Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json)
Hash identifier: K5+lOHNcv2nRXh+0uZsp3yg782PK8t62NFmJGqS+vz8=
Subject key identifier: 41:03:4E:62:89:25:20:CF:DB:87:F7:7B:E4:5F:58:93:C3:46:E2:36
Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
Certificate serial: 24EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
Manifest number: 24D6
Signing time: Fri 31 Jan 2025 15:47:01 +0000
Manifest this update: Fri 31 Jan 2025 15:47:00 +0000
Manifest next update: Fri 07 Feb 2025 15:47:00 +0000
Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: FD7hKPNn0k1fCJA8R0/mD6Ju7f6PpSKi13g8e3s57iA=)
2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: cn19kmgTI5pykmKU6ztYW1fuk/UgkkZVZQRR4mCHAg4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9450 (0x24ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
Validity
Not Before: Jan 31 15:47:00 2025 GMT
Not After : Feb 7 15:47:00 2025 GMT
Subject: CN=679cf074-e091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:c4:fa:a4:82:d6:f2:c0:8d:12:e6:8c:5f:
11:a5:e1:fa:f0:22:8e:42:48:63:55:19:8c:c1:49:
0a:4d:90:27:d4:bd:08:5e:06:1a:ac:69:03:a5:99:
bb:57:60:89:b4:c2:6f:63:51:84:af:09:2e:8c:3e:
c5:03:f3:f0:27:1e:33:7c:fc:73:d1:a3:93:45:3f:
ef:90:77:cc:f2:03:b3:cd:f5:17:ce:e5:13:71:fb:
ec:b7:52:c8:f5:26:64:60:70:6f:03:d4:d8:ab:3a:
f4:59:76:b0:da:65:6e:61:5f:05:b1:fc:82:80:58:
81:6f:7c:87:a4:35:9e:9d:19:e3:a9:36:a7:f9:56:
20:bc:8d:8d:5b:5a:99:9f:f9:a1:bb:6c:85:0b:09:
a0:4c:58:4a:ff:10:cd:27:bc:18:89:b1:72:b9:39:
17:fc:5c:2c:5b:7b:a6:ec:f6:b5:a8:9b:cc:96:2f:
a0:ba:40:72:78:42:13:a7:4a:14:f6:60:bf:ee:a6:
34:54:a3:d8:68:0a:ab:7a:46:89:21:08:18:0b:67:
f4:3a:a7:2e:ad:fa:8a:3b:1c:2d:d1:4f:e5:22:24:
1e:5c:c9:94:f7:61:88:11:71:c5:e8:f3:24:83:5c:
4d:0c:42:ca:d6:87:6a:0c:52:ff:2d:93:7c:e0:38:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:03:4E:62:89:25:20:CF:DB:87:F7:7B:E4:5F:58:93:C3:46:E2:36
X509v3 Authority Key Identifier:
keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:81:b6:7e:07:dc:74:dc:d3:de:84:f4:f8:e8:48:a8:2f:9f:
10:72:05:76:da:da:c0:07:14:6a:ed:3b:ea:34:f0:d4:dd:a9:
b9:46:1a:9c:e5:49:9a:83:f1:c3:56:90:dd:19:5c:12:56:c2:
5c:ad:9c:eb:88:39:f3:cf:fb:e7:d5:a5:9f:e7:62:b1:be:05:
e2:f1:44:cf:15:ff:c3:66:69:e9:28:41:90:fb:74:2e:28:8d:
42:3c:f5:f3:7e:44:f1:81:c7:e9:36:57:52:83:97:06:8b:3e:
ea:35:72:f8:ab:60:a8:67:a5:11:07:ef:e7:fe:c2:a9:fe:e8:
72:dd:d2:55:eb:28:1e:43:35:44:2b:5b:90:ce:1c:7f:09:00:
1a:5d:eb:bb:b5:41:0b:6f:53:9b:99:d8:37:8d:83:03:8e:9e:
ef:5b:0d:eb:db:6c:9a:83:25:ac:b3:b8:08:7f:9d:d8:c1:bb:
e1:41:ba:c8:54:67:dd:70:de:17:c6:2f:86:82:51:f2:0e:8f:
af:4a:45:a2:ff:07:5b:cb:23:6d:21:17:a1:7b:05:37:14:35:
f9:30:6e:94:b0:6c:01:10:99:b5:95:a0:13:a0:79:09:bf:fa:
2f:a4:3c:2c:cd:5f:f3:21:99:51:68:a8:6e:66:54:ab:f6:78:
05:76:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:48 2025 by rpki-client