Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier: ra02b+k2HpLsTE24hCcBBTM8bW1REOb8IwYDXaj72nk=
Subject key identifier: 86:BB:F0:DA:9D:C6:49:4D:24:B9:5F:83:FD:E6:A6:A4:F0:6A:45:C9
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number: F1
Signing time: Fri 31 Jan 2025 04:29:33 +0000
Manifest this update: Fri 31 Jan 2025 04:29:32 +0000
Manifest next update: Fri 07 Feb 2025 04:29:32 +0000
Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: gmOmQwWDc+SxgQD+wLMHeUyrb1xLzJ0NQ1LgQRWRoHo=)
2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: VkMCaNU7sXjTR/CQAkH/z8BpEQbO8jbw+1o8r2q8dPA=)
3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: cg93R23INGR8fe5V8I1v0XqkWQVYbzGg1oKwaVZnx2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Validity
Not Before: Jan 31 04:29:32 2025 GMT
Not After : Feb 7 04:29:32 2025 GMT
Subject: CN=679c51ac-832d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:cc:f4:83:0e:07:e0:31:f3:e2:f8:73:a2:
cf:c2:63:c8:41:7a:65:87:d5:b5:b0:ed:01:5d:31:
1a:11:ff:0d:c0:81:fd:95:f4:22:b6:d2:5a:0d:d5:
16:3d:0d:e1:00:c5:a1:98:df:5c:15:e0:5e:aa:d8:
38:2f:21:97:4b:2c:18:7f:e3:dd:c9:6b:a6:c5:c7:
d7:9c:ae:fc:89:3c:eb:65:3c:08:65:f3:b8:33:0f:
f1:2d:79:63:f3:e2:fc:c6:79:62:a4:a6:ae:bd:05:
8f:94:2a:5f:e9:b6:8e:54:07:df:2f:22:dd:0e:b7:
bf:68:e2:af:08:a9:34:ef:4e:a1:0a:cb:47:52:dd:
3d:6a:3c:2c:2e:87:10:57:ba:bb:31:7a:8a:2c:31:
d5:5e:0e:85:16:ce:b8:ee:d9:3f:f7:ee:e0:95:70:
60:c9:b3:0b:2b:f6:e1:12:6e:c8:22:0a:04:a7:0a:
dc:e0:ab:09:db:d8:9e:07:84:84:dd:f7:6e:99:87:
94:89:b1:f5:e9:b3:b2:5e:1a:83:6f:f4:e2:2f:ef:
39:fe:db:4b:52:31:dc:5f:ad:d6:3c:59:f1:e5:ec:
4e:d9:97:0f:2f:b8:4e:27:66:aa:f6:ac:c3:55:72:
11:d9:e7:2e:2a:b9:4e:a8:91:80:f6:91:bc:2c:85:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BB:F0:DA:9D:C6:49:4D:24:B9:5F:83:FD:E6:A6:A4:F0:6A:45:C9
X509v3 Authority Key Identifier:
keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c7:48:f3:30:8a:14:3f:e2:cc:d7:ff:f1:d8:11:fa:3c:98:
14:31:68:a4:70:3c:04:21:29:cb:cb:ce:39:eb:3f:0f:93:95:
a0:b3:f7:78:6e:dc:07:f2:4c:95:39:1c:ab:e9:81:fe:bb:27:
9b:d8:c2:a7:61:5a:31:70:f3:6f:fb:92:c8:51:9a:b0:0a:db:
47:d8:24:85:30:17:0a:1e:72:d9:70:ec:dd:33:b0:0e:76:ff:
90:d7:bb:4f:49:7d:53:5b:e3:c7:90:02:5c:08:52:3a:25:89:
d0:8c:16:0a:c5:1a:8b:8d:1e:61:f9:92:56:28:47:59:2d:47:
a3:4e:1f:c2:e2:11:25:c3:dc:2a:4d:61:c1:94:b0:dd:e2:52:
2e:9d:73:ca:04:29:cb:da:ba:6a:2a:9b:49:4d:de:16:ea:9d:
a6:0c:a5:db:58:a3:db:47:72:ae:92:55:59:7d:f7:7a:61:c6:
d1:31:ae:e0:de:ce:06:1f:f6:2c:57:74:43:2b:87:0d:3e:81:
de:88:69:af:ba:71:49:64:45:c0:7d:03:42:76:f2:a7:af:6c:
03:d8:7a:5a:9f:72:17:fb:60:a1:cb:19:85:8b:10:11:ea:02:
86:ec:96:4f:a3:15:f4:15:ad:4d:0c:c0:9d:7e:2a:83:36:5d:
90:5e:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:22:31 2025 by rpki-client