Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json)
Hash identifier: HdCQbWrYS16xUg+iXPLhFBKB+E1KlcaDx+FHHZxBnns=
Subject key identifier: 5A:E1:D4:59:7C:4F:31:86:BC:B3:68:A0:F8:F9:CB:E5:B1:59:F5:F6
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial: 22DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
Manifest number: 22AE
Signing time: Fri 31 Jan 2025 15:52:22 +0000
Manifest this update: Fri 31 Jan 2025 15:52:21 +0000
Manifest next update: Fri 07 Feb 2025 15:52:21 +0000
Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: sYei5+L/Ku/TaSDFOVHLtBHqDbpO9higlEwupT83Zgc=)
2: 3CB9EF84BF9511EEAD184E59C4F9AE02.roa (hash: 0Iqemx1dc1/OwZ9PA1idZX5JXjFRFlbjjAbSGtap79o=)
3: 1A519CD615DD11EBAA7C4D52C4F9AE02.roa (hash: FR8FX9EXrL2jVochwcD/Id1QKP91UMmw+2eIcY6MZog=)
4: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o=)
5: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: aAotkUpTu/+JybhkWBN3FLBD+6K9gZJwPXhnau7EH7M=)
6: 00052DCEAE3711EFB185B967C4F9AE02.roa (hash: q8Spkhu9fvOAGb5eUvVLQDhlBbkwWXrFXsvDuolhAUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8926 (0x22de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Validity
Not Before: Jan 31 15:52:21 2025 GMT
Not After : Feb 7 15:52:21 2025 GMT
Subject: CN=679cf1b6-7a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:cd:33:39:85:ca:72:2e:05:75:78:48:e1:
a9:7f:a5:50:90:26:09:6a:fa:7c:c6:57:c5:85:4f:
98:73:af:fe:4b:be:81:eb:15:1b:c6:70:b0:a4:88:
92:96:e0:49:6a:78:fa:1f:f5:60:bb:7c:5a:79:68:
3a:7a:88:e9:30:9a:00:9e:fe:5a:a5:9a:2c:d1:c4:
1c:ee:7b:a3:ea:a1:11:7b:c4:b6:92:61:8a:0f:00:
a8:fc:fe:12:aa:05:df:62:9c:57:36:45:c2:7f:32:
6f:e0:f3:0d:35:26:78:2c:9b:6f:a2:05:9e:81:b7:
19:f8:da:0b:b9:2c:23:4d:7a:e9:08:e7:16:87:ba:
e1:09:d8:0d:f2:00:ca:0a:57:ce:23:e6:02:4a:3a:
04:0f:0c:53:0b:cc:cf:0f:ff:e4:55:2a:a6:4a:49:
73:1b:27:15:28:03:9f:e2:91:d7:14:15:83:4e:65:
3f:50:ff:12:66:fe:01:3b:3e:16:ee:2e:fa:09:a1:
62:29:31:ef:02:81:02:37:dc:bc:61:0d:a5:15:6d:
bf:59:ad:df:e5:ec:27:99:59:9d:03:ac:b4:8c:72:
d1:0d:80:13:49:31:8a:e5:e3:7f:ea:5c:4e:bb:53:
1b:fd:c1:2e:47:f7:48:75:61:d5:65:28:c8:c5:5a:
f1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E1:D4:59:7C:4F:31:86:BC:B3:68:A0:F8:F9:CB:E5:B1:59:F5:F6
X509v3 Authority Key Identifier:
keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:be:cf:4c:c6:19:b5:f4:7c:2d:bb:64:43:11:95:21:04:04:
dc:81:7c:4b:f0:27:f3:8e:6c:31:80:94:57:ff:cc:dd:e8:ec:
38:87:b2:22:2e:37:dc:b8:be:0d:62:61:74:7b:a4:9b:03:5c:
87:f8:f2:b9:5d:62:e8:e8:d4:e3:31:95:60:34:32:5a:0a:4f:
6a:e0:5d:34:1b:ae:3a:b6:07:94:81:e0:8a:cc:e7:77:c3:2f:
47:27:12:5c:c7:90:aa:6a:b5:c7:40:87:f3:61:e4:d7:a4:20:
43:d4:aa:ec:fc:c5:18:19:21:f1:70:3b:92:c4:23:9d:68:27:
cf:67:86:2f:26:59:cd:f2:06:9e:08:8e:aa:86:1b:86:92:68:
28:8f:4f:b8:6f:12:57:80:41:7a:8f:8b:b2:35:c8:f7:bf:1a:
e1:a9:1e:47:72:1d:ae:ea:c5:24:82:37:c5:2f:7f:99:06:08:
85:73:b1:94:49:ae:98:17:49:91:b0:d1:d1:ea:2f:2a:a9:28:
9a:cb:db:b2:76:52:93:81:8e:10:63:13:5d:ac:36:b3:83:58:
6d:c1:70:38:3a:30:4b:4d:98:f1:17:35:4e:ff:71:ac:b8:c9:
b9:26:8d:00:0f:62:69:62:62:0b:bd:a5:c0:79:68:57:bd:a7:
f1:ea:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:46 2025 by rpki-client