:fa:dc:3a:dd:1d:60:5e:fe:
2f:94:bc:56:15:71:a7:ae:44:7d:d2:bd:57:e4:fe:
47:a7:a1:8d:32:74:11:5f:ed:0f:41:7b:78:14:05:
35:01:e2:1a:aa:8e:37:39:3c:da:8e:bb:2b:b6:d6:
6c:e3:a4:7f:0c:2a:dd:13:06:df:d7:ca:a9:33:63:
54:10:0f:19:3f:fc:27:34:8f:5a:45:91:05:eb:e6:
f9:c1:eb:3d:c8:fd:2c:dd:57:65:9f:a4:89:55:6c:
27:e1:3c:77:18:67:a5:22:6f:fa:96:60:6b:a3:e6:
25:24:74:41:63:17:05:dd:8e:1b:03:46:6e:c0:1c:
0e:04:f5:39:4b:d2:29:b8:ff:0c:9c:3c:53:b1:5a:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:46:17:95:0F:03:FE:CC:EE:8F:2A:36:63:45:3F:78:8C:2E:6F:2D
X509v3 Authority Key Identifier:
keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8d:05:a4:85:b6:84:81:27:94:f9:db:f4:cd:b4:d1:db:a3:
99:78:7c:4d:7e:29:1c:6d:3a:2b:09:2f:a5:f8:d7:49:69:1b:
b0:ff:ab:b1:d2:e0:ad:bb:88:9c:f2:c9:7a:6e:fa:b2:72:4c:
04:fc:75:78:89:d3:26:48:4d:d4:0c:88:9b:74:d1:ec:5e:8c:
d0:8b:d2:13:22:2b:6f:b1:f5:91:fb:d5:a1:d1:e6:95:52:be:
63:80:ae:dc:e2:2a:29:c5:90:62:89:ee:d4:3a:f3:e7:09:6d:
5c:f1:1e:c7:6a:c1:6e:2e:1e:3c:20:34:8f:de:6d:21:cb:f9:
6b:d7:51:b5:91:29:86:28:87:ea:8d:76:a9:82:4a:2b:65:89:
0d:d6:72:61:e9:2f:54:2f:21:6f:dc:59:ed:d4:4e:93:31:4a:
11:fe:e7:4b:29:7b:0c:e4:af:4a:2e:61:9f:61:a4:cc:52:fb:
82:c0:a5:fe:e6:df:43:08:5f:bb:34:71:02:1f:a5:2a:d9:fd:
74:4e:dd:41:56:54:43:8e:94:75:ae:1f:1e:44:07:0a:dc:cd:
89:16:9a:44:e7:03:f1:f8:ee:41:44:07:b7:ea:b9:21:b5:4a:
37:49:54:35:b3:96:7d:3b:1d:e1:4f:9b:44:80:5a:de:b8:fc:
0b:f4:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:20 2025 by rpki-client