Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json)
Hash identifier: tHKjRRz5we18oXuJTx2Ps28Xy2l6OV7LCkcG3wFN9GE=
Subject key identifier: E2:5D:1F:CD:60:DA:43:C7:77:BF:BA:18:AF:93:7B:A3:2A:54:E0:75
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 040E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
Manifest number: 0407
Signing time: Fri 31 Jan 2025 00:32:19 +0000
Manifest this update: Fri 31 Jan 2025 00:32:19 +0000
Manifest next update: Fri 07 Feb 2025 00:32:19 +0000
Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: +qfdgL+neUlCNvFY1B6cWs50paPccSUm6I6lLN6Nj8g=)
2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: 6uFvpip5xKUGRghNdeTpeBy3R93KivQ5uvgIzsfjzEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Jan 31 00:32:19 2025 GMT
Not After : Feb 7 00:32:19 2025 GMT
Subject: CN=679c1a13-1eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:5b:bd:83:e1:54:42:7d:86:80:78:76:2c:
72:8b:b5:4f:0b:2c:3f:10:1a:4e:5a:a8:d2:77:5e:
8d:27:24:4f:cb:ad:ad:33:c0:73:39:e9:79:72:ea:
21:b4:82:93:dd:3f:c1:13:77:4a:12:00:b4:9e:2f:
aa:bc:38:6a:22:d0:c5:a4:7f:a9:43:63:a8:ea:77:
cd:3a:b0:94:29:f4:6c:d4:8d:f1:4d:16:47:3f:52:
f3:3a:c7:6b:ba:f6:04:88:18:d6:21:e3:d8:53:9d:
7a:94:67:11:69:32:83:c7:84:ec:e7:36:fc:73:9e:
f2:39:a7:52:18:7c:98:45:48:35:ef:8d:6d:df:07:
4b:6f:08:da:e5:d4:8c:b0:a3:79:15:6f:b9:7c:4b:
d4:cc:56:b1:23:86:b8:5a:a6:1a:dd:3b:ec:68:52:
93:f5:22:bc:1b:d0:58:50:6d:23:04:2c:7c:8a:d7:
29:ae:f8:e6:7e:30:4a:c0:7e:8a:b9:57:e9:01:fa:
6b:3b:a8:86:3d:5d:f7:70:46:1c:46:1c:66:52:a9:
1c:0e:07:1b:35:22:11:c8:e6:03:11:00:93:22:40:
a4:a8:66:71:8a:a5:36:bf:66:e8:8d:e0:ed:2b:5c:
53:b3:4b:db:18:6e:68:4c:31:45:27:29:50:9f:00:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5D:1F:CD:60:DA:43:C7:77:BF:BA:18:AF:93:7B:A3:2A:54:E0:75
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:51:14:6e:68:44:43:5b:57:04:42:ff:da:87:bb:ea:a2:81:
f6:02:66:f2:d1:aa:35:84:41:67:25:ec:fa:01:9e:1f:ac:a6:
5b:55:40:50:8a:4b:20:6e:a9:1e:98:aa:af:db:87:66:ed:50:
c0:5e:84:ed:88:30:c8:d2:87:60:c4:2d:1a:59:0b:a4:d8:7f:
0d:ce:cf:31:28:c1:49:ff:f5:cf:b5:43:7d:3b:96:3f:b5:ea:
cd:d5:fa:19:16:c6:ec:82:9b:c9:32:21:31:0a:52:05:ce:99:
0a:e6:0b:9c:d4:8e:e7:89:f1:b9:00:13:8f:7c:96:25:d1:42:
10:6d:53:80:ff:7d:4e:6e:a4:d0:bf:63:5b:c2:d1:09:d0:45:
eb:78:08:4a:d9:38:cc:69:63:2b:0b:67:9f:d9:fe:bd:11:77:
91:93:45:39:c0:f5:64:1f:ce:c4:6c:8e:21:fc:9c:24:b7:62:
85:55:6f:f4:f2:f8:9b:ec:4d:66:57:89:5d:95:3a:e4:2d:00:
b8:a8:0e:01:a5:54:16:53:2d:0e:fa:41:89:79:30:25:1b:e7:
51:d4:1a:67:06:fa:94:35:7f:e4:4b:ec:43:9a:ed:f3:e0:50:
08:88:79:1a:74:3c:2e:c6:1a:a9:85:ff:7a:b7:4f:7a:78:d8:
1f:6f:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:31:08 2025 by rpki-client