Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
File: iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft (raw, json)
Hash identifier: /0sFQ0peHgMKnVGwpbpFwPualIneBS9Oam3/9R8iUNI=
Subject key identifier: 6C:A9:7C:8D:15:BF:C4:AF:44:EE:D4:43:BE:EE:AC:D1:CF:D5:D5:F5
Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF
Certificate issuer: /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
Manifest number: 91
Signing time: Fri 31 Jan 2025 05:36:50 +0000
Manifest this update: Fri 31 Jan 2025 05:36:49 +0000
Manifest next update: Fri 07 Feb 2025 05:36:49 +0000
Files and hashes: 1: iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl (hash: DmtI7mDtfEY2dKSQqMojbaIjOxa3ZM0hrItuWy97j2I=)
2: 5DB3B5AA145C11EFAE012A55C4F9AE02.roa (hash: XVpTX+9SjXHhDtMpPyvxEeJ7NxK4ba3tAPiaJxOtkLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
Validity
Not Before: Jan 31 05:36:49 2025 GMT
Not After : Feb 7 05:36:49 2025 GMT
Subject: CN=679c6171-79a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:35:18:a3:a7:6d:8f:b2:79:dd:f3:bb:5e:
a1:79:b0:1b:84:58:0c:f1:ff:5b:86:9e:25:59:4a:
fb:b5:28:99:08:70:55:1d:e4:cd:1d:9b:fe:83:95:
f7:75:8e:c1:73:33:36:a4:94:db:ae:76:0c:0b:c7:
0d:56:c7:6b:63:9f:12:9d:da:71:8e:85:a1:1e:cf:
e1:70:f1:6f:8b:1c:c1:80:4a:f8:4e:56:25:ee:70:
73:c8:df:6d:5b:e9:0e:a8:2e:54:0a:aa:8c:79:e1:
8a:8b:cb:5a:85:40:8f:56:9b:f9:95:30:96:55:a5:
9a:f6:7b:2a:ab:76:ef:fd:72:7a:e2:bd:7c:7f:79:
ff:96:6b:0e:1b:bd:34:6b:cb:91:fb:c2:c3:2c:ea:
02:56:16:7f:c9:d2:a2:cc:e0:c9:80:79:f5:92:d9:
f7:f9:ee:de:33:94:d6:6b:38:0a:29:87:19:97:dd:
cc:16:b5:5b:64:65:bf:ff:eb:c3:fb:77:e0:f8:f7:
71:71:c0:9f:67:4b:37:90:88:6e:47:2f:fe:ef:9f:
e9:2b:9b:f9:fe:5e:12:fb:43:60:22:97:65:bd:81:
07:27:10:5a:51:d0:d4:2e:d9:6a:9c:e7:83:ce:78:
45:1e:a5:7c:6e:3b:7e:15:51:68:c3:66:05:df:86:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:7C:8D:15:BF:C4:AF:44:EE:D4:43:BE:EE:AC:D1:CF:D5:D5:F5
X509v3 Authority Key Identifier:
keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:5c:a0:c2:36:fd:f7:15:7f:b9:36:ba:ec:d8:22:01:1b:a2:
9e:fc:c9:08:8c:7b:0e:8b:b0:a5:90:89:b9:c8:71:d6:da:ca:
d6:77:d2:01:71:82:18:06:10:a0:89:83:7d:b8:f7:7e:52:2a:
15:65:bb:1f:a5:cc:94:9a:a7:09:2e:a2:b1:55:90:c5:96:ca:
a1:86:8d:3e:cd:c8:27:3d:bb:3c:ce:eb:cf:aa:95:4e:62:db:
64:e7:b7:fa:1d:b5:09:b6:16:af:04:01:fe:28:4d:68:da:ae:
ec:ec:bc:38:9e:75:83:0a:b6:d0:cd:80:b5:95:17:3d:88:c0:
ca:64:8d:bc:f0:5d:8c:68:74:10:6a:35:48:fc:ba:3f:42:b3:
36:d2:54:49:94:59:e5:c8:1c:4c:7c:70:da:67:ab:57:af:3c:
e9:6a:24:58:a1:2b:33:a4:7d:40:7c:54:c3:85:36:53:48:e8:
25:94:bc:cd:5b:0f:22:72:e3:c5:6a:e1:b7:fb:bc:27:6f:98:
21:3e:3f:95:5b:25:21:e0:5a:2b:d5:5b:d9:d5:e1:0d:9b:1a:
90:4b:a5:3e:ff:f3:2f:2d:5e:d1:51:04:21:90:ac:7c:45:2d:
d2:63:f9:11:c2:eb:b9:73:7f:c9:69:c8:b7:14:95:e8:53:34:
a5:7b:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:03 2025 by rpki-client