Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json)
Hash identifier: wHgeHoRrhBtKxpu+X/xir2PCSz0IAT4UakaHgKXTgNI=
Subject key identifier: 08:BD:BA:0A:F6:38:91:63:DA:B8:3E:DE:14:BE:5A:F2:44:69:41:AC
Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Certificate serial: 041C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
Manifest number: 0418
Signing time: Fri 31 Jan 2025 00:27:00 +0000
Manifest this update: Fri 31 Jan 2025 00:26:59 +0000
Manifest next update: Fri 07 Feb 2025 00:26:59 +0000
Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: QI5DpQuIMnPzNa0IINk1mtydZzmHob99LVX5pwTe39E=)
2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: keS/qF291Tz7YIPilf3yxYGs5lMrsj9UecsgrxwbjY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1052 (0x41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Validity
Not Before: Jan 31 00:26:59 2025 GMT
Not After : Feb 7 00:26:59 2025 GMT
Subject: CN=679c18d4-af67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:b3:49:33:30:3a:ab:b9:01:2c:ba:7b:44:
c7:d0:58:8d:2a:10:32:dd:44:0a:a7:d0:24:3b:ff:
27:98:4a:21:e7:69:e3:f5:6b:d0:63:d8:96:50:27:
58:ee:9a:25:f0:66:7c:17:9c:62:05:1b:db:dd:c8:
50:57:3e:cd:ff:58:1e:50:a8:6a:cd:3b:ac:0d:1b:
7c:72:d9:36:b4:b0:c5:f9:78:56:19:ce:4e:87:fe:
a7:7d:ba:60:3c:70:23:aa:6f:aa:fe:ed:0d:6d:df:
6d:a0:7b:a6:a1:84:d0:20:87:38:59:eb:40:d6:3d:
2e:b8:e2:d7:a3:0b:2c:a2:47:7d:d9:bc:97:4e:10:
d1:7d:43:73:f2:8c:ba:07:1f:f8:7d:cd:83:c6:1d:
cb:34:dc:e3:e4:9e:66:81:40:a8:f5:2d:57:10:0d:
cf:0c:16:da:5f:d3:c8:bb:79:15:7f:35:74:96:f6:
fe:7b:4f:70:9b:1b:63:29:7c:5d:1f:59:ae:13:38:
58:fe:84:b0:2a:1d:ab:72:2c:35:9f:bd:19:41:41:
13:6f:3a:c9:c9:46:ca:ba:6b:cb:46:26:1d:c0:70:
fc:c5:bc:fd:9c:22:1e:40:be:d7:e6:cb:05:b6:09:
51:48:02:88:46:6b:26:9c:6f:ce:d9:11:91:c4:b9:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:BA:0A:F6:38:91:63:DA:B8:3E:DE:14:BE:5A:F2:44:69:41:AC
X509v3 Authority Key Identifier:
keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:92:07:eb:c7:d8:2b:f4:32:4b:04:30:70:7b:1a:b6:30:50:
b7:c2:99:06:61:17:2f:ae:de:9a:e7:21:8e:25:6a:5a:f1:5d:
75:57:55:65:8e:e3:84:f7:bf:56:bf:85:78:9b:14:e2:81:01:
b6:40:42:ee:0f:22:1e:f6:43:cd:c2:5e:27:f6:7a:71:56:bc:
9d:7a:54:04:b1:69:6f:57:c0:dc:41:99:f2:6d:1b:aa:e1:ac:
9f:7e:c8:c0:4e:96:b6:34:19:f7:0d:92:ef:fa:88:37:0e:ec:
ad:7f:3a:e3:fa:64:ef:1e:12:bc:3a:6c:84:fe:27:ac:c4:3e:
b3:67:6e:46:c3:66:07:71:5d:38:44:f6:15:39:b9:af:6a:7d:
bf:c4:5e:86:79:4d:26:be:7a:88:f6:f6:13:a3:dd:a2:34:14:
c3:74:06:5e:8d:ad:b1:fe:8b:30:88:82:13:a4:8f:b1:26:46:
6e:66:77:a2:2c:bb:ff:08:f8:dc:a3:5b:c3:7c:a9:b0:4a:13:
13:69:97:5d:ee:eb:d6:8f:84:77:ba:ca:e0:a6:4c:d5:48:c1:
ae:ed:89:81:bb:49:4e:02:e8:61:04:9d:9f:90:60:b6:17:ef:
06:23:e6:9d:f3:69:73:41:ec:d9:28:b5:2b:64:0f:d3:6a:9e:
85:5f:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:01 2025 by rpki-client