Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json)
Hash identifier: D+4sPs/L68Gj1P/8QHF0MI069FLfKjbc9uiGtEXT1Ps=
Subject key identifier: 21:18:9E:2E:87:C0:E6:96:93:7F:7C:85:9B:98:4A:18:CC:48:EB:66
Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Certificate serial: 0622
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
Manifest number: 05ED
Signing time: Thu 30 Jan 2025 23:08:35 +0000
Manifest this update: Thu 30 Jan 2025 23:08:35 +0000
Manifest next update: Thu 06 Feb 2025 23:08:35 +0000
Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: tI0pKXME0e8PFYGCxQzyllmFiD1KRHIQx2R0mshQFVo=)
2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: P11sIa+o699M+Jrp/6j9KRqVJetMbcC+wvd26lTDVLs=)
3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: /zbyHciIwndBXlxJhKITEkhA9vsFIRYPFElbWadsiXw=)
4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: 6KG4K+YscUuCOPJskrNXUVs3OZB2ppYjCB4dtTgCAMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1570 (0x622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Validity
Not Before: Jan 30 23:08:35 2025 GMT
Not After : Feb 6 23:08:35 2025 GMT
Subject: CN=679c0673-f09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:dd:e4:d8:ea:a0:82:8d:8d:a5:75:d8:7c:
2d:7b:18:2d:80:52:47:81:6b:42:b2:2d:d9:9b:46:
52:0d:45:e1:17:b6:a8:18:49:85:98:3e:15:3d:4d:
8f:c2:2d:1c:a1:83:16:4c:a7:3e:e6:7e:da:0e:da:
ef:62:6a:2a:fc:9b:2c:0f:70:1a:69:00:82:4c:f0:
55:26:d7:30:6d:2d:86:aa:e2:81:3b:03:06:08:cc:
f2:22:87:83:74:d3:91:be:3f:aa:c4:e8:88:76:82:
be:26:b9:6b:c4:e9:40:1d:40:f3:7f:ec:10:f4:64:
66:2f:d4:21:fd:c0:64:f3:a3:ba:e9:49:5d:86:45:
b9:3b:40:d9:cc:fd:42:ab:b8:b3:b9:83:3b:00:8f:
c5:a1:7e:16:50:30:3d:a5:78:63:ef:18:c2:8f:09:
b7:ca:a2:78:41:b1:9a:4b:c0:a0:ea:af:86:98:14:
01:23:50:ac:0c:d6:66:b5:21:2e:e4:c5:b4:21:01:
83:fa:ef:43:ee:fe:56:91:a3:8e:da:ea:a2:d9:68:
8d:f3:40:37:8f:99:b7:1e:09:ce:30:dc:26:92:88:
3b:75:2d:f9:36:7c:e1:95:28:c9:7f:f6:cc:c7:b9:
bd:07:d9:fc:92:39:76:d7:59:f5:0a:44:e5:02:63:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:9E:2E:87:C0:E6:96:93:7F:7C:85:9B:98:4A:18:CC:48:EB:66
X509v3 Authority Key Identifier:
keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:88:eb:5d:3d:6b:ed:62:1c:d4:de:dc:74:4f:0b:41:4b:4b:
78:16:6d:ec:77:e2:23:c8:d9:e1:b5:ca:43:a8:17:f5:ce:bc:
7b:27:11:82:7e:70:c5:c7:e5:97:83:3c:94:da:ef:c5:8d:d9:
df:8e:65:b9:6f:42:96:b1:94:d6:a7:99:62:a7:70:df:a7:0b:
1a:69:9b:da:89:e8:c2:02:ae:45:b1:8b:dd:7f:6d:7a:2f:17:
9f:79:6b:44:49:77:6b:e6:f6:3b:85:44:a0:de:41:99:f4:b5:
f0:52:75:87:c0:55:a3:81:9d:2c:03:33:e8:d7:58:d7:39:30:
09:4f:df:6a:a7:6f:0d:e7:16:9b:55:60:a4:ed:ae:2a:0b:94:
3b:1c:a4:74:ae:8e:e7:0b:f8:74:bc:bf:c3:c9:ba:7b:7d:1c:
18:a5:84:c5:c2:f8:8f:c3:bc:77:58:51:de:40:49:f4:d8:0f:
6c:4b:20:bb:d5:6e:35:05:02:9a:31:c7:d2:f5:55:ed:5c:18:
52:1c:90:4d:cf:d0:de:cd:17:2e:79:47:12:f2:f6:21:fc:47:
87:91:0f:40:6d:3d:c7:19:61:ee:3a:7d:52:b7:39:b1:d3:db:
87:3b:c9:cc:82:be:04:aa:20:66:77:b4:d6:81:8c:51:9b:a6:
02:93:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:03 2025 by rpki-client