Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
File: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft (raw, json)
Hash identifier: F0V6958eC4t0CSEKB2FVC+RaxWqOSQromsX+Pdh1Kzk=
Subject key identifier: E1:86:38:22:F0:0B:A9:97:2B:7E:74:95:D3:81:BE:DB:60:10:9B:7C
Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00
Certificate issuer: /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
Certificate serial: 0796
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
Manifest number: 0790
Signing time: Thu 30 Jan 2025 21:15:02 +0000
Manifest this update: Thu 30 Jan 2025 21:15:02 +0000
Manifest next update: Thu 06 Feb 2025 21:15:02 +0000
Files and hashes: 1: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl (hash: C2PWsHQePX6wgDwjczpPKzRnxUqntQAaLOp+zqCGkZM=)
2: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (hash: lRCubr7EYku0VIB1rDtAT6Aai84rlwXyTT83KuJ/9/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
Validity
Not Before: Jan 30 21:15:02 2025 GMT
Not After : Feb 6 21:15:02 2025 GMT
Subject: CN=679bebd6-0310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:6a:28:91:b9:25:44:a3:b6:5a:92:06:da:
02:2c:ea:b1:c7:ab:b1:e3:f6:d1:76:67:04:1c:9e:
85:8f:6a:0d:bf:63:6b:a7:5b:3c:e9:30:dc:07:4b:
6e:0f:aa:15:40:65:e1:44:34:de:4b:3f:c2:f2:e3:
e5:60:c0:25:1a:00:0d:b8:2a:65:55:ed:e8:5d:0c:
b7:e8:d4:9c:d9:d3:78:d1:d3:fd:bb:c6:cb:96:ba:
37:b8:7d:76:3b:bd:17:4c:60:c2:61:ef:41:58:74:
c3:18:d0:09:e3:c8:61:36:9b:8b:90:23:fb:aa:df:
a8:86:49:c1:db:70:4a:b8:73:13:e9:89:d7:5a:85:
e2:c8:dc:c7:ab:f7:d9:a4:82:25:dd:83:1a:b8:6d:
20:47:df:da:dd:6b:c8:9a:6b:db:9f:de:1b:b5:fe:
12:be:16:81:71:f4:dc:e0:ac:5a:5b:1a:e5:74:ec:
94:25:87:9a:80:66:72:e8:cc:7b:89:52:f0:57:04:
a7:c7:b3:b6:39:9c:1d:d0:52:47:25:53:95:8f:f5:
bf:84:12:ec:ef:7b:50:83:6b:3b:8a:6e:6b:18:d8:
b6:16:5a:7e:f7:05:02:42:a0:77:07:9a:8b:a3:a4:
e4:e5:27:f8:a4:c6:84:fb:25:9d:8d:7b:90:7f:34:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:38:22:F0:0B:A9:97:2B:7E:74:95:D3:81:BE:DB:60:10:9B:7C
X509v3 Authority Key Identifier:
keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:4d:18:b2:f7:9f:8f:dd:85:db:58:0a:10:1c:9a:8e:05:67:
96:aa:45:4c:f5:b9:e5:99:00:47:a0:52:18:32:56:62:77:01:
a3:92:18:ab:f5:5a:00:70:c1:3e:c3:95:6d:2f:1d:e1:69:73:
c9:cc:61:b1:93:39:08:fb:98:9e:67:4f:6f:e1:8d:ff:fc:2e:
da:36:c6:84:96:ce:cc:af:e9:cd:91:d1:a1:f9:e2:7b:e1:bf:
8a:2e:50:35:46:f3:25:de:d5:f3:55:39:a2:fb:51:cd:aa:5b:
93:40:ec:ac:b5:06:ba:65:70:8d:74:03:88:f9:3e:90:3c:62:
c3:00:d0:a8:81:d4:5e:92:d8:23:3f:b6:93:d9:d7:7d:e4:18:
c2:df:a3:4b:7e:bf:c8:de:b2:27:45:59:c4:51:0d:91:12:94:
7d:5b:f5:6d:c7:92:2e:ed:f1:0e:03:7e:f7:60:9e:3d:82:0d:
50:d6:8b:1b:33:77:0a:47:bf:d4:75:2e:87:22:ea:10:80:d2:
39:2b:58:17:6c:06:ad:de:14:81:c1:8a:f7:33:f9:ea:72:7e:
20:ca:d2:15:59:82:49:ad:8f:38:be:0d:04:97:df:42:95:22:
0e:6e:39:45:a1:87:42:c3:f5:29:e7:9b:62:cd:b2:60:0e:b0:
0c:38:fe:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:18 2025 by rpki-client