Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft
File: 2zfNKCxsfbw6kLEDt6I53NFY_2A.mft (raw, json)
Hash identifier: NGhNZB5msRt3nCkGJ/3qS85q2Nyf4as9mUcdLDT1Css=
Subject key identifier: F9:B4:FB:F9:66:E3:DE:1F:1A:70:C8:C3:BE:8B:75:EF:BA:54:CC:FF
Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60
Certificate issuer: /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60
Certificate serial: 0890
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft
Manifest number: 088A
Signing time: Thu 30 Jan 2025 20:38:53 +0000
Manifest this update: Thu 30 Jan 2025 20:38:52 +0000
Manifest next update: Thu 06 Feb 2025 20:38:52 +0000
Files and hashes: 1: 2zfNKCxsfbw6kLEDt6I53NFY_2A.crl (hash: WdyjsY5zp3F0ugbG1o86ACn12jeObZ41XpOvipCTxZc=)
2: 6154A3B0B2B611EAA5884016C4F9AE02.roa (hash: v6eXZmLrZttsFYphww5DwQSaxSYNhoXZnZd8akGhwqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192 (0x890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60
Validity
Not Before: Jan 30 20:38:52 2025 GMT
Not After : Feb 6 20:38:52 2025 GMT
Subject: CN=679be35c-6329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:76:dd:73:72:38:63:55:3a:5a:ed:e7:44:
59:88:92:77:23:e6:77:d2:e6:32:03:5d:07:63:e4:
7a:43:26:38:0a:97:28:99:13:4c:65:6f:8b:8c:26:
c8:d0:c1:b9:f3:b9:5a:41:1d:27:14:56:67:c6:51:
b2:4c:f5:99:d1:23:a5:cb:5b:0e:00:87:94:e3:35:
23:4e:ec:b7:34:1a:49:58:4e:31:0c:bf:0f:66:59:
c2:0a:54:8c:60:84:fe:57:3d:b9:f5:e9:de:8d:4a:
ac:0d:b4:75:91:73:25:6f:4b:d2:73:17:1d:6d:d0:
5a:d0:53:ff:af:c0:8a:4a:77:34:71:8b:dc:11:4c:
94:20:97:79:ed:80:09:26:e4:a5:63:29:91:cd:6f:
be:49:72:88:5c:26:2c:52:5a:6c:1a:b0:d4:33:e3:
c0:eb:69:3f:3f:b2:ea:e9:0e:60:18:09:86:fc:7c:
d8:e7:c7:1b:27:cc:87:6f:3d:e1:d2:40:d6:47:40:
10:c6:8f:7c:08:81:c9:0d:18:37:25:d4:c8:d0:a5:
f3:2b:83:5e:20:4c:96:30:3c:36:2d:e3:39:38:2e:
1e:a5:5a:12:f0:2e:0d:06:0e:f2:72:a1:dd:c9:bf:
45:95:53:e8:f3:d9:18:58:af:bb:6f:d4:41:29:ad:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B4:FB:F9:66:E3:DE:1F:1A:70:C8:C3:BE:8B:75:EF:BA:54:CC:FF
X509v3 Authority Key Identifier:
keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:89:0f:8a:c6:d4:e8:38:d4:b2:e5:de:63:f7:49:a8:55:d6:
9e:a7:07:00:51:65:43:3e:5e:39:54:38:1f:de:39:83:24:f4:
e2:d7:47:f4:2d:f8:19:ed:a3:9b:fd:ba:d3:9b:b9:54:9c:be:
68:53:92:ce:95:93:ab:1a:4f:30:e5:92:74:77:3a:ff:9d:e5:
60:11:cf:b9:0e:27:ea:c2:52:7e:f9:33:02:1e:4f:df:da:49:
2d:e8:86:03:47:56:e1:6d:42:e4:a0:5b:42:a4:b4:5a:1c:93:
a7:ba:99:69:53:a5:e1:24:48:75:35:c9:25:ea:1a:a1:e6:9c:
5f:df:76:f8:5b:c7:f1:72:26:86:b1:45:b3:8b:cc:08:af:23:
53:aa:25:01:c1:1f:bd:68:8b:a2:35:fb:ba:53:7d:a6:f7:8a:
26:01:4c:3a:27:38:41:22:d6:48:e9:31:18:07:d5:cd:59:0e:
54:12:c2:99:d6:c5:88:cf:63:ee:6a:50:36:b7:5b:36:66:d2:
0d:17:93:e7:c0:66:70:1f:33:be:7f:d1:46:c9:99:d7:6f:c5:
64:38:1c:af:29:9f:83:95:ae:8c:5e:d7:24:35:71:eb:54:4b:
08:c2:97:16:00:70:ce:1e:64:d8:cd:89:ec:2d:3d:90:13:d0:
9e:b8:22:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:10:06 2025 by rpki-client