Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
File: 4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json)
Hash identifier: 8TjidM1RrVj0Om3rHq97VX34Wg88c+U9eJB/THgV2Hc=
Subject key identifier: 4E:7C:8A:B1:D8:1F:66:DE:AC:49:F4:FC:49:11:6E:64:3E:D0:BB:4A
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial: 052A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
Manifest number: 0511
Signing time: Thu 30 Jan 2025 23:40:59 +0000
Manifest this update: Thu 30 Jan 2025 23:40:58 +0000
Manifest next update: Thu 06 Feb 2025 23:40:58 +0000
Files and hashes: 1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: wamFV+Zr8PEAIWifgMvTtSWIKcu6ughJVlmXl7ULk3M=)
2: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: u79Hnx6TKughx759y7oB0XTzh+SXCGts+3SmY7J4BHA=)
3: 04E8D402F01111ED9C345840C4F9AE02.roa (hash: CjdsXTUy+isb7EE/vMnKhUnuE4GByGKOizEWWpwP7V4=)
4: F650791EF01411ED9210D060C4F9AE02.roa (hash: uGEX/6sdmRDn3m6JrmG5MWev3SeBdI1njDXZ5dmhNaU=)
5: CB6ED7B2645011EE9EAE117BC4F9AE02.roa (hash: KhBxtsrwI7mwIGHdAYV+BbQ+uvV0n4p4eR3lvYMPW+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Validity
Not Before: Jan 30 23:40:58 2025 GMT
Not After : Feb 6 23:40:58 2025 GMT
Subject: CN=679c0e0a-06ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:c0:97:b4:a2:03:d3:2b:6b:1d:01:9f:1a:
21:c6:80:d1:11:15:3a:17:ce:63:58:2c:6d:fc:5e:
37:df:b1:93:ee:84:13:cb:52:5c:df:27:fc:2b:4d:
57:8a:52:8e:36:aa:ee:75:76:c9:4f:bb:c3:27:12:
24:e0:fe:b4:ab:bd:6b:80:c1:60:51:d3:8f:05:37:
6d:33:0f:f2:d6:2f:ea:b1:4a:69:f1:90:7f:fd:cb:
62:55:11:a9:29:f3:5a:64:eb:ad:d1:30:72:f8:8e:
0c:90:68:c6:a6:81:03:21:4d:b8:1f:8c:01:81:28:
e0:dc:4d:c4:88:f6:07:82:14:37:9d:61:ae:b7:2b:
cb:e8:17:aa:84:37:a8:c7:25:5c:30:2b:8e:6a:60:
46:14:c5:a1:24:cf:e0:0b:23:a4:85:18:48:a2:76:
52:06:2b:18:de:81:cc:c9:c8:86:b9:c5:4b:10:b8:
14:c1:3a:9e:e8:f7:f1:80:e1:3c:7e:85:2f:bf:95:
0b:bb:48:08:39:f0:ab:0b:d9:ed:33:94:f2:93:31:
f6:16:93:7d:de:06:23:ad:d7:a1:ca:ce:ac:bc:df:
66:e8:ab:58:3a:38:85:cd:76:99:20:da:7b:bd:51:
05:9b:de:d5:d8:ac:f1:23:9c:52:73:5b:34:a6:08:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7C:8A:B1:D8:1F:66:DE:AC:49:F4:FC:49:11:6E:64:3E:D0:BB:4A
X509v3 Authority Key Identifier:
keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:23:bf:59:44:ef:3e:c7:ab:de:59:59:ec:a8:20:a5:1d:5e:
4b:03:8f:55:68:8c:e6:69:a4:2c:b6:d3:47:49:64:1f:13:84:
36:c9:6c:d4:b4:b2:0a:66:ae:93:04:2d:b6:56:e7:f9:24:da:
21:55:7e:0a:f2:70:70:95:32:d6:63:46:68:ed:ba:59:a7:ca:
69:f1:c2:f3:09:79:aa:ea:21:63:60:ce:0b:5a:18:0a:02:e7:
75:81:56:ad:80:37:84:51:43:f4:2f:09:12:1f:a8:c6:5d:92:
62:53:2e:e0:17:96:a6:6d:2c:30:c3:53:44:6b:de:59:bb:ce:
f5:83:97:22:b1:84:63:11:cd:0f:68:54:86:56:03:27:1c:f6:
18:31:f2:9a:7f:b4:05:64:99:29:2a:23:8e:f3:ae:29:b5:28:
d2:d5:99:ac:bb:dc:1f:e4:5e:35:fb:05:26:46:92:3e:b7:3c:
41:07:1d:f4:4f:55:69:2e:ff:23:a7:70:25:0d:68:84:bf:ff:
b7:20:5c:28:69:90:2e:d2:18:be:15:4d:d0:12:0d:af:a6:96:
47:d7:b5:34:65:22:fb:99:9c:e2:d4:cc:6e:37:f4:2c:27:4c:
b2:3e:fb:c3:9a:b9:f5:fa:a9:79:af:d4:93:a5:43:19:5a:f8:
f4:67:e6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:36 2025 by rpki-client