Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
File: J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json)
Hash identifier: RspT/0X37dMFQPkS6HfWrzN+ewzr6Lkus0ACwiXkWQ4=
Subject key identifier: 92:B8:5D:58:6C:D3:CB:B9:A0:9C:22:B9:B8:36:A5:96:8F:36:EB:63
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial: 0B2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
Manifest number: 0B25
Signing time: Thu 30 Jan 2025 19:14:28 +0000
Manifest this update: Thu 30 Jan 2025 19:14:27 +0000
Manifest next update: Thu 06 Feb 2025 19:14:27 +0000
Files and hashes: 1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: rdPSjePofgn3i9LNMxYrZ2K8wLqxn9sDXHdPJmuLegs=)
2: E1647F18303311EA8796D584C4F9AE02.roa (hash: KqE4NP0GXCegWdaKQdxPH3myxDzGSDNL2S8PtjJy2Ls=)
3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: W550Vt7cxRSJxbOZsCIkWRdZVJbHyD8sS0xpTJCdOUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2863 (0xb2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Validity
Not Before: Jan 30 19:14:27 2025 GMT
Not After : Feb 6 19:14:27 2025 GMT
Subject: CN=679bcf94-5f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:59:14:dd:ba:05:15:5b:e1:18:fc:44:7a:
59:65:23:c8:10:8c:9f:96:42:3e:69:29:ff:9c:ee:
85:9d:cd:60:aa:74:f0:15:6b:f8:aa:7d:c5:9c:79:
62:30:bf:97:f0:13:58:57:bc:54:13:45:80:9f:be:
32:6a:a3:c7:1c:a5:f6:02:16:ae:67:55:37:8b:a7:
d0:a8:9f:e8:51:a8:37:fb:11:ff:67:7d:6c:9f:f7:
c4:59:1d:b0:39:57:bc:7a:02:06:46:e2:ba:6d:04:
ca:ab:66:d9:fa:e3:9c:61:9e:a6:c6:c4:7a:6e:85:
7b:de:fe:71:7d:e9:20:84:3f:e9:35:c5:ee:21:eb:
33:76:e1:15:b0:03:fa:a1:61:d8:3a:3e:bd:78:80:
a9:a0:12:83:a6:3f:bb:c7:cd:48:90:b6:57:9c:3a:
af:92:67:e0:73:ae:1d:53:a1:a3:fb:e9:ee:bf:2f:
f1:7e:2c:66:fe:20:a6:d1:fe:91:c5:12:e4:0e:f6:
e1:51:a8:55:cb:f1:20:6e:ff:64:2e:03:d4:69:ab:
b1:0d:5b:e4:e6:ed:b9:00:5e:e1:9b:fa:d7:60:19:
26:a1:00:b8:ce:ba:de:9c:92:27:93:9d:4a:06:b5:
d5:99:f7:1b:cb:bc:e0:4c:ee:36:13:a1:f3:82:65:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B8:5D:58:6C:D3:CB:B9:A0:9C:22:B9:B8:36:A5:96:8F:36:EB:63
X509v3 Authority Key Identifier:
keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:d7:d1:c8:92:a1:05:d4:cf:37:f0:00:17:0a:dc:3c:e3:b5:
fc:fe:d7:84:fd:1d:24:4d:f8:42:04:2c:2e:21:90:58:e6:57:
b3:0f:28:70:6c:f4:07:5c:dd:04:bd:19:af:bc:0d:75:78:69:
88:7f:a4:72:50:2b:cd:ab:d1:7d:7c:e3:22:31:b8:64:34:17:
a5:10:c8:c2:d6:47:34:a8:c2:26:db:58:f0:74:40:d9:83:90:
77:c4:6f:19:4c:44:09:79:b7:6e:de:9e:4f:d4:a9:ce:1f:a5:
f7:25:bf:e1:84:b5:9a:a1:eb:58:50:82:a9:49:db:b3:39:4f:
17:ad:7f:42:4d:ad:4a:23:21:7d:c3:c3:7b:59:50:db:88:bc:
18:07:88:99:91:56:f4:75:02:0b:f4:fd:bf:33:db:97:bb:b7:
d4:d9:3b:cb:dd:df:31:14:02:f4:20:a0:c0:75:10:9e:6a:df:
88:ba:b0:a5:09:58:a7:5c:88:89:d0:fa:11:49:7e:37:58:f5:
14:fc:60:66:c1:2a:f8:44:cf:f5:4b:e4:25:f8:25:ab:5a:08:
2d:ca:ba:9e:ac:25:96:3a:a9:2b:bb:66:60:07:c6:7a:4d:eb:
14:d4:69:80:6c:5e:d1:dd:1d:eb:af:6d:47:7a:8c:47:00:6e:
59:f6:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:50 2025 by rpki-client