Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
File: jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json)
Hash identifier: zOMrO23Wb1QMlGpeWWyv23Dg7XcQ3nAMLPjerEqHcyg=
Subject key identifier: 1B:D4:56:5F:6D:A2:71:8F:64:74:F4:93:50:29:0A:8C:C0:4A:17:1E
Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
Certificate issuer: /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
Manifest number: BC
Signing time: Fri 31 Jan 2025 05:06:01 +0000
Manifest this update: Fri 31 Jan 2025 05:06:00 +0000
Manifest next update: Fri 07 Feb 2025 05:06:00 +0000
Files and hashes: 1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: f10F4TfUoxrsdB/ItVqLybtVIJ1W6CeWAAYetQd6EmM=)
2: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: nZip0umQgQfNUVSJn6scZoNl7nqXBFARNgNZLe4qOTs=)
3: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: orqQypE5bc7gvUO4QzKhBPPdldDDB/JBoIJgb5EjBz0=)
4: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: 6lk7JsGwO4/wcTnuVTo0XHToPhtmgaBJiaipZQHj0o0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07
Validity
Not Before: Jan 31 05:06:00 2025 GMT
Not After : Feb 7 05:06:00 2025 GMT
Subject: CN=679c5a38-c8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f9:08:01:8d:8a:6a:04:28:6b:83:dd:c3:bb:
8d:25:e8:d6:82:da:22:71:d0:65:f6:01:7b:4f:91:
5f:9a:73:04:be:b1:9c:e1:bc:99:d3:71:db:f9:df:
f5:b6:47:35:9d:bb:6d:3b:6d:5e:50:f0:ed:7f:87:
37:04:e9:1c:bd:68:1f:0e:be:d5:7a:6c:90:42:cc:
e8:32:36:03:ab:34:b3:42:52:48:ec:a9:bc:c5:38:
20:66:52:a6:16:47:e1:03:94:29:7b:eb:5f:ef:4e:
ee:51:08:77:03:79:84:47:ed:0e:e1:0a:52:43:86:
21:81:36:77:ed:82:17:21:2d:f9:12:f7:00:fc:aa:
8c:2a:d3:59:62:92:ae:f1:c1:64:4a:c1:01:24:1a:
28:a2:2a:73:ca:61:aa:03:6d:93:be:65:0e:cf:9e:
b1:93:7d:29:16:92:b1:ed:21:92:9c:7c:47:b9:c0:
ea:cf:b3:db:36:2b:75:03:61:69:29:a8:3d:a1:47:
e5:47:e7:95:11:b1:f2:9f:b4:3b:4a:d5:57:40:cd:
df:75:c8:8d:b6:3d:e5:b7:25:11:15:bc:12:99:02:
03:de:35:9e:5d:24:5e:f7:19:93:73:62:b9:f4:32:
c9:fb:6c:a6:40:cf:e6:5d:cf:f7:41:32:8a:82:40:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D4:56:5F:6D:A2:71:8F:64:74:F4:93:50:29:0A:8C:C0:4A:17:1E
X509v3 Authority Key Identifier:
keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6e:58:57:4c:3e:15:e7:fd:3e:69:f1:11:da:96:55:6c:2d:
95:49:6d:fb:45:a3:cf:f0:b9:e8:53:36:b9:d2:f0:99:96:91:
f4:5c:d9:31:bc:30:18:aa:3f:a2:de:33:61:ba:a2:20:fb:8e:
fa:72:ef:45:78:6b:f7:df:43:e4:ca:22:e6:44:8d:58:f0:5b:
2d:fc:47:ac:ca:87:1a:cd:b4:6b:3d:32:92:1e:e8:c7:29:3a:
f4:85:33:04:74:15:89:93:d1:e5:0e:93:62:dc:e3:50:44:53:
fe:05:d1:cf:af:7f:0d:15:dd:1a:d1:e3:4e:86:26:f2:81:7f:
1d:cb:c6:49:21:c2:21:ae:69:42:2b:71:36:03:fc:14:80:5d:
f3:a7:43:dd:3d:4a:ab:c7:e8:81:11:a0:1e:e0:72:3e:7a:1a:
df:13:33:6a:10:8e:91:e6:ef:8c:6e:a9:ad:f7:c6:0f:84:87:
cb:bc:2c:b2:cc:fa:b6:06:17:fa:1a:e7:84:ac:f8:c8:14:c7:
a9:b3:6e:23:8b:bf:b1:12:cf:ff:32:b6:66:56:88:8c:58:b0:
64:0f:d8:91:9b:0f:9d:4c:7d:a1:01:16:37:61:14:26:35:73:
b8:b2:87:44:9b:e5:54:1c:12:22:94:32:e0:1d:09:f8:cd:34:
f7:28:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:10 2025 by rpki-client