Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
File: XZRtT0edN7zhcAywut1RosPfYg8.mft (raw, json)
Hash identifier: hKdIBA+3ucuF3GCaysIAC1k37AFVR2kXvjrr2PQEhnU=
Subject key identifier: EB:86:99:85:20:23:BB:F3:1C:B9:4C:18:1E:AF:39:91:BD:AE:17:B4
Authority key identifier: 5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F
Certificate issuer: /CN=A9152787/serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
Manifest number: 36
Signing time: Fri 31 Jan 2025 06:38:36 +0000
Manifest this update: Fri 31 Jan 2025 06:38:36 +0000
Manifest next update: Fri 07 Feb 2025 06:38:36 +0000
Files and hashes: 1: XZRtT0edN7zhcAywut1RosPfYg8.crl (hash: Oq2maahV5rQMG23VOipovmUBBEe2DEVPLFwXe9T4pFc=)
2: B45D344C8F7911EF90F6941FC4F9AE02.roa (hash: IwG41/v32DGnAzEUwm2fWrp5jpFSCenIV1xWWix510E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152787/serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F
Validity
Not Before: Jan 31 06:38:36 2025 GMT
Not After : Feb 7 06:38:36 2025 GMT
Subject: CN=679c6fec-65f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:88:a3:a5:d6:93:51:0e:94:6f:60:9e:14:
e3:60:13:f1:bf:fd:ce:48:2e:e5:5a:53:da:9a:b1:
4a:2c:d9:06:4e:9d:1d:05:93:c4:c4:1d:3c:b3:25:
ac:42:3e:fe:55:8b:4f:78:3e:b4:82:1d:1f:09:34:
2b:76:37:ea:f8:1d:8f:cd:7d:c9:22:2d:f5:40:ba:
ea:75:77:f6:5d:aa:80:62:8e:8a:92:ef:ac:23:da:
1b:26:02:0c:c4:c4:57:85:e6:03:f5:f9:03:21:49:
59:d2:17:9a:fc:94:c3:2d:cd:6d:b3:a6:e6:80:70:
5d:e0:4c:d7:bb:de:94:35:b7:f7:33:d4:b9:bc:c9:
7e:78:de:41:1e:99:4b:6b:2a:cc:34:ba:46:ae:25:
35:95:05:bb:ed:0b:e2:b4:99:a9:ac:d9:f7:7a:5d:
a1:d5:65:2e:92:81:e6:a6:bc:5a:81:84:12:29:28:
a5:3d:c2:0c:7b:cd:ad:53:b3:64:d1:dc:4c:6e:54:
d6:2f:40:13:84:4d:92:38:3f:59:2b:d7:0e:5f:3d:
89:67:3f:b2:a8:c4:2c:8b:08:f0:79:ee:4c:e0:53:
53:80:cf:4f:a0:e4:5d:db:61:90:54:d7:0a:f8:e7:
f8:79:88:03:57:1b:98:b2:74:bc:a3:70:ac:66:93:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:86:99:85:20:23:BB:F3:1C:B9:4C:18:1E:AF:39:91:BD:AE:17:B4
X509v3 Authority Key Identifier:
keyid:5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c5:1c:54:6c:9f:6d:fe:5f:b3:7b:2c:b7:20:ea:70:13:b1:
bc:f3:68:9a:44:cf:bf:88:5c:eb:ca:2c:8a:3a:b9:2c:48:21:
ad:03:b9:d8:3f:4b:65:46:0f:87:79:80:94:2d:b8:87:bf:7d:
14:84:ab:aa:ac:58:9e:c4:f3:75:a7:79:07:7e:19:f7:0e:b8:
31:fe:77:be:d5:4a:a7:4f:c9:6d:0c:6b:3a:4f:49:5e:93:73:
d9:4e:9e:25:13:c8:cf:20:b3:e6:32:0a:f1:ab:24:dc:62:e6:
76:7d:85:91:0c:49:7c:03:9d:46:65:d4:fe:21:e1:5c:fc:0b:
29:5e:da:fb:af:6e:5f:b1:1e:e3:3e:de:ae:04:1e:a6:20:99:
6f:8e:29:2e:f4:8f:e4:6c:c4:93:b7:71:67:66:e9:c8:ba:49:
f3:23:4d:03:8c:a6:68:7f:7b:06:1b:9b:bd:a7:bd:3c:57:1f:
53:7e:05:4f:7d:1f:e3:a1:6c:e3:82:9d:f1:0c:1b:5d:88:e3:
54:70:18:c8:d9:af:46:a3:ef:05:d7:6e:4a:98:59:1f:e0:e4:
a1:14:ac:8a:01:60:2a:45:1f:c3:8f:f5:59:18:68:fd:1e:83:
cf:00:69:d6:d7:f3:8d:b7:1b:94:c3:7d:02:75:fa:ba:e7:bd:
1d:f4:75:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:37 2025 by rpki-client