Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json)
Hash identifier: 7wzLwNcH6GRYkYJQbRxruUvwtSW7kJF5b2gmth3HG4Y=
Subject key identifier: A3:8C:9C:DC:85:87:E2:F4:BB:3B:43:F5:9B:E2:E8:60:C9:95:C8:9D
Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
Manifest number: 1E
Signing time: Fri 31 Jan 2025 06:59:07 +0000
Manifest this update: Fri 31 Jan 2025 06:59:06 +0000
Manifest next update: Fri 07 Feb 2025 06:59:06 +0000
Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: BFapFqiYfkEVOnGjHZSWVf7TpfFQRbDCnMQsowZ3OBA=)
2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: XoqSoHkPs1ffdTh6W19ne37H+1CKa62i2t43qmhHxIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Validity
Not Before: Jan 31 06:59:06 2025 GMT
Not After : Feb 7 06:59:06 2025 GMT
Subject: CN=679c74ba-e385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:4c:c1:c7:11:3c:7c:7b:bc:4e:de:95:88:
dd:f3:e0:5c:9a:69:99:2a:d2:70:66:1b:7b:1d:48:
ff:f6:cd:bc:38:8a:09:37:2a:c7:e4:d0:98:6f:ea:
59:ef:70:2a:c1:ca:f2:4f:c3:40:29:56:f8:25:ec:
75:2e:65:7e:e9:86:ae:91:8d:74:e6:ed:ce:23:ea:
16:c7:97:ff:6c:9e:b6:cf:15:c0:5f:78:64:0c:4c:
1d:86:c7:9a:bf:9a:6a:fd:77:58:8e:b1:32:ca:c3:
e4:68:99:60:cb:e0:aa:1b:f9:36:0d:08:66:b9:f7:
a7:dc:5f:a2:bb:7a:30:49:18:5d:f8:46:d3:f3:08:
59:70:b7:76:4f:3c:e0:29:6f:0a:ef:c0:db:b5:c0:
21:f8:9c:e4:f4:f8:8b:d4:14:6d:0b:3b:5d:ca:97:
a0:bb:f8:bf:41:f1:d4:91:7d:53:86:21:6d:c2:9d:
53:eb:21:98:1d:df:d7:0a:56:1a:ef:ec:ff:ec:b6:
34:12:69:5b:a2:a5:c1:e5:43:05:04:d2:b8:04:73:
eb:5a:69:27:9e:b5:4f:b1:d4:49:2a:3f:03:5c:a9:
a7:51:f7:00:1b:c4:df:63:27:0f:3c:10:e4:bb:2d:
ad:75:42:1e:0f:19:d8:18:51:be:94:21:f7:30:91:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8C:9C:DC:85:87:E2:F4:BB:3B:43:F5:9B:E2:E8:60:C9:95:C8:9D
X509v3 Authority Key Identifier:
keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:f3:ce:2e:19:96:95:56:a4:c6:b4:bf:dc:6d:99:7d:10:bb:
27:42:3b:c3:ee:b0:9d:5e:72:c2:a1:b2:c2:3d:c9:1a:6f:49:
88:64:62:4a:ef:e3:c5:69:f5:8d:62:d2:6b:df:51:ca:52:af:
67:24:d7:0f:b0:e9:b7:e2:28:f5:c3:15:c9:e6:66:40:0e:78:
bf:c1:14:b1:cf:28:40:48:9b:50:1b:a5:64:68:4b:d3:ff:e5:
9d:23:6a:e4:68:ad:72:0e:5b:5f:c9:d3:75:6e:3d:f2:c6:3f:
e9:11:ee:57:5a:c4:37:14:e3:ca:ae:d7:0c:06:e5:f9:3f:8a:
4d:c2:6a:8f:ff:e5:f1:1a:e4:8b:3c:4e:58:5e:77:5c:07:7a:
79:ec:35:f0:5d:26:d1:2a:43:be:03:ad:8b:da:17:4c:9f:e2:
cf:e9:61:1d:eb:96:9a:79:fc:8f:88:56:e4:2a:33:a5:8c:97:
53:51:8d:ff:e4:3a:56:9b:41:c7:f6:fb:c9:6b:cc:e8:26:e6:
ff:6a:47:a5:02:38:6e:7f:4f:fc:3e:7b:be:7a:93:a1:bc:a7:
44:4a:98:39:61:0b:f0:68:69:60:79:58:00:48:48:76:e1:08:
b9:5f:a7:6a:07:a3:ed:dc:3a:b4:19:1e:d8:b0:36:25:0f:af:
3e:38:7a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:11 2025 by rpki-client