Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json)
Hash identifier: 9EyB6XMkKrPerlL2t8BOaWsr3wMq3m7HfVKK+WlFo8s=
Subject key identifier: 8E:67:E3:3D:F7:A4:5B:0B:65:B3:EF:CB:18:CD:49:64:C4:A6:6C:B0
Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
Certificate serial: 04E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
Manifest number: 04DB
Signing time: Thu 30 Jan 2025 23:50:36 +0000
Manifest this update: Thu 30 Jan 2025 23:50:35 +0000
Manifest next update: Thu 06 Feb 2025 23:50:35 +0000
Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: AZ9t+tanKXSpAFR3XRt3HAHHCp7M0pYeS8ymeCTcWQs=)
2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: 9v3EHVS6OF29hHJXAC8+0BpNbFO1DRfm0tNrOjvIm8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
Validity
Not Before: Jan 30 23:50:35 2025 GMT
Not After : Feb 6 23:50:35 2025 GMT
Subject: CN=679c104c-6bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:e3:ad:a0:76:65:64:b7:31:20:ee:71:42:
c6:1b:62:5f:44:fe:47:db:6d:53:28:65:29:41:12:
11:9f:42:b1:f6:3d:99:7b:73:17:33:bf:7c:7d:a0:
7d:52:8d:8a:fb:b9:f0:89:d7:ef:b5:58:ef:cc:66:
34:d1:e5:56:48:3d:d9:c9:97:ba:38:ff:a5:83:9f:
f6:7b:35:9f:c2:46:1c:61:90:5f:76:89:f3:c1:05:
44:43:f4:64:c1:bc:d3:88:d8:ad:dc:89:8d:74:f8:
8b:26:3b:54:f5:70:d6:e2:e7:a0:b1:be:f4:dc:38:
db:8f:c1:64:a5:0c:4d:c2:a5:3e:d3:94:49:73:2d:
43:09:ea:6c:63:8b:fd:48:ae:e1:d8:d3:0f:f7:65:
1c:2d:1c:f5:0f:9a:39:52:5a:43:b8:bc:f9:c1:5d:
04:36:0e:a0:31:c3:65:d6:53:ea:61:6a:f2:25:65:
ca:97:d8:c5:69:5c:fd:09:71:f8:78:7f:d7:ab:77:
46:58:c1:a1:02:17:5f:a1:43:ad:0f:cb:ac:4d:d2:
16:f1:77:9f:ec:4f:ba:ff:7e:df:4a:43:f8:13:c0:
5c:ca:b0:24:d9:c9:e1:b8:73:bb:d6:ed:ea:cf:67:
3f:41:10:4c:5f:fb:b0:d0:4f:71:81:db:3d:d0:ed:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:67:E3:3D:F7:A4:5B:0B:65:B3:EF:CB:18:CD:49:64:C4:A6:6C:B0
X509v3 Authority Key Identifier:
keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d2:fb:31:43:d6:33:13:ad:4e:5b:83:97:6d:c5:ad:f4:05:
06:1b:51:ea:56:83:9b:cd:52:2b:fa:78:66:a0:5c:d8:e7:74:
4e:ae:e8:9b:a2:74:99:83:1c:eb:bd:cf:c4:fe:d6:ac:06:27:
7a:38:4d:c4:85:89:3a:66:c7:b9:b4:ec:15:e0:ba:d8:9c:8b:
b5:66:87:7d:35:c7:2f:22:09:68:59:6d:4f:e2:4a:62:a2:b2:
5a:9a:df:39:22:d0:5c:c9:3f:25:4b:78:ed:62:aa:69:9c:22:
d3:17:f4:7b:fb:10:87:a7:da:2e:1d:40:ab:17:18:25:50:41:
ea:47:16:ce:9f:b4:31:2d:e6:81:ea:b0:29:06:1b:cf:ba:5e:
79:e0:ea:c6:63:9d:1e:50:c1:4f:24:c4:51:62:e8:ad:77:12:
6d:af:a8:56:f0:c4:53:fb:50:a3:b2:a8:5e:11:69:00:f8:5b:
8b:35:89:93:19:b3:cb:ca:94:06:5d:c5:fd:8a:4e:93:0b:72:
3d:8e:e5:20:28:04:21:ff:3e:c9:70:02:53:61:c9:40:04:23:
72:c9:5e:73:b6:50:9f:91:7a:e7:b0:61:15:fb:25:ec:3b:72:
41:6e:e9:23:bf:65:ba:92:0c:a9:c9:ab:2a:d6:5f:7b:e6:3f:
50:3e:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:56 2025 by rpki-client