Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
File: Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json)
Hash identifier: TOCGyAZHIXSvtfJ9w5qKYNqJFG29orCiCqj4c+RyYf8=
Subject key identifier: F6:B9:ED:49:83:6B:DD:EB:84:DD:C3:AA:3B:80:8F:61:A6:C2:E4:03
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Certificate issuer: /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial: 04DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
Manifest number: 04D4
Signing time: Thu 30 Jan 2025 23:50:49 +0000
Manifest this update: Thu 30 Jan 2025 23:50:49 +0000
Manifest next update: Thu 06 Feb 2025 23:50:49 +0000
Files and hashes: 1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: Qw1H3srybL7sVfEWfDMGV0As4th11TcKTOP560XrQS4=)
2: C847114C07D411ECBF875117C4F9AE02.roa (hash: 8jiWS5tF75Q6xeG+tS7HXmjjPoQpozn1Cf2cagIPojY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1242 (0x4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Validity
Not Before: Jan 30 23:50:49 2025 GMT
Not After : Feb 6 23:50:49 2025 GMT
Subject: CN=679c1059-63fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:fd:1c:e7:c3:ed:a2:94:7a:7c:67:a9:7a:
33:61:d1:6a:a6:da:5f:a0:63:69:40:02:be:0b:4e:
8f:4e:ff:32:ed:32:0e:4a:de:6a:4f:d1:e5:9e:12:
e7:04:0d:7c:32:74:31:0e:aa:59:1f:1b:62:22:74:
a9:25:d1:02:22:b8:e5:5b:b5:8f:3d:98:fc:1c:c8:
33:20:41:73:2e:82:d6:0f:0c:a8:d2:fd:59:48:2d:
8d:a4:ae:7b:37:17:63:53:19:5a:e8:b3:77:9f:47:
b4:1e:8b:b5:dc:cf:95:30:ab:96:66:77:ed:a5:71:
b8:a2:95:23:be:17:a7:5c:a0:10:f2:2d:8f:13:58:
5d:83:46:42:4d:6b:64:75:eb:b6:ac:71:d0:af:4f:
9c:e7:21:18:10:fc:fb:74:81:4d:2a:5e:e5:13:34:
b0:57:78:ee:b8:a7:50:b5:5e:89:bc:3e:48:e4:0c:
8c:58:98:59:a5:9e:8e:92:63:36:cf:af:19:92:b8:
57:54:55:5a:29:9e:e2:7c:50:cd:f9:96:b5:5a:33:
44:29:f0:fb:61:5e:a3:d5:c1:7f:a7:4c:aa:97:b7:
65:33:84:1d:92:07:85:55:87:a8:58:f3:6b:45:c0:
c3:2e:c0:73:7e:88:88:7d:ed:9a:dd:c4:67:39:92:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B9:ED:49:83:6B:DD:EB:84:DD:C3:AA:3B:80:8F:61:A6:C2:E4:03
X509v3 Authority Key Identifier:
keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:12:73:45:cd:d9:b7:65:c0:d6:28:5f:d4:67:95:88:0d:ba:
f5:2c:73:41:fd:b7:5c:fc:4d:1d:43:b7:8c:8d:52:b9:ae:6b:
10:71:16:e4:1b:06:31:d4:3f:83:23:1f:ae:88:de:91:41:14:
cf:d8:c8:79:e5:c3:86:9b:74:40:cc:ac:a9:bb:c6:b4:b3:4b:
21:cd:d6:4c:d3:8a:8b:27:3a:ab:90:dd:8e:2e:38:35:04:90:
df:ae:03:4b:39:e7:3e:b4:af:a1:24:66:19:46:bb:57:55:f1:
17:bd:72:90:e0:dc:e4:f3:2e:48:c5:91:2c:de:ee:9f:29:ba:
4d:4f:2a:a2:87:73:26:63:d1:3d:ba:f8:bf:94:a9:61:94:90:
ba:91:c6:1e:60:bc:e9:42:ff:ca:c3:e1:92:b7:29:92:a6:81:
a8:09:f0:ad:05:52:e3:b1:13:a4:b7:10:e7:a0:f7:c9:75:a6:
b3:7b:f6:94:a3:47:65:08:22:75:e7:57:3d:d5:d9:ab:27:d4:
1e:3d:1d:26:b4:01:8b:90:2f:ef:96:ca:63:f4:01:97:1f:05:
e1:bc:bc:ca:e8:68:5c:2c:bf:0b:76:62:37:bd:df:80:89:80:
84:ed:04:ca:c5:25:a3:ee:29:fb:5a:bb:f5:e5:98:b8:d2:8d:
95:49:4a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:48 2025 by rpki-client