Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft
File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json)
Hash identifier: WNENJ4o3ftKtMkEJm3c5ZfsFRUuxAQvACbehZYuMOrk=
Subject key identifier: 15:B8:32:75:C5:B5:72:86:3D:1D:69:85:E5:40:3E:60:C0:E6:4A:88
Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B
Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B
Certificate serial: 076D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft
Manifest number: 0768
Signing time: Thu 30 Jan 2025 21:24:47 +0000
Manifest this update: Thu 30 Jan 2025 21:24:46 +0000
Manifest next update: Thu 06 Feb 2025 21:24:46 +0000
Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: e9iW9yQJsa7o6aMhncCbW6yc6t/rTqcGUL7NtUpAmNg=)
2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: MXW87fZ4qznNog7Mqv1dybumPTtWHlhfVDxRXuxWlk8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B
Validity
Not Before: Jan 30 21:24:46 2025 GMT
Not After : Feb 6 21:24:46 2025 GMT
Subject: CN=679bee1e-07d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:f5:e1:19:0f:89:7b:06:c4:a3:15:a3:cc:
64:25:0d:0c:9b:9e:56:4b:ca:42:60:e3:9a:1a:07:
b2:94:c7:d5:21:f2:c3:4b:30:b3:76:72:04:a0:85:
b4:e3:fc:eb:2f:a9:f6:e2:ff:fd:b2:3d:40:81:67:
1d:d3:de:f4:e5:39:73:26:0d:88:0e:9b:5b:9b:57:
d1:23:f8:5a:cc:8f:43:52:e0:f3:7e:46:ad:37:c5:
ec:14:0f:a9:cd:14:37:05:cd:49:83:5d:b8:51:a4:
75:41:3d:f4:c6:09:06:07:c3:e5:53:b8:79:af:64:
87:18:13:41:f1:c9:b1:9a:49:8d:a4:c6:24:35:e3:
a5:6f:a4:d5:75:65:ce:2e:81:d4:7f:89:12:27:df:
11:be:1d:82:b1:38:e7:aa:79:13:61:1e:83:60:50:
3b:08:a0:74:f1:5d:41:47:8c:bd:42:af:a7:6d:b9:
ba:36:49:25:b7:9e:46:21:d9:6a:be:c5:7d:62:ea:
eb:c5:f1:c7:42:c6:ad:16:8f:eb:86:0d:62:55:44:
70:af:58:08:65:27:c6:c9:bc:d4:62:eb:da:8f:22:
f7:31:e0:8a:96:29:61:9d:e8:49:d3:7e:1d:4a:97:
4f:04:7b:dc:62:30:76:46:2a:aa:e0:83:d5:a6:2c:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B8:32:75:C5:B5:72:86:3D:1D:69:85:E5:40:3E:60:C0:E6:4A:88
X509v3 Authority Key Identifier:
keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:d6:f9:a8:58:f6:cd:c6:5c:d8:58:63:b0:1e:cf:03:3e:6b:
d3:41:f3:18:a7:ed:7c:33:a0:7c:3c:4c:90:f8:97:7e:05:4c:
af:da:63:95:b9:32:6e:cc:24:36:d3:3b:5d:45:bb:9f:16:b7:
e5:5e:bd:17:2e:97:d5:21:87:be:b9:c5:2e:bf:85:5b:29:2a:
1f:a8:3f:5c:48:bd:9a:be:47:2f:01:d0:ca:1f:c6:63:bd:0d:
23:20:c6:a2:7e:b7:76:e7:1f:3d:27:56:63:51:2a:2c:7b:10:
76:c7:d9:e8:ed:57:f4:b9:aa:8a:44:7d:ce:7c:c8:c8:f2:78:
36:39:e8:a2:61:85:7a:da:09:24:be:2b:c3:c5:a8:ec:db:fd:
a2:34:8d:f4:60:80:cf:e0:d2:71:18:41:7e:e4:f7:9d:94:b3:
20:9c:ec:84:bd:b8:0a:d1:90:a8:a2:93:9e:42:45:16:89:ab:
cf:27:bc:43:fd:8a:63:8b:f8:35:d6:21:e4:ba:ae:58:34:2f:
f5:28:3e:c1:2e:dd:23:7f:fd:1e:51:9d:b5:59:23:db:8a:7e:
a2:82:a9:ab:02:1d:db:32:57:b5:97:49:58:ca:c2:02:99:7b:
5c:5c:a6:28:e5:a1:32:b5:cd:b1:b0:3d:48:7f:74:ba:7f:bf:
fa:b5:9b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:09 2025 by rpki-client