Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
File: IEZaOpwIN-e2iDBzNx26CSIvv0o.mft (raw, json)
Hash identifier: HmOqyEHqkss6OQFEHWVhe7SwrLGVi9mfwan84XpwqQs=
Subject key identifier: 99:9A:74:86:A4:F4:FF:D1:54:2A:03:BA:FD:C8:B9:49:00:29:5C:01
Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A
Certificate issuer: /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
Certificate serial: 0692
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
Manifest number: 068A
Signing time: Thu 30 Jan 2025 22:18:21 +0000
Manifest this update: Thu 30 Jan 2025 22:18:20 +0000
Manifest next update: Thu 06 Feb 2025 22:18:20 +0000
Files and hashes: 1: IEZaOpwIN-e2iDBzNx26CSIvv0o.crl (hash: p0Egk41UcVwBon+7CSoaNhuwaHCy3gd7A/c9/otqUsk=)
2: 9CC98174539711EEA9B2324DC4F9AE02.roa (hash: jIuIPn8j5ZccqDe120+/qUjhEXWCn1vWyx6axQilbV8=)
3: 45490AB25AD611EB946A2C37C4F9AE02.roa (hash: bm3yECqfcINDVceeUuebyksKLDGjoVN5Jq0eB4u8roc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1682 (0x692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
Validity
Not Before: Jan 30 22:18:20 2025 GMT
Not After : Feb 6 22:18:20 2025 GMT
Subject: CN=679bfaad-9434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:a7:e9:70:b6:1b:0e:ff:e1:2d:9e:8a:03:
83:68:ba:41:12:a5:69:ea:54:f0:9d:1e:5c:26:76:
aa:e6:40:9f:f2:4c:d6:0b:32:9f:5f:96:44:28:c9:
73:f7:c1:27:c7:0e:b6:1b:c5:ee:80:2c:d5:ad:e1:
fc:50:cc:7f:e6:93:d4:2f:90:8d:63:b0:73:bf:ef:
55:66:f3:30:56:a0:3a:2a:a6:b7:70:40:b5:32:dc:
1f:73:bb:54:cd:ab:42:5e:15:81:a3:0b:b8:5b:92:
2f:48:d0:22:d0:1e:da:b2:1c:09:d3:12:26:ba:34:
1b:e8:59:db:5e:36:6c:ec:7e:93:92:58:d6:12:49:
93:1b:1c:a1:13:fa:88:55:9e:1c:8a:b3:c0:9f:c8:
3f:da:54:b9:22:af:b1:1f:48:cf:35:9a:6f:d1:e7:
32:65:4b:0b:c2:51:d9:85:9f:61:1e:ca:ee:51:ee:
e7:e1:d4:31:a7:4f:93:56:d8:f9:e6:17:d1:fa:7e:
12:8f:c2:ad:d2:a9:fa:66:61:2a:6e:f8:88:80:14:
62:bb:1b:88:4d:cd:29:e8:07:b4:1e:1d:49:f5:4a:
da:11:2d:17:27:a4:28:87:f2:1d:92:7b:b0:88:93:
19:b9:2d:c4:74:0c:17:09:3a:1c:22:fc:37:13:c5:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9A:74:86:A4:F4:FF:D1:54:2A:03:BA:FD:C8:B9:49:00:29:5C:01
X509v3 Authority Key Identifier:
keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:35:11:de:4f:70:d2:f2:c7:b7:d0:27:b6:17:0e:9c:0b:b0:
c8:e8:e2:a6:07:93:f1:92:e4:14:f1:13:1b:61:c1:89:ce:9b:
72:e4:f3:90:8f:a3:b5:d2:86:e9:98:fa:f3:59:d4:bb:54:ad:
70:7c:f4:4d:6b:6d:ef:fb:a9:8b:23:18:72:6e:0d:a3:ea:e0:
c5:7a:21:e1:6e:f6:e4:44:09:a1:13:b0:d2:1a:43:3c:b9:ad:
1d:85:26:17:2b:6a:5b:1b:b4:97:0a:06:57:0b:d4:48:ab:d9:
1d:fe:61:68:54:2b:c7:ab:ca:a3:95:34:b5:f6:fb:b7:94:60:
de:2f:5d:71:6e:bd:bd:95:18:24:8e:99:8d:19:d5:87:1e:c9:
c9:f8:cd:6d:01:d4:5f:72:f2:dc:5d:6c:2c:41:ba:fb:cb:89:
19:72:d1:76:51:78:f1:ac:da:f3:6c:bb:02:c4:92:f7:97:a6:
98:1c:a8:bf:a1:73:3a:23:3e:11:59:4e:20:0c:27:33:67:08:
99:c4:d8:22:2b:17:87:f2:b5:13:92:a0:b4:2c:6a:d9:df:20:
82:d9:13:f4:1d:04:8c:30:f3:6d:6e:82:5d:e9:8d:87:d5:ec:
df:7e:1f:40:ab:5e:12:a7:5a:3c:3f:b0:4f:0a:55:3d:1c:ab:
5b:9d:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:18:05 2025 by rpki-client