Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json)
Hash identifier: 79qzxpSiqpR5MJqav/N4M2MlXNgNeEeVD51Gpj1tJXE=
Subject key identifier: AF:0C:C6:2A:FB:81:58:AF:FB:EC:F4:2C:BD:AB:3E:7A:69:8F:9D:DE
Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
Manifest number: 11
Signing time: Fri 31 Jan 2025 07:06:38 +0000
Manifest this update: Fri 31 Jan 2025 07:06:38 +0000
Manifest next update: Fri 07 Feb 2025 07:06:38 +0000
Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: BsEivCghuLfkUGTyXiOH6Y58HMvjeIK3TNjI42N3+ts=)
2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179
Validity
Not Before: Jan 31 07:06:38 2025 GMT
Not After : Feb 7 07:06:38 2025 GMT
Subject: CN=679c767e-243d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:8b:2e:06:62:c3:d9:f0:23:2d:42:59:62:
e6:18:33:ec:2b:f6:02:5d:c5:24:e0:a7:12:90:9e:
8e:e7:67:be:5a:f5:45:d7:06:d7:6b:44:73:39:80:
09:e2:ba:ed:b2:fd:c2:ca:1f:06:1b:77:2d:29:86:
06:e0:06:7b:c4:a9:e3:eb:c3:9b:71:2a:80:b1:ec:
0e:ef:38:c4:ff:b4:15:0c:65:11:fa:5f:d7:b4:b2:
a6:cb:c2:9b:29:34:a1:5f:b0:1c:3a:c4:1f:18:f5:
de:55:5a:8b:39:da:dc:04:df:c7:cd:9e:c0:d3:e1:
1e:84:94:de:d0:c7:ba:58:70:10:ab:48:48:0e:01:
40:b8:d9:66:37:e8:3f:7d:46:dc:c8:04:29:13:94:
95:b5:f9:09:46:98:38:29:8d:d3:bf:0c:c8:84:c3:
61:8c:2c:96:e3:d4:8a:a3:6e:26:53:81:bd:e7:f1:
d3:27:cd:4c:ff:0e:b0:2d:d1:cc:92:ce:85:3b:ce:
b8:0f:bc:e8:2f:db:25:24:03:b0:ca:25:10:4d:ac:
d7:75:a2:a5:5a:67:f2:59:c5:b0:5a:bb:7b:dc:a1:
19:d1:dc:08:3e:02:f9:f1:f5:13:2f:f6:e8:6c:0c:
0a:be:e9:59:7c:b4:e0:32:b4:c5:84:a3:66:20:22:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0C:C6:2A:FB:81:58:AF:FB:EC:F4:2C:BD:AB:3E:7A:69:8F:9D:DE
X509v3 Authority Key Identifier:
keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:60:db:49:37:92:d3:d9:a6:60:1f:db:89:26:96:56:8c:ab:
24:f7:eb:f0:43:f7:57:0e:2f:47:79:c6:f4:8d:3e:11:6e:ea:
ee:7e:57:94:fa:45:c4:7f:60:0d:41:72:7e:04:19:7f:f3:a6:
31:13:1e:c6:3f:ec:52:25:e6:f4:cd:ae:07:c4:1e:2b:ad:da:
09:b3:d5:c1:75:96:e5:10:78:f1:10:ca:da:39:b9:86:c5:6f:
b5:5e:23:4b:d2:51:52:eb:8f:3d:39:64:a2:16:9a:c8:b5:1f:
87:ea:25:5a:c5:52:9a:dd:4b:33:02:01:22:7f:5e:aa:54:82:
37:6e:67:54:c4:28:51:45:18:69:6f:dd:a9:a5:8c:53:62:a8:
1f:dd:f7:6b:4c:93:b9:9c:e1:96:af:2d:df:02:69:0e:6e:c8:
48:65:d6:9f:c8:c5:65:93:06:59:c6:54:7b:9c:e3:54:42:e2:
d8:53:09:d9:74:07:2a:99:b3:d3:69:ab:10:03:b1:e0:8b:42:
c8:f1:47:d4:22:6e:44:38:25:42:3e:da:9c:9d:d2:49:7d:30:
a3:4a:ca:09:aa:68:90:f6:7b:1f:00:7e:1c:a6:e4:89:dd:42:
31:35:35:be:56:5c:b3:a9:ac:73:74:98:b4:61:dc:8c:76:ee:
fe:6f:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:04:52 2025 by rpki-client