Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json)
Hash identifier: 6ES9U1VGMKSEB95GQV5LkEBdEEMQ3xl8fKfd/KIBWFI=
Subject key identifier: 61:01:89:E2:2F:97:6D:82:AD:35:A9:56:71:24:9A:AF:1A:4E:7E:C5
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial: 08F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
Manifest number: 08EA
Signing time: Thu 30 Jan 2025 20:28:04 +0000
Manifest this update: Thu 30 Jan 2025 20:28:04 +0000
Manifest next update: Thu 06 Feb 2025 20:28:04 +0000
Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: QkM2LMoAGDTY4x/RtTxTt7OHAvfK/ook8vhAskGHP/4=)
2: 649A355C5F0F11EBBDB7C113C4F9AE02.roa (hash: bw4sMGnKDiftNLfRmiZR5SdnMpNduWFQjTQlPL6jZYY=)
3: 20544B84F14511ECA1AE5F4EC4F9AE02.roa (hash: FPAklaM71rdV3Mf7CFthJcOnotN1vw1BtN7p9xcPR+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Validity
Not Before: Jan 30 20:28:04 2025 GMT
Not After : Feb 6 20:28:04 2025 GMT
Subject: CN=679be0d4-1a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:61:45:bb:f4:1e:b0:c3:20:d8:8c:1d:36:
f1:d0:d0:cb:7c:68:8d:ef:2d:49:68:a8:ae:61:7f:
30:65:5a:2a:ad:a8:61:9b:d5:25:2d:37:8a:a3:82:
d0:e9:05:27:83:23:9d:56:dc:45:85:5b:eb:a6:b3:
d7:3e:6c:75:05:a3:46:f4:fa:93:2d:e1:78:4a:cd:
73:a1:ad:bc:1e:72:28:a0:41:d7:57:dc:9d:4c:4d:
f9:a7:42:2f:29:83:6d:0e:c6:4f:59:63:e0:d3:1a:
c7:4e:e5:39:bc:d3:43:e2:8c:aa:ce:6b:56:da:e8:
da:16:cf:5b:59:81:97:6f:da:70:e1:e1:34:17:58:
aa:ca:4a:07:14:68:5b:8f:74:b1:96:83:df:ad:f8:
20:d2:51:2d:37:83:c1:0b:a6:38:7a:13:21:16:4c:
c1:42:f7:4c:a8:89:8b:d4:75:7f:3d:30:10:98:d2:
93:0e:2b:6c:4e:cb:4d:ce:c2:d7:f9:c5:71:13:6f:
d8:e7:f6:3b:30:27:b3:ee:15:cf:24:18:d3:83:04:
ec:37:1f:57:70:24:a6:5d:2a:00:27:2e:96:64:0d:
f5:6e:f4:95:91:6d:ad:e5:92:d4:8b:5e:31:fa:ff:
d6:f4:0a:96:da:a8:8a:5b:0c:27:30:59:04:bb:01:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:01:89:E2:2F:97:6D:82:AD:35:A9:56:71:24:9A:AF:1A:4E:7E:C5
X509v3 Authority Key Identifier:
keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0e:38:d3:9e:75:49:b2:ee:70:98:00:37:3a:61:53:d0:9c:
73:eb:c6:af:64:13:14:a9:6f:50:d4:b9:c0:91:19:6e:8f:8b:
37:1a:f0:13:9e:30:ed:96:eb:6c:0c:e5:a8:40:44:8d:f3:19:
70:d0:c7:30:1b:6e:b5:53:86:74:40:96:79:2f:b5:ba:fe:44:
62:33:d4:85:5d:8d:2e:37:0d:06:8a:9f:4c:a7:be:a5:f8:72:
6d:66:eb:f6:fb:83:4b:69:fb:5c:d6:d4:de:fd:ad:04:04:bb:
95:13:d6:3e:8a:c9:26:23:c8:94:c5:b9:00:fd:99:ef:cd:cd:
3a:00:14:54:ba:7c:b5:f9:6d:d7:6c:03:9a:dd:e1:3e:60:7f:
f3:e6:cb:af:a8:0b:19:3d:03:42:95:c3:5e:9c:9b:47:6e:bf:
96:5a:3f:f7:44:4e:7f:df:20:3b:0b:b6:a0:db:cc:27:20:5d:
bc:a8:6f:71:be:28:d9:4f:67:03:bc:87:d9:d2:68:8d:ec:90:
19:03:f0:14:12:7f:5e:46:6b:98:57:ca:88:34:93:58:c6:a1:
3c:ec:73:da:2f:bd:17:49:0e:4b:a8:b3:db:d6:80:b3:b9:18:
6a:c6:6a:e2:39:a5:38:df:23:c5:bf:50:35:68:34:54:a9:a6:
a3:79:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:50 2025 by rpki-client