Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json)
Hash identifier: 93Zid+fzlExfKagWezoVv2k7lLeTTUZzRcHFy40t7nY=
Subject key identifier: F2:C3:87:D0:C1:07:F5:E4:F2:00:99:D7:E2:10:89:32:9D:67:59:13
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
Manifest number: 3F
Signing time: Fri 31 Jan 2025 06:34:20 +0000
Manifest this update: Fri 31 Jan 2025 06:34:19 +0000
Manifest next update: Fri 07 Feb 2025 06:34:19 +0000
Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: TM7N7UTVh2YHeklIFkE11CySYCsHJRzBBLJaZQdX+IY=)
2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: Jan 31 06:34:19 2025 GMT
Not After : Feb 7 06:34:19 2025 GMT
Subject: CN=679c6eec-b9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:f4:d2:04:03:1a:03:8b:02:65:27:0d:e2:
24:72:c8:40:61:79:64:36:ff:ef:d7:6a:21:53:86:
c0:68:15:51:e8:d2:66:f2:06:ee:6f:58:5b:66:be:
88:6d:f7:c7:e0:d5:4a:53:9b:b6:a0:b7:2e:73:ae:
73:b1:c0:e8:62:3a:82:f9:9f:68:7e:18:5b:02:5a:
45:07:bb:1a:9e:0d:f7:cd:be:74:ff:46:02:41:0a:
b4:9b:55:8c:e3:57:05:40:cc:0e:6b:1c:55:3b:56:
40:ce:19:7a:66:6f:f7:06:22:8d:e3:cb:5c:71:57:
b1:b9:ee:40:bb:b8:4b:f5:d2:7e:50:9d:14:4b:42:
03:75:d6:c6:37:cb:f0:69:0c:7f:ae:dd:d4:70:fc:
d6:10:33:05:67:e0:8a:b9:2d:7f:1e:11:c5:25:f3:
54:c7:ac:97:5c:22:8a:46:2c:5b:f5:e1:75:d4:95:
7b:68:1e:5a:65:c6:5c:c5:8d:80:fc:3d:c8:64:3c:
87:fc:73:9b:61:e8:4c:cd:d8:72:9e:4a:fb:cd:12:
a3:d7:8f:0d:79:7b:23:b7:09:65:b3:8a:ef:c1:6a:
1c:69:7f:79:d8:5d:53:ad:d1:c6:18:60:f4:16:d1:
fc:87:3f:80:4c:22:52:7f:7c:38:f9:e7:a6:8e:e6:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C3:87:D0:C1:07:F5:E4:F2:00:99:D7:E2:10:89:32:9D:67:59:13
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8c:4b:20:58:68:b2:a8:31:d5:3b:5e:e7:e5:98:25:0d:d4:
39:88:b5:9e:b9:21:5f:38:96:c3:b8:05:4c:03:c2:a0:5e:6d:
8b:2f:d1:81:9f:23:4b:ca:21:83:ea:c5:57:8e:f8:74:98:85:
20:4c:5c:f7:7e:b4:50:17:68:2c:83:1b:31:01:cc:33:88:c8:
fe:df:c2:19:e0:9f:26:8c:0d:b9:48:11:6f:6a:4d:9e:ba:14:
af:06:14:20:7b:27:c2:ad:e3:f7:52:10:ae:a8:9b:a1:a3:3e:
02:2a:79:23:2a:c2:9c:9c:0b:3d:d1:7d:5c:ef:ed:b7:42:8c:
63:13:d3:09:e7:d4:7f:2b:e9:e8:f8:3b:9e:f6:f7:a0:8f:39:
ea:65:60:9e:59:86:a7:91:89:10:dc:2d:0c:b3:ca:d7:68:e4:
8a:0e:59:f9:06:41:d7:54:4e:75:b3:b5:48:55:05:85:a8:b2:
7d:f6:74:61:69:6d:38:20:50:a9:ab:27:ae:b5:40:29:e8:1a:
a0:52:85:8b:b9:e8:18:2b:fa:ec:e9:b5:12:9c:03:4e:6a:2b:
72:67:13:a6:13:9c:fb:f2:0b:b2:59:a0:1a:f7:e0:3c:57:14:
54:ce:67:c3:d6:e7:f9:eb:49:0a:a8:63:51:5b:28:87:ea:df:
78:ab:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:08 2025 by rpki-client