Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
File: ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json)
Hash identifier: +hD90bauZDdLDbqRK/ioSHqj6KI7RvjElFMAhrvVnzU=
Subject key identifier: C7:39:1C:5F:E3:01:27:05:CB:07:73:19:C5:2F:B7:AF:4B:B4:DB:FD
Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B
Certificate issuer: /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
Manifest number: 0128
Signing time: Fri 31 Jan 2025 03:48:45 +0000
Manifest this update: Fri 31 Jan 2025 03:48:45 +0000
Manifest next update: Fri 07 Feb 2025 03:48:45 +0000
Files and hashes: 1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: XLsN6brnVLWuCHAeQGwsnulLMKN4xvhidFjb4XMLv94=)
2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: tPpYtoObLW6IaU9Qrnag/tKS5hGwADSPolXixr4yblo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
Validity
Not Before: Jan 31 03:48:45 2025 GMT
Not After : Feb 7 03:48:45 2025 GMT
Subject: CN=679c481d-9b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:6a:f3:1d:98:6a:42:1b:c5:cd:4f:9c:66:
87:8e:00:f1:8d:a9:ba:e9:83:ed:1d:9e:af:29:68:
c9:34:17:c2:de:d5:03:ac:37:11:e6:54:3a:98:73:
f6:c1:74:19:90:25:c9:df:2a:25:9e:32:5b:4e:a3:
83:b7:4b:32:c3:17:07:27:3c:f5:8d:b6:45:18:63:
f7:40:c5:91:bf:80:f6:8c:1f:ed:76:cb:8a:b9:ef:
11:6c:7c:25:f5:c2:b1:84:ed:60:16:37:93:f8:7a:
15:48:fa:be:ad:c2:bf:14:83:af:f7:35:91:f3:b1:
71:ff:18:b0:a0:33:bd:48:7c:a6:8e:ff:be:8a:9c:
04:82:05:bc:d7:d1:42:5b:b4:4c:ef:2b:96:f9:6d:
51:8f:f8:a5:cd:c3:38:c9:40:1b:33:45:0b:56:1d:
57:38:80:6e:c1:ca:3c:6e:90:c2:4d:2f:29:cc:f2:
b4:31:62:af:0d:65:c6:1e:c6:14:d1:8e:c3:b0:8c:
9e:4b:42:38:aa:ec:a6:5f:bb:e7:7b:bc:46:4e:34:
94:66:4a:e1:5b:d3:a2:09:85:20:42:8d:6f:ba:9a:
05:43:7e:db:9a:2c:e5:4d:9c:c2:d5:3f:2b:d7:7a:
db:87:cc:ca:d1:f0:a3:d9:a8:70:46:d9:d9:58:4e:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:39:1C:5F:E3:01:27:05:CB:07:73:19:C5:2F:B7:AF:4B:B4:DB:FD
X509v3 Authority Key Identifier:
keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:18:73:dd:1d:ba:cd:f1:71:a6:8b:3a:db:b9:2b:6a:a1:ad:
29:6f:4f:b1:0d:53:26:9f:31:1e:5e:e9:54:b1:d5:54:ec:72:
f8:91:b1:ea:5d:a8:cf:2d:f2:88:1f:a1:d5:db:20:59:4a:bb:
b5:a6:f1:40:80:3f:70:f6:d8:ed:14:df:5e:c7:3a:e3:74:a3:
13:80:58:db:23:47:a4:56:e9:2d:b3:eb:a8:33:42:d7:7c:87:
74:27:17:c7:df:05:5b:df:fd:21:ac:5e:0c:00:08:3b:0e:3a:
b3:a1:e2:22:c9:4b:6b:2f:fb:cd:bc:40:a1:d0:dc:04:be:d8:
29:71:74:ff:c2:cd:8b:63:7d:bb:d2:ca:db:c3:27:ef:0d:9a:
90:23:8c:b3:e3:11:aa:6e:3e:d0:27:e7:fe:6f:04:53:5a:05:
c2:ea:ef:de:0e:79:b2:52:03:dd:6d:73:b2:4a:2c:f0:3c:35:
59:64:c2:04:19:6c:52:f8:ae:6b:53:1c:28:2c:c0:cf:01:f8:
af:96:02:7f:e3:d4:03:b8:12:98:f6:ac:5b:e4:72:f1:b9:89:
f6:cb:7e:25:09:75:e5:9e:d1:77:2d:a8:bf:2b:2d:11:48:a5:
20:4c:03:92:ba:a0:d7:a2:24:87:87:31:58:f4:4a:68:27:92:
fc:cb:13:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:21 2025 by rpki-client