Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier: 9nbFbmWZa9EwAd28w1z2uNhnPDm3OzzjWWwPaF+RNac=
Subject key identifier: F4:2E:45:85:02:44:97:F0:DA:B6:48:56:1D:A9:F0:65:B1:36:9B:01
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial: 1DBC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number: 1DAE
Signing time: Fri 31 Jan 2025 16:07:05 +0000
Manifest this update: Fri 31 Jan 2025 16:07:04 +0000
Manifest next update: Fri 07 Feb 2025 16:07:04 +0000
Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: nJVPXVrPROoA0P6rkjOHXPkuIm0jWpI77Dmx37EZ3hY=)
2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: k9wr3qZcJ76UlwuVZn3FECVmsL3FOhLSrWOZD7INceU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7612 (0x1dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Validity
Not Before: Jan 31 16:07:04 2025 GMT
Not After : Feb 7 16:07:04 2025 GMT
Subject: CN=679cf529-0844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:11:d7:0c:fa:49:d4:27:83:36:de:79:28:0f:
16:8d:35:a6:83:f5:f2:fa:56:69:cb:ad:79:f4:c7:
87:c2:f7:0d:64:04:fd:8a:de:a2:70:7e:2f:09:aa:
16:16:9a:f2:70:7f:16:0a:e1:2e:4e:2b:c4:0f:9b:
e4:2b:0b:fb:0a:36:6b:c7:f0:6d:de:a4:24:23:68:
8d:2b:5f:2a:d8:56:97:52:39:9e:65:57:60:b9:84:
ab:10:4c:7c:8c:4e:8a:81:ac:bd:a6:fc:33:f5:72:
99:62:3c:7f:4a:3f:04:27:da:d3:30:d0:62:0c:c2:
1e:90:19:62:24:ea:18:5d:76:e8:b7:c5:5f:6d:78:
bf:f1:9c:22:fa:03:88:6b:b0:f6:c8:35:ea:5c:f2:
b5:c8:a0:14:10:cb:01:b5:58:43:c9:ab:d6:a6:ee:
c9:f8:d1:ab:b4:f4:70:0e:51:79:c6:4a:99:94:4a:
52:78:00:03:d0:f4:59:3e:46:7f:27:46:c3:96:2b:
98:44:b0:da:b8:d2:1d:ba:f2:a0:be:f2:78:da:ba:
fe:6a:83:c3:5c:8f:19:2d:2d:d2:bc:21:0a:8b:02:
f6:2b:cf:05:9c:38:ec:cb:e3:b6:64:31:12:af:eb:
b9:c5:c1:ba:3a:9d:82:51:86:91:4f:be:d6:1a:3b:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:45:85:02:44:97:F0:DA:B6:48:56:1D:A9:F0:65:B1:36:9B:01
X509v3 Authority Key Identifier:
keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:57:b0:e2:27:13:8c:85:a9:bf:b4:f1:70:2f:3e:e4:ce:8f:
78:bd:c7:00:89:b3:4a:32:48:0b:e8:15:8f:eb:39:92:a2:03:
88:1d:3c:8d:b2:3a:ed:cd:31:3a:d2:e3:ab:cb:a3:8e:c9:9b:
1c:f0:ca:2c:4b:b1:c0:a4:45:b0:77:92:ec:80:14:e8:d0:36:
54:52:21:08:eb:02:b1:e0:bd:3a:24:7c:c3:d7:6b:24:a1:f6:
54:61:ca:03:30:8d:44:1a:36:ab:f5:89:30:ee:a9:2f:7a:ca:
fc:5f:43:f3:ac:9b:53:10:c9:fd:2c:fa:ac:bd:76:a6:6c:e3:
11:bf:a8:98:f0:7a:62:c4:2a:4e:9a:d9:bb:d9:43:4d:27:f3:
91:13:47:4f:f9:2e:9b:9a:32:7c:66:21:5f:8b:26:c2:1f:7e:
24:25:9b:66:2e:e5:57:0a:0b:a7:22:2b:f0:97:ab:83:e2:40:
44:1b:32:99:13:ac:80:77:fb:57:cd:84:2f:96:76:ac:d8:76:
ab:2e:b8:77:76:22:88:3f:f3:df:21:7a:cb:50:26:ee:6b:43:
be:2d:86:3b:36:c4:7a:65:72:5f:4d:cb:88:a3:1a:66:17:12:
89:e9:36:9c:bb:6d:8a:a7:29:96:15:28:f7:94:9c:69:f9:e4:
41:3c:93:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:13 2025 by rpki-client