Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
File: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft (raw, json)
Hash identifier: QG64Ch3UHUPLrrSMynoKMijw+q+ZlCeMEugIURtqj2w=
Subject key identifier: 0D:F1:4F:0B:86:C4:8F:F0:79:0C:33:00:98:24:5E:4A:4F:CE:FE:66
Authority key identifier: 22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8
Certificate issuer: /CN=A914C475/serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8
Certificate serial: 06BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
Manifest number: 0BC2
Signing time: Fri 31 Jan 2025 18:39:56 +0000
Manifest this update: Fri 31 Jan 2025 18:39:56 +0000
Manifest next update: Fri 07 Feb 2025 18:39:56 +0000
Files and hashes: 1: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl (hash: LN4HZPJQWS2j2LrW9lHhP/1yMkG9sVkKSYmeBHRSrno=)
2: 01283BC2532011EBAE6D1F37C4F9AE02.roa (hash: +Gukm6enyIbdbaf1JuwEUsgqXGQfDTqeuMKRTtycATA=)
3: D6F76118231C11EF84144357C4F9AE02.roa (hash: es734osl5liZ5XtweVos6tWec0UeUjh4JQH+2AuNXUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1724 (0x6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C475/serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8
Validity
Not Before: Jan 31 18:39:56 2025 GMT
Not After : Feb 7 18:39:56 2025 GMT
Subject: CN=679d18fc-117c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:c2:12:d5:bb:4b:b3:30:36:ba:8f:1e:0c:
4f:74:02:03:0c:26:62:0f:84:e9:aa:11:c8:f6:ae:
24:69:fa:b4:f9:37:d6:b0:ec:be:16:49:32:fe:70:
4d:12:07:f9:19:96:79:4b:ce:99:c0:d7:37:db:55:
d1:e4:5d:18:b2:15:31:6e:66:d7:3e:74:21:a4:d6:
c0:32:6d:eb:06:e3:a4:30:07:94:97:08:b8:58:5a:
f9:9c:cb:34:3b:4e:70:19:fd:7e:21:12:2f:ee:5a:
49:f1:5c:e7:69:a7:15:a2:10:81:2c:2a:a3:c4:89:
1c:f4:44:8e:12:7a:99:44:e5:8a:0d:18:83:c6:f3:
78:a4:28:b5:f2:af:4e:9a:8b:56:b8:23:fc:86:e1:
93:16:0b:7d:1a:1c:2e:c0:d1:c4:1a:ed:c8:23:fa:
df:d3:e6:c4:73:9e:72:0b:1f:43:07:5e:1a:58:5d:
37:a8:2a:57:94:ac:ec:b7:87:57:ab:44:c1:cc:46:
06:b2:40:dd:6b:b2:b2:fd:c5:8b:c8:4a:12:92:fd:
65:a6:c5:09:e3:07:6b:55:43:50:4e:21:ca:19:81:
4c:2a:d2:d5:a8:b9:9e:c4:ea:81:ce:c1:ce:97:4c:
c1:3f:92:4e:c7:97:0f:bc:89:cd:03:02:57:0f:6c:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F1:4F:0B:86:C4:8F:F0:79:0C:33:00:98:24:5E:4A:4F:CE:FE:66
X509v3 Authority Key Identifier:
keyid:22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:22:2f:83:d2:52:ef:8f:48:3f:25:29:fe:16:6d:93:f8:d3:
e5:dd:ec:83:54:bd:af:17:c3:ab:ca:0a:53:37:df:e6:fc:43:
93:4c:15:c9:4c:b4:da:ce:a2:77:53:46:8f:46:b4:1f:77:8c:
24:5c:a5:00:b2:44:0c:7c:5b:bc:ee:7a:99:3d:c7:e6:11:5a:
0a:41:81:a6:95:09:61:d0:73:6f:7b:59:c4:9b:a8:59:4a:01:
e2:61:47:3f:f7:47:04:b4:59:9f:40:68:a1:d9:b6:53:f7:7a:
30:f4:e9:57:b1:6e:bd:3d:21:14:e2:ef:c4:6d:a2:69:76:1c:
9a:f9:0a:a9:c0:f2:97:8c:8f:af:a3:bb:c2:cc:12:bf:b2:47:
6c:74:50:d4:27:d4:04:11:29:5b:e3:ed:9a:5b:9c:f2:83:fc:
0f:fe:19:8e:73:87:f9:66:62:7e:5a:24:73:07:c2:f5:bf:98:
dc:bb:92:ae:3e:a6:91:0a:73:cc:8e:3a:dc:21:b0:d7:9e:ad:
ff:82:8c:ac:20:d5:1b:0f:7a:e5:1f:24:13:59:8c:43:0d:c8:
4b:03:4e:ed:61:57:2b:1d:40:d3:56:6d:dc:1b:f4:95:8d:44:
66:26:fc:d1:9c:40:23:f3:6e:ec:eb:98:c2:e0:8e:fe:13:8d:
3f:b7:90:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:16 2025 by rpki-client