Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File: D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier: Re+wBUrr6bUd8pU/FEb64pll3ElL/x5Awsd1+XCNt+g=
Subject key identifier: A0:C7:18:E7:E7:DE:87:68:1D:CF:5B:F4:2D:08:37:94:EB:30:CB:5F
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer: /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial: 0BED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number: 0BD6
Signing time: Fri 31 Jan 2025 18:43:17 +0000
Manifest this update: Fri 31 Jan 2025 18:43:17 +0000
Manifest next update: Fri 07 Feb 2025 18:43:17 +0000
Files and hashes: 1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: py/fITJZmD7igGnExRc2zVTEb+fp2JVNP31ep6kLsMs=)
2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: hANV6ERnDblIoU8kPVg1/VC/XygDNvVoYUOvd3sESZc=)
3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: FO7phPYzfDla6aPOyvXALwSuyaWj8a9hgRlX/QWvNY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Validity
Not Before: Jan 31 18:43:17 2025 GMT
Not After : Feb 7 18:43:17 2025 GMT
Subject: CN=679d19c5-d78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:fc:28:af:c1:b4:b5:a1:14:ed:37:06:5a:
c9:42:f8:16:eb:ab:85:aa:b3:c8:94:f3:99:97:dc:
1f:3b:69:35:dc:6f:46:fa:42:f0:a6:6d:0a:fc:b5:
d7:56:1f:5f:0a:fd:96:77:78:65:a9:72:4b:55:6c:
2c:b2:db:7e:b6:a1:7c:57:d5:e2:51:57:45:4c:11:
0a:94:04:79:58:fe:cd:ec:c4:df:ad:ec:ee:2d:e1:
dd:0e:98:76:7e:eb:04:91:76:c4:c9:c4:90:5c:c6:
33:7e:a3:17:34:90:47:ff:19:d6:d9:78:be:bf:67:
6b:ad:0e:d5:3f:71:64:ff:36:4e:18:7c:d8:dd:be:
24:60:fe:98:17:d4:4d:1b:02:5c:c5:2d:30:1c:22:
70:35:89:7a:a5:8a:3c:e1:1d:39:9e:2a:54:d9:41:
07:82:b8:ab:30:0d:d0:96:a1:64:02:90:73:cd:04:
18:29:3a:08:2e:64:75:84:a5:a5:98:12:e2:b1:93:
ee:16:96:71:5d:da:88:37:91:3d:b4:5c:a6:d7:28:
b5:a4:3e:f3:02:d6:64:04:d2:03:c9:d3:63:20:46:
35:59:6d:ce:d0:f7:dc:b4:88:a1:d8:45:14:9f:60:
ec:34:48:17:1a:08:bc:e1:93:86:c6:fb:64:ec:1e:
f8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C7:18:E7:E7:DE:87:68:1D:CF:5B:F4:2D:08:37:94:EB:30:CB:5F
X509v3 Authority Key Identifier:
keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:36:4b:61:88:ab:4d:7f:ee:24:ec:44:a5:68:f9:f9:15:13:
1f:01:3d:0d:5f:62:a8:f3:08:bd:50:cb:b7:15:d5:d2:42:4e:
bf:07:3c:03:6a:18:18:a8:77:d0:4e:2d:49:12:cc:59:63:87:
85:b4:7c:be:05:78:cc:b1:da:1d:cd:a5:0b:4b:33:c3:04:f4:
1b:c5:56:87:0a:e6:f1:2d:68:46:d4:cb:ff:67:7a:fb:e3:2b:
14:31:24:56:a6:ce:a8:3c:85:55:a5:c8:a5:e5:5a:17:77:8b:
58:61:19:37:ea:d5:51:be:88:f3:c5:07:c3:d5:4b:86:d9:b2:
13:8a:5b:ba:3d:4c:10:8d:f5:9b:ab:1b:b8:95:72:7f:07:94:
26:3d:dc:bb:c3:53:ff:94:f3:d4:d5:c5:cd:49:f6:1d:89:73:
02:a6:5b:0e:32:46:88:7f:a1:dd:51:8e:a5:80:06:a8:ce:07:
3f:76:80:04:cb:1d:82:8a:75:7a:d0:14:b0:4b:cc:4f:d4:a4:
cb:cf:22:01:19:56:6f:44:bf:4c:bf:88:d8:0b:df:47:cb:2a:
4f:70:57:f5:24:22:7a:8b:8a:58:c2:59:3d:00:86:85:a1:ec:
13:fe:ec:2e:ee:44:23:64:fd:15:d2:08:28:02:fb:9d:4f:da:
4a:d4:a2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:25 2025 by rpki-client