Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json)
Hash identifier: JOVq9cSL47sHLrLZxvNsrCoHiBzt+lYrY63TH6ZDUR4=
Subject key identifier: 27:67:D5:79:D6:AF:9B:4B:13:74:7C:85:43:74:81:01:02:2C:90:81
Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Certificate serial: 0C62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
Manifest number: 0C4D
Signing time: Fri 31 Jan 2025 18:15:07 +0000
Manifest this update: Fri 31 Jan 2025 18:15:07 +0000
Manifest next update: Fri 07 Feb 2025 18:15:07 +0000
Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: d20VfZki64c1hHgelaIUrS0V3RDNJYnHd8BFsdHUh6g=)
2: 1FC5063AE0D411ECB6C0B01CC4F9AE02.roa (hash: logqdhARGTyBkzJX/eotDYOSUYMcRn8n6eQk1B3sltA=)
3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: CFNa1CRrRXsw2NlqSuSKe2rvDg2ywkEC8x6fBZFbOK4=)
4: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: GtVkTj6lkgw7RXe+n4R0d/g9GkOJM8psiPRDO4atRDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3170 (0xc62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Validity
Not Before: Jan 31 18:15:07 2025 GMT
Not After : Feb 7 18:15:07 2025 GMT
Subject: CN=679d132b-2b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:cc:90:e6:e4:21:38:5c:0f:e8:fe:ce:e5:
74:b9:5c:9d:49:9b:3c:9f:93:29:97:71:7a:0d:a4:
4d:29:c3:71:e0:d9:a1:b8:46:1c:1f:91:58:9a:c7:
f7:56:1f:6b:ed:cf:91:57:23:00:ab:57:58:74:e1:
14:aa:2e:7f:85:30:06:08:7a:ce:37:ef:79:54:be:
39:84:26:96:5a:50:65:e0:c6:f2:ac:03:49:6b:30:
19:a6:7f:e1:70:22:cc:c4:f6:00:64:6d:6b:95:d5:
5e:65:5a:03:79:56:8c:2c:63:d0:df:cc:f7:f3:8e:
2a:ed:77:d9:ea:67:12:b6:dc:4c:ea:0e:47:41:d2:
fa:09:69:99:82:07:ce:0f:32:37:37:35:a8:fa:03:
7c:14:f9:e6:a2:c6:7d:cd:d2:3f:3c:a4:eb:47:40:
1f:d9:e8:ac:49:1f:49:89:be:6c:31:5b:e9:bb:bc:
f0:ee:6f:32:90:09:78:74:6e:fb:d8:28:76:7f:db:
b7:71:b3:58:23:49:01:b9:71:c8:b6:74:27:bd:d2:
85:a7:ce:15:20:78:eb:9b:f9:54:d4:8e:3d:b3:f0:
55:c3:e9:e3:9a:24:22:db:aa:07:80:a8:03:8c:86:
86:e7:2d:c8:4d:cf:20:81:ea:70:46:1c:56:c9:e0:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:D5:79:D6:AF:9B:4B:13:74:7C:85:43:74:81:01:02:2C:90:81
X509v3 Authority Key Identifier:
keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:af:1f:d6:5e:f8:ae:82:0c:20:42:ba:46:64:02:de:0e:87:
c9:50:b4:7b:6f:c0:de:5c:8a:5b:99:c8:ce:ff:6e:b6:4e:f6:
dd:23:26:4c:f2:37:a8:09:35:bc:77:71:2f:49:12:0e:cb:8d:
55:29:2e:f7:7d:48:bc:93:19:bb:96:c1:6b:1a:62:80:d0:eb:
a9:0c:cb:49:5c:d9:21:3d:ce:50:33:16:21:70:57:5c:12:4b:
47:83:c7:71:6f:ee:fd:bd:7f:bb:e3:46:1e:f0:48:9f:eb:0a:
83:52:21:05:90:63:62:dc:89:dd:31:2d:65:22:3b:5b:b3:12:
49:38:67:ff:77:81:58:6d:fe:f7:27:59:cc:09:c9:26:3b:e9:
51:d0:37:60:4b:cb:52:52:d3:48:a4:48:37:40:fb:f2:c5:80:
7a:ff:b8:06:ac:fb:48:a8:40:a9:28:f7:85:f4:3e:d7:89:ed:
e4:f2:91:9c:24:fe:6c:f5:bc:39:8d:86:1f:51:e6:b6:c4:1f:
71:f9:e9:b4:a7:a7:a3:75:73:72:13:79:0a:c0:50:14:e8:ea:
1e:39:cd:5d:e9:44:05:95:4c:77:70:5e:3d:09:00:f7:0e:3c:
6b:71:21:74:11:95:fe:d5:16:43:f4:f2:e5:da:11:b5:a3:d3:
6a:9d:5b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:33 2025 by rpki-client