Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json)
Hash identifier: 2CN8jY5iemrQeVZVWXq50coKq/U2AGetjUPHv8dPGAM=
Subject key identifier: 2E:A9:EE:12:67:2A:0F:C7:CA:19:9E:5A:47:BB:F7:FC:50:04:42:57
Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31
Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
Certificate serial: 3446
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
Manifest number: 3446
Signing time: Fri 31 Jan 2025 14:53:16 +0000
Manifest this update: Fri 31 Jan 2025 14:53:16 +0000
Manifest next update: Fri 07 Feb 2025 14:53:16 +0000
Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: 4RQJxF0LidbM98hBjKlE95ai2zrSAtZAcW7YxqkD2ts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13382 (0x3446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
Validity
Not Before: Jan 31 14:53:16 2025 GMT
Not After : Feb 7 14:53:16 2025 GMT
Subject: CN=679ce3dc-a038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:c8:2d:fc:5a:b0:8d:b7:d7:91:bc:69:36:
68:e9:b0:21:ea:4c:1c:30:e1:45:68:1a:52:33:f9:
ef:31:8e:6f:0c:89:1d:d2:1a:c1:f5:fb:b0:c0:19:
b3:01:62:38:b6:5e:b4:8a:de:d9:09:89:da:52:50:
99:e4:66:d9:a5:56:4b:84:b8:6b:5f:7d:89:d2:50:
05:ee:b8:6c:6f:bd:bd:75:7a:6e:77:22:8c:41:16:
cd:74:97:02:bc:2a:c7:71:20:e8:13:b4:1f:99:19:
d4:d3:07:15:08:aa:f3:b7:ab:c9:c0:da:cb:03:7d:
92:19:51:ba:46:6b:ba:6b:5e:a3:59:9c:e5:30:b4:
d9:38:aa:05:80:06:bd:3a:b8:d0:89:7e:21:04:d1:
08:79:77:7d:ab:54:66:77:24:75:ba:b2:cd:51:e9:
b6:51:0f:d4:a0:24:57:03:a0:f8:94:0f:7b:ae:f1:
2a:e7:f9:f1:a6:8f:0c:90:6a:c6:07:74:58:f6:76:
11:c5:29:94:30:7b:e5:70:79:d7:30:86:15:c9:34:
9c:a6:5e:ca:aa:86:23:9b:dc:fd:e8:22:01:eb:6b:
18:13:d9:87:96:22:e0:10:d6:fd:8a:8f:4c:c1:01:
e7:ba:77:80:f1:b0:b5:3d:87:e6:88:f2:96:1c:86:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A9:EE:12:67:2A:0F:C7:CA:19:9E:5A:47:BB:F7:FC:50:04:42:57
X509v3 Authority Key Identifier:
keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:49:8b:e1:26:95:e3:99:41:e7:2b:17:6e:00:27:40:bb:fd:
ff:5e:f0:e4:61:5e:a0:da:75:f8:aa:97:7b:19:f7:73:c9:20:
25:43:64:61:4b:c6:d7:52:ca:77:b1:08:41:bf:0c:81:ce:11:
da:45:b3:68:5e:4d:cc:7e:32:e8:44:76:14:4b:cb:6b:99:73:
cd:3e:0e:45:a2:9a:6e:ce:d8:55:4c:c6:82:91:55:a4:d0:b3:
c6:4c:eb:ff:3e:4e:f7:89:c9:b8:c0:17:a3:8c:6e:e9:6f:36:
ce:f9:72:eb:d8:18:52:b3:d6:08:48:bc:11:cc:24:fa:38:a3:
d8:85:bb:8d:4b:d0:8b:7e:1c:17:83:0b:3b:b7:01:6c:1c:34:
43:d3:a1:da:00:64:e8:e4:4f:90:9e:60:02:b2:11:41:12:bc:
92:c1:c1:0c:7b:3d:dd:6a:2f:bc:fd:57:45:53:db:14:ee:ee:
79:00:33:e6:1b:17:2d:36:03:0a:64:36:ca:3c:3b:80:35:ec:
6b:56:c6:48:8f:e2:37:3c:d7:4f:d8:30:e5:67:2c:34:22:e8:
e8:8a:f6:3b:da:90:49:54:cd:a1:ec:93:95:6c:ac:52:ac:93:
39:af:d0:4b:e5:a4:cb:d7:bc:73:bc:89:17:2f:c6:31:85:1a:
b5:9f:12:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:42:00 2025 by rpki-client