Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
File: aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json)
Hash identifier: voBE9RH0ZiL6CEeHZT4uvIq+nDFHuu+4BN9UcnUVkiY=
Subject key identifier: 97:2C:E4:F6:A8:18:7D:79:22:18:83:7D:A5:18:EF:FA:65:5F:53:39
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial: 05D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
Manifest number: 06B5
Signing time: Thu 30 Jan 2025 23:13:09 +0000
Manifest this update: Thu 30 Jan 2025 23:13:08 +0000
Manifest next update: Thu 06 Feb 2025 23:13:08 +0000
Files and hashes: 1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: 6R4IiiWbiv7VlkodtVBwoEVtNpKfUW3FL7d5XPR1Pcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Validity
Not Before: Jan 30 23:13:08 2025 GMT
Not After : Feb 6 23:13:08 2025 GMT
Subject: CN=679c0785-8cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:e3:1e:ef:a2:17:b7:e0:b5:ff:9f:e6:7a:
98:39:6f:dc:69:5b:d9:e6:d8:88:d3:67:34:4e:cc:
fd:83:08:ee:a7:b1:80:ee:b3:73:f6:40:cd:f6:93:
06:61:7e:ae:34:72:01:49:2e:c6:c2:0b:e6:10:0e:
5a:e2:43:8c:95:50:4f:5f:3f:b1:51:cb:19:cf:53:
fb:aa:5d:46:e1:64:f8:bd:54:b0:99:c2:7d:ea:2a:
8c:fe:52:02:a1:3a:3a:06:07:5e:ac:9c:17:7a:d5:
aa:12:d3:80:28:16:b0:07:74:0c:e1:2c:47:44:e5:
cf:44:83:50:aa:c7:59:aa:23:1f:33:2a:53:3d:3b:
62:4e:99:c5:c1:23:35:b9:29:f3:a6:fa:36:ea:2f:
68:7c:62:7e:5a:a7:3f:93:83:32:f5:0e:2a:e0:1a:
2d:d3:5e:22:96:e7:f8:af:fe:87:b8:94:23:05:51:
43:83:52:cc:9a:fa:10:4e:96:fc:78:ca:34:e7:36:
7a:a2:46:69:6b:18:5f:ce:79:15:2c:16:94:79:c4:
fb:d4:41:03:a5:76:6a:c6:be:6a:15:89:db:e2:d8:
56:3f:66:b5:99:da:68:c9:f5:c5:80:54:69:99:40:
a2:e1:ac:29:12:0d:f2:36:a4:82:8a:1d:a1:0b:82:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:E4:F6:A8:18:7D:79:22:18:83:7D:A5:18:EF:FA:65:5F:53:39
X509v3 Authority Key Identifier:
keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:59:9f:c0:d9:e8:7a:ea:30:33:da:9e:1b:05:29:4f:c4:8c:
75:53:bc:83:94:e7:67:9d:04:ce:96:7b:ca:43:8a:6d:ff:c7:
a8:89:80:1c:87:2a:e5:1b:1b:d0:b1:79:e7:af:ad:11:22:e8:
ec:42:60:4f:25:c3:06:65:db:fc:6c:29:3d:64:39:da:05:91:
42:9a:ef:f3:7b:81:d3:e2:61:40:22:9c:0d:71:c6:27:e6:1e:
9e:2d:5d:8c:76:71:b2:c3:04:75:dd:6c:8a:eb:69:dc:39:b5:
93:8b:3a:2f:19:8e:7d:99:c6:2e:84:e8:9b:93:41:ed:8a:19:
2d:e7:07:04:e2:d0:9e:fb:65:10:8f:ab:03:a8:4f:cc:ee:f8:
09:17:a4:11:7d:50:98:ac:20:f3:41:21:87:cc:09:53:31:26:
c8:82:2f:72:de:4c:a6:8f:d6:3a:d7:94:08:ae:96:a7:f5:3b:
07:de:07:cc:2d:a1:b3:26:af:fd:02:67:2f:90:c1:08:27:21:
91:78:bb:4a:05:ef:f4:89:dc:ac:3b:6a:d0:38:e8:63:d2:ae:
44:5f:b9:5c:1b:f1:05:15:54:a5:30:d9:0f:52:21:b2:a1:7b:
6c:36:fd:c0:dc:68:44:54:b5:a7:db:d6:4a:3e:34:4e:5f:96:
2f:31:d8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:50:46 2025 by rpki-client