Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
File: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json)
Hash identifier: bK8XDVczQJJohKPaJZypQwAlalX1xnObHV4heTHWWhs=
Subject key identifier: 1A:DF:DF:C4:01:F9:4D:28:F3:CF:12:15:F2:6F:3A:48:FF:97:4F:30
Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04
Certificate issuer: /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04
Certificate serial: 1392
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
Manifest number: 138A
Signing time: Fri 31 Jan 2025 16:58:24 +0000
Manifest this update: Fri 31 Jan 2025 16:58:23 +0000
Manifest next update: Fri 07 Feb 2025 16:58:23 +0000
Files and hashes: 1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: 9o0tMwnSb7bk267IdmW54w4y+qt9+MgnYwxa0WHkJ+0=)
2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: 4zJ9/i0D6qT42odGNdGTQH8LvSwP3oB1L9xGXSlqgko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5010 (0x1392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04
Validity
Not Before: Jan 31 16:58:23 2025 GMT
Not After : Feb 7 16:58:23 2025 GMT
Subject: CN=679d012f-b43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:f7:40:c9:71:fe:0c:b4:aa:76:91:ea:a0:
6f:23:da:e3:b5:1a:2b:65:c3:84:d6:b4:aa:4f:7a:
96:86:d6:e8:48:16:89:6b:b9:43:8d:c0:56:58:dd:
7b:d4:7c:88:de:23:da:a6:c4:89:fd:7b:4d:6d:33:
4f:87:7b:cd:5d:31:18:17:6e:7e:01:88:c4:aa:06:
80:44:18:c4:bb:ab:30:b3:db:9a:03:f5:b6:67:0d:
97:c0:41:ff:5b:3e:65:9c:96:e3:47:d6:5f:a7:64:
a9:96:f1:b2:ec:2a:e8:25:78:a6:f1:57:b3:0d:31:
48:bd:1d:04:e9:87:36:61:32:9e:0e:f6:e7:9b:df:
94:09:0c:d2:c0:81:25:22:f6:cb:b7:fa:2a:cf:8c:
a9:88:a1:7b:4a:d9:55:08:85:13:95:93:71:5f:1f:
79:7e:a6:bb:8a:1b:e6:c0:5b:6a:02:b1:2f:fc:b1:
7e:59:95:b5:c0:ea:8d:24:0a:e7:54:e6:76:bd:b6:
40:c6:51:e5:e4:d8:f1:20:6b:63:c4:7e:82:d9:c1:
e9:7c:f9:67:6a:ee:0e:f1:06:98:fb:7f:87:12:37:
7c:0e:29:12:ec:9f:47:b3:d1:28:a7:32:08:7c:ce:
13:d9:22:e4:c9:f7:d6:d0:ce:bf:15:ae:52:64:90:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DF:DF:C4:01:F9:4D:28:F3:CF:12:15:F2:6F:3A:48:FF:97:4F:30
X509v3 Authority Key Identifier:
keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:5d:f7:ee:2f:7e:64:cb:3e:bf:81:fb:b7:20:26:d9:9a:e3:
32:11:1f:c6:7f:4f:f9:6a:7d:ad:d6:38:2c:58:82:dc:0a:16:
27:89:5f:69:f4:8c:de:22:d4:f7:50:90:8e:a3:1e:19:2b:dc:
8f:1f:59:ec:a7:e9:cb:9f:21:bb:51:e8:dc:fa:ec:e0:e0:5d:
e5:2e:1d:74:87:94:b3:4a:12:74:b8:56:09:c0:e1:d6:5f:2d:
21:16:62:68:14:f9:b2:54:79:cb:78:5e:a0:72:02:f4:46:3f:
0d:f3:1c:3e:8d:a5:58:9e:17:7a:22:60:e5:81:53:86:5f:1f:
56:3a:3e:3b:84:8f:74:bb:69:0c:82:95:cc:21:5f:af:b9:3a:
61:c5:41:db:49:18:c1:ef:53:dc:56:49:6f:9f:81:9f:b0:72:
fe:27:53:a5:50:9b:f5:01:a0:0d:9d:69:0c:fb:10:da:00:73:
6b:46:79:a5:41:94:82:50:4b:47:24:22:16:d5:13:39:7d:a3:
1f:ea:e7:58:fd:1c:9d:46:0e:8a:f0:47:02:56:0f:8d:d6:86:
6f:94:99:76:72:03:b1:cf:1f:06:2e:22:60:2a:b4:ce:e6:0f:
e2:bb:2a:e7:6d:70:1d:14:46:6e:f4:b1:1a:91:7d:8d:3f:b7:
2b:80:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:43:21 2025 by rpki-client