Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json)
Hash identifier: 9wtkOYaTgpXECsBxkBmarWbdHq26sulxJvLVdWxnyqg=
Subject key identifier: 4F:37:D2:0A:00:80:CE:5D:B7:B7:8E:ED:4C:AA:BB:9B:EA:EB:8F:CF
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
Manifest number: C2
Signing time: Fri 31 Jan 2025 04:58:54 +0000
Manifest this update: Fri 31 Jan 2025 04:58:53 +0000
Manifest next update: Fri 07 Feb 2025 04:58:53 +0000
Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: DCSDkOKy3046UwoqbYHUAPPwzXl80TWjTpQI+MjkMcM=)
2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: Ehjuv5Uf0g7hk8vGihsJTixHlQEY1frs5IM1jFNhEQ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Validity
Not Before: Jan 31 04:58:53 2025 GMT
Not After : Feb 7 04:58:53 2025 GMT
Subject: CN=679c588e-703e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:2d:85:8b:65:4f:94:ca:90:57:79:22:09:
61:82:e0:59:f8:07:a6:96:a6:58:3f:1e:6f:d7:e1:
2d:db:21:68:4a:ad:00:af:d2:3d:e5:ef:dc:de:01:
07:32:48:ec:3f:bc:ab:e9:11:21:e9:d0:1b:39:fd:
70:20:80:e4:32:bd:92:5e:08:5d:b7:42:59:c3:f6:
d5:f8:e4:6d:2f:fa:b1:94:d6:44:9e:56:7c:70:a4:
e9:ef:35:e0:2b:c2:77:fa:15:06:dd:b5:5d:e6:02:
86:ef:86:cf:e3:4a:f2:78:26:2e:ee:02:35:49:ed:
d8:0c:94:df:af:52:42:1b:79:0b:c7:40:97:12:2f:
d3:aa:ce:d7:8d:aa:e2:66:c7:63:43:1e:a3:a1:50:
6d:fd:8f:ca:ed:51:aa:af:f1:f7:b8:5c:7a:bc:79:
19:c0:ca:b9:9c:39:cb:5d:bb:23:0c:c1:a3:27:a6:
56:a9:55:56:ef:3a:0b:3e:7b:6b:46:e7:44:4c:d0:
52:66:96:9a:1c:50:2d:2e:24:83:81:80:53:cd:bc:
35:b1:d5:f9:49:dd:7f:8f:4a:03:41:d3:bd:28:4e:
80:da:65:fb:05:80:f6:fa:b7:4f:3e:29:41:e6:39:
6b:20:27:04:e2:86:73:d1:f5:4b:8b:8d:56:e1:b7:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:D2:0A:00:80:CE:5D:B7:B7:8E:ED:4C:AA:BB:9B:EA:EB:8F:CF
X509v3 Authority Key Identifier:
keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:49:ad:32:1e:c4:59:74:42:e7:73:36:de:c7:c5:26:56:c0:
f0:1a:d3:ae:3b:f2:46:76:18:a0:58:f1:99:18:3c:b7:51:b2:
cf:2d:95:2c:aa:4f:9d:b0:a8:e4:48:d9:12:05:31:d8:41:52:
85:d3:a5:f3:b0:1e:40:70:44:d3:88:f7:ad:bd:54:0e:54:15:
b0:fa:80:72:a9:b8:aa:9a:5d:f8:c7:dd:37:9a:a7:30:5c:8a:
3d:94:00:ea:36:7a:69:5b:06:78:9c:e7:1d:34:1c:dc:59:bc:
5d:e7:14:22:b0:6c:0d:c0:10:e4:20:28:82:25:00:d4:e4:85:
75:85:be:e5:0c:99:a0:e5:76:f4:48:79:7d:b2:2b:0e:67:be:
d8:f7:58:03:bc:59:31:c8:d3:1a:2e:1a:0e:3e:11:03:4b:1b:
f4:e4:2d:6a:fc:d1:2d:e3:a2:49:a0:88:8d:ba:0a:83:fa:41:
ea:64:69:b0:bd:9d:b9:26:89:b0:66:30:d2:2e:60:e5:8b:fa:
be:18:d0:94:7d:03:25:7d:74:ad:1e:a1:4f:45:ae:54:c5:d6:
1e:95:c0:80:b2:04:47:a4:2f:45:5b:3b:d9:05:78:76:4f:60:
f4:64:16:d1:5a:b5:97:c2:ef:44:69:76:ff:85:bc:00:29:6e:
51:72:4e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:12:30 2025 by rpki-client