Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json)
Hash identifier: 9FzLaa51KD2+jJob8YJD5ihHziTfZ/GX+75Nqn0dlf4=
Subject key identifier: 3F:C6:EC:B8:06:7F:91:B8:E4:B1:2F:48:CA:E0:F6:33:A7:7E:7E:26
Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
Manifest number: 01A9
Signing time: Fri 31 Jan 2025 02:29:00 +0000
Manifest this update: Fri 31 Jan 2025 02:29:00 +0000
Manifest next update: Fri 07 Feb 2025 02:29:00 +0000
Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: P1l98L+ZODcevcdD3HJtwJt0rvv7ySFOdlS3kE4g4xA=)
2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: RxZVoTNoSPk+sPPkKG/4HF99n9loOp00db2bHVAlJ14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Validity
Not Before: Jan 31 02:29:00 2025 GMT
Not After : Feb 7 02:29:00 2025 GMT
Subject: CN=679c356c-427d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:54:59:f4:bc:83:11:d4:3f:0b:e0:4a:2d:
4b:6f:e7:d7:a1:15:54:70:6f:ad:01:34:c3:7e:86:
2c:59:07:7b:dd:81:91:5b:b9:9d:32:60:e1:52:cb:
91:80:f2:a8:86:cf:35:76:32:09:f5:81:a3:6f:d0:
eb:8c:cf:02:26:d3:22:e8:f8:be:67:95:02:e8:ab:
29:6d:87:8d:51:49:19:9b:70:7a:56:46:b0:ef:60:
a7:02:f8:6b:c9:47:df:5c:a4:4a:03:b8:47:ae:cc:
45:fd:21:7a:01:09:71:c3:d9:0d:14:72:4d:4a:48:
e1:e5:a6:f1:15:2f:1b:2c:54:90:12:d4:43:a2:b4:
2c:6e:dd:d3:8b:79:20:e8:1d:cd:37:e0:21:9b:99:
6b:7e:14:1c:29:18:d2:2b:53:7b:a7:37:06:ba:91:
7f:ed:b4:17:1a:2c:b3:60:78:87:3d:35:4d:e7:65:
08:68:0c:38:22:fa:34:fc:38:6a:fa:db:99:00:16:
1c:e1:cf:5a:0d:2a:45:cd:ce:55:7e:d9:ce:52:72:
bd:1e:0f:f5:32:36:1f:74:18:b7:85:60:e0:bf:ac:
8c:91:e3:e2:68:0d:0b:e5:84:44:1c:72:56:59:8e:
dd:c9:a2:e7:b6:01:40:3d:70:0d:0d:ec:2a:4a:23:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C6:EC:B8:06:7F:91:B8:E4:B1:2F:48:CA:E0:F6:33:A7:7E:7E:26
X509v3 Authority Key Identifier:
keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e7:fb:8f:7a:ca:08:99:35:83:4f:38:2d:45:02:6a:e4:87:
4e:c9:a6:b3:5e:85:25:74:a1:59:45:5c:a2:8d:9b:29:e3:87:
6c:fb:39:c7:da:2c:c1:1c:88:33:ff:3f:e4:a8:c7:5e:6e:1c:
13:67:af:3e:7c:52:bf:54:84:4d:bb:55:f3:6a:81:02:af:42:
84:34:a1:53:1a:55:d0:da:af:fb:52:f1:43:b5:22:bd:d9:80:
a8:f5:f5:42:79:8e:98:36:5f:b0:2c:24:8b:73:73:2f:06:aa:
10:3a:a1:18:78:03:e0:9b:2b:00:3c:d2:cc:42:01:a0:3e:fc:
43:e2:3d:37:f5:5c:5a:d8:62:55:1f:d6:c6:d8:ec:76:18:f7:
db:14:5f:1d:5d:20:2c:c8:aa:87:65:ad:b7:dc:6f:fc:47:95:
62:9a:cc:a9:1c:16:62:1d:36:02:3b:e6:b6:cf:9f:8d:ad:3b:
7f:6c:05:68:9f:4e:d9:7d:ab:ce:50:7f:b4:8e:4f:b7:f1:c9:
5e:cf:07:ba:d8:d9:d7:5b:af:cf:8b:06:7e:14:10:5f:ec:86:
b2:86:c8:99:21:c3:63:2d:18:ab:13:41:f2:0f:98:cd:ad:70:
d1:8a:67:ca:3c:e9:4d:4c:58:e1:b9:1c:4a:0b:9f:a7:8c:27:
c9:e1:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:34:50 2025 by rpki-client