Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json)
Hash identifier: /r7FRoYYFJAYYBTHdCvIZXBeoSwZoezxLFGPFAyVvOQ=
Subject key identifier: AB:1F:27:A1:6E:CD:E3:FC:7D:26:10:8D:5C:47:3E:C8:D2:23:8A:5B
Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC
Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC
Certificate serial: 0ADE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
Manifest number: 0AD1
Signing time: Thu 30 Jan 2025 19:31:40 +0000
Manifest this update: Thu 30 Jan 2025 19:31:40 +0000
Manifest next update: Thu 06 Feb 2025 19:31:40 +0000
Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: +vk9+ZhtjDbW3dREkzFN53ksECNcaMb4AiT7drpHKag=)
2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: dPrx3cF0sDj9FTl2qCoRHJgtgGOLW5ACbJ0tx2wVxmU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2782 (0xade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC
Validity
Not Before: Jan 30 19:31:40 2025 GMT
Not After : Feb 6 19:31:40 2025 GMT
Subject: CN=679bd39c-be1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:92:06:07:ca:f7:f1:3d:78:28:c3:00:49:
bb:22:e6:3c:e3:5c:95:71:6c:ac:5e:07:8b:6d:0c:
d5:c6:93:0c:de:00:bd:18:31:96:2a:29:19:57:9c:
bd:4b:d9:9f:8b:22:99:7c:54:da:87:f7:ac:a6:6b:
11:67:79:64:11:e7:84:1c:de:40:7a:2e:40:36:2d:
2d:81:9c:6c:14:0f:c1:08:32:81:9c:0f:6c:21:a6:
b2:ea:ab:d3:2f:0c:d9:84:fa:a7:ff:9a:e4:78:5b:
93:20:cb:77:23:2a:11:46:b6:29:ec:b9:83:f7:ec:
93:14:60:93:4f:ce:6f:6d:e5:e2:c2:ee:ab:50:e5:
17:56:aa:6e:8c:e9:f6:45:4e:ee:d6:e1:ff:ff:aa:
65:1c:04:6b:1b:83:bc:d1:c5:f3:44:4a:01:2d:9a:
dc:1e:42:72:cf:59:27:4b:28:b4:b2:96:3c:bc:df:
7e:d3:f6:18:0f:4a:f9:6a:60:67:2d:90:d0:62:87:
e8:7c:7c:f8:95:37:44:95:0d:96:93:c4:0e:69:cf:
3f:af:bd:eb:13:6d:00:47:fe:97:dd:1a:af:f0:00:
d2:ca:db:80:b3:0b:de:43:3d:b4:9a:5c:68:1d:52:
c0:8f:67:34:73:dc:d8:19:2e:74:b0:b2:17:9a:89:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1F:27:A1:6E:CD:E3:FC:7D:26:10:8D:5C:47:3E:C8:D2:23:8A:5B
X509v3 Authority Key Identifier:
keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:51:99:f6:49:0a:7c:e8:f9:b3:47:d5:f4:0a:ac:d5:8e:1f:
45:c3:ad:8d:29:b4:35:b4:93:db:29:76:c7:6a:f9:3c:78:07:
98:a4:56:3b:3c:b7:6d:45:4a:ee:b0:79:91:31:5b:e6:e0:1b:
a2:7d:bd:ed:58:e1:91:d1:4a:ee:16:f8:9b:a7:ba:4b:62:5b:
aa:da:a8:c9:ff:01:ed:87:d9:8d:06:8c:30:46:a3:e9:b8:88:
b6:a0:32:86:35:12:d3:ae:ef:6a:22:71:f1:36:2a:6a:ce:a9:
5f:e8:de:9a:c0:d2:d3:11:ba:a6:03:d3:28:dd:4b:5e:b7:19:
9d:64:7e:15:f7:3f:55:93:9a:b4:f1:4e:a5:80:7c:ce:8e:63:
22:10:0a:a3:d6:cd:6d:4b:f4:8a:89:87:b9:87:84:54:f4:09:
f0:9e:a8:7f:5c:29:93:6b:45:b6:33:f1:a3:a6:65:ae:28:c2:
91:d4:7c:18:25:8d:76:7c:df:05:55:34:b4:9b:cd:a5:41:21:
59:00:07:fb:73:c6:9e:e2:15:03:51:18:bf:da:43:0e:e3:1d:
37:3b:51:17:9c:3c:49:c8:c2:a4:08:b8:3c:34:74:4b:77:89:
74:db:e6:e6:c4:76:d2:a9:30:e3:f6:9d:d8:35:09:6d:ae:9e:
24:18:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:18:38 2025 by rpki-client