Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
File: 06m0znk41yolUFSgwIW_eI6wabA.mft (raw, json)
Hash identifier: nHtcqxHPG3c+uzvFcJjH53vIyuHYwkJMDFYYDceUYEo=
Subject key identifier: 05:F8:37:A9:27:CF:7C:6E:34:3F:5B:C3:A3:A8:7D:FB:C6:3F:EE:87
Authority key identifier: D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0
Certificate issuer: /CN=A914331D/serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
Certificate serial: 08AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
Manifest number: 08A7
Signing time: Thu 30 Jan 2025 20:35:26 +0000
Manifest this update: Thu 30 Jan 2025 20:35:26 +0000
Manifest next update: Thu 06 Feb 2025 20:35:26 +0000
Files and hashes: 1: 06m0znk41yolUFSgwIW_eI6wabA.crl (hash: a8vYGl7z/CTwzFCmBX3usZ2rH9bZU7rSTRCtbOlstv0=)
2: 425602A0AD2111EA9510AC0DC4F9AE02.roa (hash: /7CSrLoWR8aR13lBtLre9qbhzd0pZBgpO/Lz0opKvSI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222 (0x8ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914331D/serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
Validity
Not Before: Jan 30 20:35:26 2025 GMT
Not After : Feb 6 20:35:26 2025 GMT
Subject: CN=679be28e-f449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:3e:92:81:7a:23:9c:98:6b:3f:cc:b7:ff:
22:dd:6a:87:6c:ce:2f:74:1b:e4:3f:86:80:ec:87:
63:27:e0:92:e8:87:39:95:78:11:dd:f0:16:63:20:
13:99:d7:62:a9:30:e9:f9:88:9e:17:b9:aa:30:52:
6c:de:d8:4a:f9:a9:43:27:bd:0a:e4:9b:99:a3:dc:
c2:f9:15:9b:8c:fb:96:07:80:8c:e8:25:86:4c:1e:
23:52:a0:ca:b1:67:8d:c6:22:c4:80:17:d6:08:81:
1d:b0:7b:62:1e:8a:5a:42:40:a7:43:7a:7d:66:5d:
98:61:b2:b9:4b:b9:cf:c4:5e:70:df:72:8d:86:a7:
fa:25:0c:72:84:b7:f9:10:94:ae:0a:d8:16:ce:8a:
78:67:f2:3d:04:8d:b5:53:a8:54:4e:3f:15:c4:23:
bc:d5:42:7a:d8:88:58:ac:db:23:e3:a0:d0:c6:57:
9c:e1:4a:b9:12:f1:bd:f0:a2:4d:58:f5:01:58:ef:
cc:5a:33:19:f2:4d:46:5f:57:38:4c:3a:3c:4a:4c:
07:69:d4:84:1d:41:2c:30:3d:e8:8f:a6:09:2b:4d:
cb:10:0d:92:62:76:7f:98:c0:62:ca:d0:ae:d3:b5:
83:29:11:68:9f:40:73:4f:37:97:7b:bd:1b:e0:bb:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F8:37:A9:27:CF:7C:6E:34:3F:5B:C3:A3:A8:7D:FB:C6:3F:EE:87
X509v3 Authority Key Identifier:
keyid:D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d2:ef:6a:18:d8:d3:25:99:cf:3a:95:f9:50:d5:9a:63:e9:
92:23:32:e6:07:70:90:56:3a:8c:0e:3b:c7:8b:be:2d:65:73:
fe:b2:46:ea:5c:00:35:71:09:43:9b:e6:c2:71:7c:9a:55:ef:
67:8b:7a:7c:8e:1d:b0:eb:7f:09:ec:bd:0e:f5:be:af:25:ec:
46:03:88:31:21:be:7e:5e:69:b1:8a:70:7e:c9:67:59:0d:14:
cb:ef:1a:f1:d3:4c:9b:c6:9e:58:ac:be:21:0b:09:ec:7a:bc:
a8:f2:f9:f8:70:d4:fc:1a:e4:8a:34:31:83:59:04:01:e2:1f:
d3:d5:7a:47:49:a2:2f:4c:aa:91:71:f4:36:95:15:d0:d2:0b:
4b:5f:8d:26:77:b4:65:a1:40:1a:98:43:ca:75:c7:71:e4:60:
cc:12:36:48:bd:7d:06:9b:a4:52:ab:9b:b3:1a:34:ec:15:3c:
71:6d:20:95:9d:79:22:7c:7c:50:ff:48:a9:b8:d4:f2:92:b5:
20:cf:31:24:50:20:6f:68:81:17:4b:a6:f3:54:27:5e:60:b4:
7c:8c:aa:c1:5b:e0:ef:df:24:08:26:cf:0f:fd:13:7f:34:f5:
d9:cd:02:e6:5f:03:23:bd:8c:57:05:0f:34:2a:d2:06:e6:93:
ce:28:72:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:59 2025 by rpki-client