Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
File: arqG0wSq9k60oJeym6VXeGDMhW8.mft (raw, json)
Hash identifier: V/lMZGt8Q5CehKd0HkAGQXw3WN2fkTjz8woIb8kFVqc=
Subject key identifier: B5:AC:A8:1B:7B:B5:9C:98:C0:F5:9E:1D:51:16:9D:7B:D4:A1:ED:83
Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
Manifest number: B9
Signing time: Fri 31 Jan 2025 05:10:00 +0000
Manifest this update: Fri 31 Jan 2025 05:09:59 +0000
Manifest next update: Fri 07 Feb 2025 05:09:59 +0000
Files and hashes: 1: arqG0wSq9k60oJeym6VXeGDMhW8.crl (hash: HY0ux6uaJEpHcyxPHCABatuyqb8AaYT2HlAamJOzM3I=)
2: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (hash: +1q/DCNFePTtlbMuRD5iV784JkZFCUJE5p4dFu9JRz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Validity
Not Before: Jan 31 05:09:59 2025 GMT
Not After : Feb 7 05:09:59 2025 GMT
Subject: CN=679c5b27-41e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:41:f1:3b:03:c2:e3:98:a6:fd:18:13:41:
cf:e3:c3:22:4e:6f:b6:de:7b:31:5a:2e:50:0d:eb:
29:44:e2:91:bd:6f:fd:ba:0c:26:f3:81:66:fc:d6:
c9:f6:29:a7:79:b6:09:e4:f3:e0:32:88:32:ae:f6:
32:75:26:54:53:f1:f6:e2:2a:b4:5f:39:56:53:1c:
ff:73:42:25:68:a1:ef:d3:8a:dd:41:51:f6:8c:4c:
6f:cc:9a:78:92:d5:4a:00:7d:9b:6a:6f:67:a6:da:
60:68:89:fc:06:ae:ed:ef:eb:29:76:a1:07:e4:45:
03:8d:79:8e:20:b8:35:9c:d8:df:a5:40:52:9d:ba:
e8:5f:10:73:95:10:77:17:29:3f:e2:76:c8:85:45:
7c:7a:57:6e:0e:a2:9d:60:d4:04:c9:18:a1:e3:99:
f5:ff:ba:4b:83:6e:61:f1:d4:3d:87:7d:2a:a5:97:
32:1d:86:44:0d:ff:e4:53:9d:ac:91:99:c9:bd:a9:
b6:a0:d9:f4:e6:a7:62:27:36:e3:55:b8:8e:cc:b4:
b7:0d:35:cb:06:0f:d2:df:19:a8:f5:06:a9:be:ac:
6b:44:01:67:1f:77:c8:91:ff:5c:c0:ad:ab:40:06:
67:98:ef:ce:ab:16:16:93:7f:a8:d6:bf:04:aa:2d:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AC:A8:1B:7B:B5:9C:98:C0:F5:9E:1D:51:16:9D:7B:D4:A1:ED:83
X509v3 Authority Key Identifier:
keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:09:84:39:44:a7:10:6d:c8:14:5e:33:48:3e:31:3c:42:29:
03:60:76:73:84:eb:a6:3a:f8:27:fe:af:ad:3b:e1:6a:b1:64:
22:d6:c6:3b:65:ed:34:a1:5c:5b:f8:f4:d7:f9:e9:2f:d6:cc:
9a:03:53:e9:f6:57:b3:2c:34:4a:d4:37:fd:be:6c:e8:f6:16:
32:91:c2:16:b4:52:19:e1:a7:fd:ad:f6:c3:1f:96:b2:aa:f3:
0d:42:b1:a6:90:d8:e3:06:ab:b1:4e:64:76:4d:98:ad:f3:22:
ec:36:72:fc:ca:a4:03:63:5c:3b:5e:c7:23:9c:89:a5:9d:63:
24:68:f0:14:da:d8:f9:77:2a:a9:be:53:06:15:f9:66:28:7e:
ba:7c:85:76:5c:90:40:86:6d:d2:78:4f:0d:55:d5:6c:b3:8f:
ca:6f:ee:f3:13:4b:72:03:9c:99:55:46:bb:86:fd:ab:9f:53:
47:0b:e0:bd:eb:e2:4d:4a:40:b5:85:f5:be:4b:94:04:f7:c3:
45:03:14:4f:ac:ac:ea:55:be:98:93:1d:f1:40:50:77:42:2a:
ac:cb:c5:69:36:7b:d9:16:16:f8:82:0f:56:db:5b:75:52:41:
cb:1b:8a:50:80:ff:a6:04:4a:e0:0d:79:cc:06:de:ed:09:7b:
33:4d:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:59 2025 by rpki-client