Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json)
Hash identifier: 7XLSWi/Er7MJh4xtdySCtG22nDOZ7bFUKZuz6DA8GkQ=
Subject key identifier: D1:12:FE:00:10:A7:6E:E2:CE:D5:BE:68:65:84:0C:1B:DB:2A:5B:48
Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Certificate serial: 0B09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
Manifest number: 0AFF
Signing time: Thu 30 Jan 2025 19:20:09 +0000
Manifest this update: Thu 30 Jan 2025 19:20:08 +0000
Manifest next update: Thu 06 Feb 2025 19:20:08 +0000
Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: rUpjpbkbZB2hdVZsyUjavfj5t6aSNEq1QJTzp1mMxQQ=)
2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: PrjpZlh7Tuh2bb8hiFmK68isEjfllyctC7vNKOM8jnM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2825 (0xb09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Validity
Not Before: Jan 30 19:20:08 2025 GMT
Not After : Feb 6 19:20:08 2025 GMT
Subject: CN=679bd0e9-b4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:69:8b:be:20:50:8a:2e:73:1e:96:71:cf:
5e:7d:41:05:bf:98:f7:fb:18:33:a7:3e:ee:e6:a3:
98:2f:f3:17:43:57:ad:bf:4a:94:fd:4b:8b:1c:d3:
2a:f3:fc:b0:5b:c7:89:a6:4a:a5:fb:f9:87:0e:df:
49:20:88:4a:08:8f:10:45:fd:3e:dd:f3:74:45:36:
6a:e6:37:98:7d:e4:8b:8e:00:60:a1:2c:a7:19:b9:
3d:b0:60:83:d5:99:fa:d8:a7:89:aa:99:20:b4:fd:
30:68:07:f4:f2:3a:d7:37:9e:8b:8a:3d:dc:e0:d7:
5a:27:05:62:67:cd:c4:17:3a:f2:83:00:ce:73:09:
82:0a:5f:45:82:97:7e:9b:52:82:96:94:ed:d3:e3:
1b:b5:7e:5a:79:6f:61:46:3d:ea:bf:2b:4b:a3:b3:
c9:a1:90:87:cc:37:f2:1c:99:f4:fb:9a:d2:d6:8f:
3a:0e:01:1f:ac:a1:9d:ce:71:15:63:1c:ec:b3:27:
03:a0:f7:05:f9:f1:f7:ec:f7:73:7a:ca:46:8a:b6:
9e:c1:72:55:88:cd:50:52:f4:0e:02:86:49:74:5c:
76:61:fc:43:a4:ac:98:1f:a0:60:94:8b:54:ca:8f:
68:0a:4a:0f:05:a6:da:c9:6c:9d:4b:d4:49:65:5b:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:12:FE:00:10:A7:6E:E2:CE:D5:BE:68:65:84:0C:1B:DB:2A:5B:48
X509v3 Authority Key Identifier:
keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4c:b6:ef:c9:3e:33:fc:c3:6e:aa:8b:57:fb:29:5a:84:24:
58:49:54:7b:87:67:f7:61:8b:6f:68:06:bc:1b:16:74:f1:6a:
02:a1:2f:d3:81:5d:c6:1c:06:bb:ab:66:95:ba:46:74:46:a7:
fd:e7:51:dd:47:ad:cc:44:56:ed:52:eb:14:e3:2a:1b:eb:08:
e5:7a:f9:9a:1a:36:7a:3f:65:81:3a:1f:67:5a:2d:39:db:85:
84:15:f5:ea:48:c8:eb:09:db:75:2f:86:f8:e3:6b:41:d4:c7:
89:18:79:10:53:af:1e:ed:01:d6:5e:81:7b:8d:f6:76:ea:6a:
94:01:ca:6d:5a:d0:eb:0c:c8:db:8d:16:7d:69:f5:11:a0:58:
d8:ed:ee:33:d7:96:9a:52:7e:c4:a1:d8:ea:58:4e:0f:b6:8d:
6a:21:56:a3:73:b4:ca:ef:05:c4:66:31:f7:21:6b:16:84:ce:
ba:a7:97:c5:c7:37:4a:66:c5:3a:3e:c5:85:92:b7:15:01:1f:
b5:22:0f:94:44:01:93:54:b1:72:2a:1c:a6:a9:25:0e:80:76:
6f:89:fb:f3:0b:bb:5e:e6:d3:21:be:95:08:69:fc:0c:3e:34:
18:d3:9e:d5:55:8e:c3:a8:1e:58:26:02:c2:e7:f1:ac:7d:59:
44:43:1f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:34:43 2025 by rpki-client