Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.mft (raw, json)
Hash identifier: WncvcpS9wTI4ktXgGJsPJBomlPedHT+O62jScZzCoDg=
Subject key identifier: 51:AE:41:F9:48:40:15:46:DB:0C:41:AB:8C:49:A9:8A:4F:55:CF:0C
Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505
Certificate serial: 11E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
Manifest number: 11D8
Signing time: Fri 31 Jan 2025 17:10:08 +0000
Manifest this update: Fri 31 Jan 2025 17:10:08 +0000
Manifest next update: Fri 07 Feb 2025 17:10:08 +0000
Files and hashes: 1: 7ulOOvQOrIyjbcMuSeREbs-zNQU.crl (hash: Yb8sAdSCXJvsVhBtDG33M8BpiwFi9k1a0EWZbBoM6k4=)
2: 44A110AE77F311EEBFBD3064C4F9AE02.roa (hash: nLUHgXDw/FqHMkpa6OTKWrgVqXi50zS8nf/fSNtv6d4=)
3: 43CDA63877F311EEBFBD3064C4F9AE02.roa (hash: DAhhlDd0WQ6jBratV7Sxl4UrRGi+wYN1gX4H3UsXhbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4582 (0x11e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505
Validity
Not Before: Jan 31 17:10:08 2025 GMT
Not After : Feb 7 17:10:08 2025 GMT
Subject: CN=679d03f0-3e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:c0:c9:96:5e:bb:b8:74:a2:5e:94:09:e7:
d4:53:db:eb:89:c5:2f:a4:a1:1b:d4:09:55:b0:a6:
42:77:1e:8d:87:7b:6b:26:50:74:12:4d:ba:ab:d4:
e7:07:f8:bb:62:13:11:4c:a5:d9:6b:50:9e:8c:6e:
3f:d0:5b:de:c3:ea:8b:f9:bd:f2:ab:f3:13:75:f2:
a2:87:28:2f:b6:39:24:48:01:5a:7f:9c:82:fa:29:
1e:af:10:26:49:39:f3:a3:69:12:cf:9e:10:55:87:
79:f0:11:17:c0:01:8f:9b:25:6f:0b:1f:f4:01:f2:
3f:ff:e0:aa:12:87:2d:5d:f2:7c:cb:3e:85:5d:61:
93:93:09:91:db:08:90:d4:4c:39:2a:54:40:ff:21:
17:8b:01:5f:11:8b:3d:d4:ba:23:93:7d:16:95:e2:
d8:87:ba:e4:36:36:91:9b:1f:9c:45:66:89:36:21:
bb:a9:3d:70:0b:84:00:13:23:d3:79:03:fa:6d:cd:
3a:55:6b:14:d7:db:f7:9c:ec:17:e8:84:fc:e5:35:
c4:f7:1c:df:9c:2b:b4:a9:69:50:ba:00:0c:4c:4a:
5a:4b:0d:2c:6e:cd:8a:21:e6:ac:be:47:4b:27:d7:
b1:8e:33:b7:e2:fc:7d:5c:c1:4a:47:31:48:7d:d9:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AE:41:F9:48:40:15:46:DB:0C:41:AB:8C:49:A9:8A:4F:55:CF:0C
X509v3 Authority Key Identifier:
keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:ff:39:99:e3:c8:d7:3e:dc:45:c8:c1:91:f3:05:4b:f1:af:
48:7e:73:6b:4d:06:67:75:a2:f6:1f:e3:37:b9:40:a7:10:37:
b4:21:b2:f9:51:e7:e5:ff:90:60:45:65:a4:a0:79:27:23:47:
e0:c6:f0:2b:f5:94:06:e6:c9:a3:42:fe:3c:88:94:51:1a:e1:
8c:29:87:4c:3d:99:70:62:ba:7b:11:e9:d2:84:d0:93:8f:36:
c1:b2:89:bc:4c:cd:27:40:7b:50:3b:75:fe:f0:d1:d1:41:16:
87:40:e4:68:cb:25:82:87:75:c8:07:53:0f:09:67:49:b0:92:
1b:89:78:d5:46:04:da:55:a5:91:5c:21:2a:27:e0:44:7c:f0:
ba:ad:c5:da:7f:46:66:b1:23:dd:36:d6:6a:c9:f1:1e:67:6e:
f8:16:70:d7:5d:cf:8d:5b:c9:76:d4:39:93:63:fd:89:4b:33:
8e:b8:04:c3:f2:a1:d2:d5:ed:f8:57:2a:21:82:ae:c5:94:17:
6a:e1:31:72:a0:94:03:73:bc:71:d2:29:dd:2f:f7:4b:c6:41:
3f:0a:93:41:e4:77:60:36:a4:49:fe:ae:fa:21:59:1c:48:c4:
5d:81:89:41:43:45:4c:24:12:29:21:6c:71:6c:02:6f:c1:a9:
f0:c6:b6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:32:27 2025 by rpki-client