Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json)
Hash identifier: qjH5kt0R3p5T510jwCyubCRsRfICwl7OlUTZHFCbfnk=
Subject key identifier: DE:B4:8A:49:40:C1:88:B8:92:F4:32:6D:CD:4B:E7:52:B5:12:5C:8D
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
Manifest number: B8
Signing time: Fri 31 Jan 2025 05:05:53 +0000
Manifest this update: Fri 31 Jan 2025 05:05:52 +0000
Manifest next update: Fri 07 Feb 2025 05:05:52 +0000
Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: MtHIfx48LWuce44y32ybhdV0tJBijKG0aXssDV94nCQ=)
2: ADCDA1F83A0F11EFAB312630C4F9AE02.roa (hash: TuAyfKbGRFhHV9G3hUTl+QdiLnDpQyy2p+JhztZaeOo=)
3: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: /tGBO2MLCus8PNWAAV5edOtrlC7E+7n4ZDxG8UW5xvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Validity
Not Before: Jan 31 05:05:52 2025 GMT
Not After : Feb 7 05:05:52 2025 GMT
Subject: CN=679c5a31-7f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:ec:0f:24:6b:e2:1d:09:47:f0:00:6f:aa:
dd:c4:0d:91:b1:28:03:54:4f:7c:25:7e:2d:f8:7a:
28:de:70:84:78:f8:d2:df:9a:dc:1f:5c:28:5e:16:
b7:aa:4e:3a:ac:22:1c:6b:e8:02:5b:44:4e:b9:12:
0a:13:de:23:51:d0:cd:51:cd:d1:e5:cf:52:bd:e9:
d4:34:16:61:69:a5:2c:c9:76:c6:c6:28:78:00:1b:
bf:1b:fe:65:b4:04:fa:e9:8d:18:7c:9a:83:91:51:
f6:4c:7e:12:5a:29:d5:59:c1:ab:35:bf:6e:b4:a2:
7c:7e:0d:b8:f1:9a:5c:7e:39:29:66:81:1b:35:94:
fb:06:77:9d:d3:df:80:de:1b:f2:62:df:ed:49:d7:
3e:7d:42:92:97:e5:37:6b:6e:5e:25:26:a2:c2:22:
9f:44:c1:14:a6:86:ee:18:5e:61:df:9a:08:6a:45:
9c:65:65:89:cc:f5:4d:0a:31:82:7b:d6:12:be:cb:
68:a5:c5:c4:70:c8:a7:4d:40:37:68:27:79:6f:21:
90:2c:cb:9e:6f:d2:1c:09:12:86:a2:0e:d2:c9:38:
5b:33:41:b7:01:c7:a0:53:8b:3b:d5:73:81:f5:2c:
d5:ae:1f:56:be:fc:32:92:66:57:3e:3a:f3:99:9f:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B4:8A:49:40:C1:88:B8:92:F4:32:6D:CD:4B:E7:52:B5:12:5C:8D
X509v3 Authority Key Identifier:
keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:11:a9:58:da:6d:ae:89:89:fd:32:3f:bb:3c:f1:a5:2b:2b:
e3:97:70:9d:56:96:af:66:67:ad:11:aa:cb:6b:5f:ec:23:8d:
dd:fe:3f:de:a8:50:79:b9:56:f8:74:5f:e4:1f:96:ca:ab:56:
8d:20:1e:dd:57:84:79:04:ca:b0:fc:7c:25:d9:ec:2b:28:d4:
1a:40:db:02:48:e5:39:95:6f:b6:5a:e7:36:33:20:b0:04:a8:
a1:8e:e2:6e:ff:e9:b6:a5:87:62:79:45:44:94:4f:95:4c:4f:
3c:1c:c2:f0:9e:9d:64:b1:22:6f:fc:13:4a:7e:e0:e6:2c:a9:
88:cd:e5:bb:ee:6c:ad:43:14:79:dc:79:f3:ee:2f:28:fc:a5:
32:d5:f3:8d:69:25:c3:71:4b:4e:e6:d0:80:16:a8:39:55:8d:
23:f2:60:8b:78:ef:3f:1f:46:38:b0:6e:5d:35:22:61:99:7c:
31:06:82:84:da:4f:94:1b:2c:4f:c0:93:ad:6e:dd:eb:b0:9a:
ff:89:88:13:a0:bd:9e:8e:0a:19:e2:3a:0e:60:ce:c3:03:c4:
fb:37:a6:73:c3:4a:47:5c:8e:9a:65:78:1c:fc:09:b4:20:8e:
9f:75:97:f4:3e:f6:be:ea:79:7d:f3:e7:cc:be:b7:e6:5b:4d:
2e:78:81:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:16 2025 by rpki-client