Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
File: pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json)
Hash identifier: 7QhwnW0rn3DXf6lgzxD20FydBGkml4pu1UqTzn3aXXE=
Subject key identifier: 30:8D:70:CA:F1:F0:A8:53:EE:A0:A2:55:19:CF:8A:45:63:4E:F0:F7
Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Certificate serial: 03A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
Manifest number: 039D
Signing time: Fri 31 Jan 2025 00:51:08 +0000
Manifest this update: Fri 31 Jan 2025 00:51:07 +0000
Manifest next update: Fri 07 Feb 2025 00:51:07 +0000
Files and hashes: 1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: vCiSO8A+132Uqiy0ag5oiWrU/SnkS2BW9kaIAIMFnl4=)
2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: ABrIq2phc9urb6rkViq/Ir7haK/5vojTJpbzqSfLFQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932 (0x3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Validity
Not Before: Jan 31 00:51:07 2025 GMT
Not After : Feb 7 00:51:07 2025 GMT
Subject: CN=679c1e7c-974a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:de:ab:4b:2b:32:45:e6:54:cc:eb:e9:dd:
de:d6:92:2b:53:ff:0e:e2:31:67:41:ff:0b:46:8c:
4c:67:bf:e3:2e:93:1f:a7:04:64:ba:f7:9a:c7:fc:
83:1f:b9:dd:33:71:92:c0:92:ae:9e:9f:6f:b1:9d:
7c:51:27:d5:a1:26:82:c7:3d:ad:c7:5f:55:47:54:
32:2b:33:85:91:a3:ff:c8:a9:50:ac:eb:05:a2:16:
41:91:1b:89:3c:c6:bc:ba:8b:1e:7f:26:11:0b:ed:
26:3c:fa:87:85:18:c7:c1:11:69:16:75:b9:64:fe:
d2:59:bc:ef:8a:77:2a:8e:aa:b1:08:21:c5:4c:47:
c3:38:4b:d3:13:de:43:f5:6c:e7:74:28:fe:a3:e2:
35:ea:d3:78:fd:bd:04:64:aa:fc:e4:36:1d:15:2d:
31:6e:de:15:c4:ca:70:14:f3:1c:2c:4e:7e:ef:48:
df:d6:e3:88:b9:e5:4b:4a:ca:25:0c:22:c1:c6:9e:
60:5f:03:6b:26:16:b1:d4:06:50:3c:96:95:4f:b0:
6e:c2:65:db:25:01:9f:c6:eb:04:86:a5:2c:d4:86:
af:ef:17:08:a3:15:50:55:0c:eb:7e:29:de:55:c8:
c8:df:bf:e7:49:16:c2:35:98:5b:48:90:2c:f3:53:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:70:CA:F1:F0:A8:53:EE:A0:A2:55:19:CF:8A:45:63:4E:F0:F7
X509v3 Authority Key Identifier:
keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:56:78:d0:81:9f:f8:92:19:76:68:9a:40:42:2e:30:98:e5:
84:ae:66:94:ff:3b:22:c4:96:68:da:10:23:b8:d5:fc:63:72:
ec:26:dc:07:78:1e:18:6f:67:9f:10:65:42:8e:29:f1:1b:d8:
1c:cb:4e:c5:89:05:12:2b:42:ce:8a:97:07:22:20:53:5c:68:
3c:20:57:33:79:f9:f2:2b:31:81:cc:09:cb:80:f6:2c:c5:93:
b0:98:b2:10:62:6d:63:86:d1:43:67:26:bf:e1:22:41:82:cb:
64:9a:db:a6:20:35:d0:88:91:40:e2:7a:48:31:51:0e:60:6d:
70:24:c3:ea:82:c2:af:30:85:ff:d6:d6:87:f7:c9:44:f6:2c:
55:4d:f5:df:ff:25:42:41:49:69:ef:2a:3b:a3:28:c0:98:9b:
ec:b9:4d:e0:6c:e9:93:0e:26:cc:1d:56:0c:4a:97:be:2a:9e:
c1:1a:3a:92:5a:dc:50:4e:cd:03:21:5a:17:96:65:df:bd:01:
77:46:d0:2f:a3:c1:9c:88:ee:2c:5f:64:c5:8d:e7:b6:c7:10:
a0:cd:50:16:73:77:88:0d:b7:bb:b1:af:c9:61:0e:ad:75:1b:
d8:90:bf:3f:5f:47:57:b1:1b:f8:44:e9:a7:db:3f:aa:87:d8:
81:cd:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:57:01 2025 by rpki-client