Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json)
Hash identifier: 60noobKbAi53fiq+ZVteOK4nWrHFgYenNWydXPWV4os=
Subject key identifier: 5C:DA:0D:B4:3E:88:1F:9D:61:C3:C4:61:53:69:6E:B6:F6:FE:91:03
Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
Manifest number: FF
Signing time: Fri 31 Jan 2025 04:13:54 +0000
Manifest this update: Fri 31 Jan 2025 04:13:53 +0000
Manifest next update: Fri 07 Feb 2025 04:13:53 +0000
Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: n4axyLbWHjAenlWgNIV+leqJc3iuQ05SCr/e2txKarc=)
2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: gVUndys1FOrdFAUgWj7NFlEkhtcr9jjG/N1oaA3t584=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Validity
Not Before: Jan 31 04:13:53 2025 GMT
Not After : Feb 7 04:13:53 2025 GMT
Subject: CN=679c4e02-ed08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:21:16:6c:74:bc:5f:9b:db:66:5f:d0:b8:
2a:21:55:79:bb:f5:0c:78:4a:5f:de:6d:e4:d3:af:
38:69:58:93:69:83:4d:30:fa:06:42:8a:e4:22:5d:
ca:6f:30:3f:e4:7b:d6:57:a5:1b:d7:46:68:6a:0f:
24:6b:cb:12:85:58:6f:a0:db:a2:98:17:93:35:a2:
e5:a1:d5:f3:7b:9f:f0:30:87:c8:f9:4e:4a:8c:f3:
35:88:be:6f:8d:19:35:74:cb:53:01:7a:7b:b2:d9:
c7:0f:37:30:2d:79:97:9e:0c:3d:9b:8d:41:e1:2b:
21:0d:df:dc:33:b4:4c:f2:19:70:14:c9:53:28:61:
35:42:7f:9a:48:43:4d:f4:09:54:fd:a4:a5:2c:0b:
bb:1f:0f:5a:dd:bb:9b:11:db:5d:a5:f7:05:48:70:
41:5e:41:d2:71:d8:e2:b0:e3:13:4e:02:a4:b6:17:
05:68:c5:e5:85:09:87:87:db:12:71:37:b5:21:3a:
ed:77:3e:f3:1b:20:dd:46:98:71:12:a1:0d:81:67:
4e:a0:aa:c2:d2:e8:3c:91:78:b8:63:3b:07:0b:cd:
ff:ce:ad:09:81:1e:a7:47:2a:4e:2c:03:45:8e:3a:
65:2f:d4:2a:47:2b:04:78:ab:d2:e0:a2:92:c7:3e:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:0D:B4:3E:88:1F:9D:61:C3:C4:61:53:69:6E:B6:F6:FE:91:03
X509v3 Authority Key Identifier:
keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:84:40:d2:cb:ea:9a:bb:39:04:dc:61:bd:d3:b3:31:a6:3b:
22:52:66:b9:a3:c2:32:1b:56:bc:f9:0e:72:49:36:4f:38:fb:
5e:ca:7d:16:68:e7:ff:e5:cf:18:a9:5f:6b:d9:85:f4:5c:43:
cf:49:07:a8:a2:d0:1f:c3:44:0b:50:5d:98:8c:e3:a7:30:d6:
a2:71:01:ab:fe:cd:23:50:28:83:a7:ac:04:cc:5e:60:bb:82:
ae:3b:4d:65:7f:c7:8d:ae:f1:56:f7:c6:3c:0b:9e:d4:d6:e5:
ea:13:01:51:32:23:4c:37:3b:3c:5e:c5:99:48:24:42:f3:be:
05:0c:29:04:20:19:14:e6:b6:9c:73:0b:1e:26:1b:7a:fe:fa:
8e:f2:fa:0e:3f:d9:a7:e5:1e:7a:e2:04:ae:4e:9b:00:d3:1d:
b6:be:97:3f:9e:cf:0b:eb:b7:76:d1:22:27:7f:67:7c:ab:d7:
9e:b9:94:86:3b:e9:6e:65:a0:18:56:d1:48:5b:85:ec:0e:ca:
d4:92:24:4b:ff:5f:29:a5:ff:44:49:4a:c4:a8:3d:4e:ef:a1:
2c:76:26:ba:df:da:ae:90:8d:26:98:7d:45:a4:08:6c:9b:a3:
5c:59:fa:a5:54:33:0b:05:d1:09:1d:cd:e9:ae:db:6f:31:1f:
0f:9a:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:17 2025 by rpki-client