Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
File: s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json)
Hash identifier: G13s1MIrGM7CGCwnAzQE2gmSVWpkQh9YqBOGPNgPk7k=
Subject key identifier: 60:E4:5F:87:0A:0A:E4:16:1A:32:C3:E6:BA:CF:93:7B:86:E0:90:C4
Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Certificate issuer: /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
Manifest number: B6
Signing time: Fri 31 Jan 2025 05:04:47 +0000
Manifest this update: Fri 31 Jan 2025 05:04:47 +0000
Manifest next update: Fri 07 Feb 2025 05:04:46 +0000
Files and hashes: 1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: xdvAHCY6je42jp5o+G1tkq3nMDTY957XkWMC4O6AsC4=)
2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: /BUQB8qGUnnEaeFS+7LTUsKBi8s51tzJ6SaFjKd8eFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Validity
Not Before: Jan 31 05:04:47 2025 GMT
Not After : Feb 7 05:04:46 2025 GMT
Subject: CN=679c59ef-d18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:86:f6:7a:e4:0a:d6:90:2f:e3:bf:9c:89:
a2:ef:0b:ab:22:21:30:bb:d1:17:49:76:cc:28:15:
6f:11:5a:e2:fc:29:2c:2b:a6:44:13:77:bd:77:a8:
84:4d:c3:7a:66:53:d9:29:b9:b1:d3:4d:0c:25:f1:
e8:99:d4:2c:e0:12:f1:e6:6e:61:5e:3d:f2:ec:13:
5f:73:06:2b:74:80:93:79:bf:fd:7b:9d:c7:ee:59:
99:44:28:d1:4c:df:60:1e:44:94:fe:e0:ab:30:1f:
06:f9:a1:cb:a4:77:23:54:06:68:6d:8a:5d:e1:6e:
4d:3d:57:27:7e:4a:7f:03:ea:8c:23:25:82:e4:a7:
cd:73:10:4a:5a:cd:92:14:8a:c6:b0:d1:fb:c4:f4:
21:f7:f6:a4:1b:76:66:ba:96:7f:7b:19:ea:dd:0b:
75:93:01:c5:54:56:ef:53:41:19:79:c9:2b:bc:8f:
71:9b:22:b2:26:51:27:88:aa:0b:30:d5:d1:07:ef:
e0:cd:f2:4e:fe:3e:c0:29:22:26:cf:f7:d5:c7:99:
5b:20:71:76:d3:fe:cd:a3:c1:7d:2d:5d:12:0e:0b:
1f:da:ca:2a:e7:c1:ec:c0:7a:cf:11:aa:6c:a7:01:
c5:a4:a4:2d:6e:b1:29:c9:9b:14:cb:6e:31:e1:ac:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E4:5F:87:0A:0A:E4:16:1A:32:C3:E6:BA:CF:93:7B:86:E0:90:C4
X509v3 Authority Key Identifier:
keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:41:a9:7f:9c:9b:13:7e:21:ae:3e:ba:f6:35:45:72:7d:02:
36:9c:63:1c:b8:2a:25:1e:2b:ea:fc:b1:40:3b:ff:f3:55:37:
fa:2f:17:9d:78:bf:2c:ca:b4:13:92:95:a7:4b:c1:fd:93:e7:
56:4d:72:0c:89:12:56:24:df:77:ac:a5:5a:57:7f:72:ac:5c:
44:14:a4:3a:e7:6c:1f:41:1f:32:59:45:27:49:d9:b9:89:b0:
87:72:86:68:14:84:10:e4:5f:7b:95:90:53:b4:4d:36:91:9e:
24:76:dd:27:8b:61:74:73:6d:52:b8:06:15:bd:40:88:5e:bc:
ba:af:6e:b8:82:8b:a4:21:f3:35:7b:dd:6c:ad:17:10:78:f6:
d5:34:68:c0:b6:8f:96:05:2b:f9:fe:4c:77:5b:63:8c:ee:18:
f8:04:54:9a:de:e3:7f:56:84:3b:17:1e:64:e2:d6:71:3a:7a:
03:b5:de:d4:a0:98:2b:cb:16:f5:8b:05:bb:57:ee:6f:66:48:
4d:f2:cb:dc:3a:28:de:c3:ff:82:e6:f3:f0:9b:a6:47:14:83:
ae:a9:f9:35:08:d4:1e:19:77:1e:a4:9a:56:c6:4b:4f:b0:dd:
01:6b:68:9f:b6:a0:c2:30:eb:21:3d:7c:71:c3:c3:a7:93:c2:
4b:35:2f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:13:07 2025 by rpki-client