Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
File: kTeon0YQ2uLIjGlNyVLOWDVScHk.mft (raw, json)
Hash identifier: dOT+FV27D8WGaMZJoeEYnE6pQmaD7Lt5D3bCfXypESw=
Subject key identifier: AB:28:3A:88:ED:32:D6:AF:85:39:E6:43:DF:61:F9:4A:55:18:43:30
Authority key identifier: 91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79
Certificate issuer: /CN=A913F8BC/serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079
Certificate serial: 0FA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
Manifest number: 0F9E
Signing time: Fri 31 Jan 2025 17:30:24 +0000
Manifest this update: Fri 31 Jan 2025 17:30:23 +0000
Manifest next update: Fri 07 Feb 2025 17:30:23 +0000
Files and hashes: 1: kTeon0YQ2uLIjGlNyVLOWDVScHk.crl (hash: y7033zEZGS1VAntv7xAk3/+3VSII2ww5CjyOfOAP8p4=)
2: E9056E5A520611E9ABE43055C4F9AE02.roa (hash: M4kuuW3GF+4cw4z3e2X8np8DXjwWrvLRqULDvRRViYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4009 (0xfa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F8BC/serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079
Validity
Not Before: Jan 31 17:30:23 2025 GMT
Not After : Feb 7 17:30:23 2025 GMT
Subject: CN=679d08b0-be5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:54:46:92:17:7f:ee:6b:ce:bc:d4:22:51:50:
5a:9f:3e:a9:ed:68:dd:71:fd:c8:ad:54:b9:c9:18:
07:0e:de:15:69:14:b9:af:45:f2:8b:83:45:91:54:
c0:27:3d:8a:2a:01:b7:c5:63:57:09:46:a0:3e:5d:
6d:b4:a7:f4:ef:9e:26:b6:0d:10:e5:ea:ad:fe:69:
17:db:d7:b6:51:1b:fe:c7:c3:64:01:6a:43:f1:6b:
32:1a:f3:62:29:c8:63:63:f4:9c:56:54:e0:c3:e2:
8b:b6:37:80:4a:be:a4:53:36:69:c7:3f:a5:5a:87:
1d:df:fb:62:1d:9a:d0:fe:b7:4b:e8:e0:23:24:72:
d2:e1:b4:64:dc:33:ee:6c:ab:8e:cd:a1:28:08:c9:
ec:88:eb:72:56:32:5a:48:77:e3:38:9e:ff:48:02:
c2:ef:1d:7a:85:2b:41:fd:03:63:be:f8:bb:55:a5:
bd:ef:60:0c:e6:ff:5b:52:e5:94:07:77:48:e5:02:
b1:43:4a:73:34:b9:7a:a3:6c:04:5f:49:17:b0:85:
74:69:ef:6a:05:27:9e:f6:2c:0a:10:49:6d:28:e5:
8f:1d:b1:a1:73:f8:de:b4:54:1f:d5:5c:2f:fd:ab:
0c:d5:a4:85:fd:2f:b6:b2:01:45:d3:31:ed:df:47:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:3A:88:ED:32:D6:AF:85:39:E6:43:DF:61:F9:4A:55:18:43:30
X509v3 Authority Key Identifier:
keyid:91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:11:4b:cf:f7:a5:55:03:4a:8d:54:56:98:7e:b9:ec:af:f6:
3e:f6:af:b2:04:c7:ee:95:a4:8c:2f:6d:d8:0b:69:16:59:d3:
a5:3f:09:ca:aa:b2:9e:bd:dc:6c:a3:9a:20:12:26:74:60:81:
74:b7:6d:d0:12:c7:67:12:44:b7:a1:e4:44:6c:29:57:71:f0:
34:8c:5b:4d:c6:29:46:98:4f:ce:30:45:e6:64:e0:4e:c7:98:
1e:e3:af:aa:5d:c1:8e:e1:3c:4a:94:18:c7:7d:1b:c1:12:6a:
71:9e:ad:4f:09:15:2f:e9:e4:fa:ab:a9:8f:72:7c:32:33:a8:
a9:14:14:bb:5a:48:08:89:8c:c9:2a:36:51:79:dd:9c:8b:8a:
61:f7:69:a6:0f:3c:8d:06:30:72:a3:b0:0a:71:e6:d3:cd:96:
3c:53:04:5b:9b:ae:01:49:c3:f7:5c:04:ac:a0:e9:87:97:f2:
2e:75:d1:2b:95:22:71:3b:b6:f5:d2:e1:33:9c:dd:1e:ab:35:
fd:58:45:f1:e4:80:44:a1:ce:66:4d:d5:dc:36:a7:6e:b9:6b:
bc:57:ff:56:98:9f:59:4d:88:c9:35:c4:f8:6a:d8:bc:8d:c6:
ef:4e:73:3e:91:1f:4c:11:91:cd:f3:76:2f:1f:9a:8c:92:ac:
b7:69:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:26 2025 by rpki-client