Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json)
Hash identifier: Cw5iJWHGV21YryeuO/6KG9iJkqbizzgnEKBJs3Hebjk=
Subject key identifier: 69:D9:F3:D3:71:7E:1D:22:AE:6E:E5:89:4E:38:CA:BE:77:7B:83:54
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial: 0789
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
Manifest number: 1346
Signing time: Fri 31 Jan 2025 18:41:34 +0000
Manifest this update: Fri 31 Jan 2025 18:41:33 +0000
Manifest next update: Fri 07 Feb 2025 18:41:33 +0000
Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: pV8rc+N9jheHmLDAjrMeDWHCrbjVI76UvbSnpziu2VU=)
2: 002F950CFF6611EABE77DA4FC4F9AE02.roa (hash: i6cG/zwGHDxZhgko6olaCJkVcCmriXcczI+8bQ1+3KU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Validity
Not Before: Jan 31 18:41:33 2025 GMT
Not After : Feb 7 18:41:33 2025 GMT
Subject: CN=679d195e-4f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:aa:e3:ee:35:05:65:b0:a3:75:7d:93:8a:
10:32:4a:31:31:af:48:8a:1d:16:ac:9d:b9:cd:87:
8c:df:95:75:f1:cb:ae:e3:7d:44:77:87:f7:89:d8:
c1:4f:ed:a4:0c:63:8d:fc:fd:eb:1b:4a:6b:c9:1c:
44:01:63:3e:b1:3d:d2:dd:a4:2d:7a:90:b2:1e:e3:
c8:dd:1a:42:c6:d3:2b:a4:52:7f:f1:3a:7a:b4:c0:
ac:d7:29:92:0e:37:c4:3b:36:b1:7c:c6:c7:fa:67:
c1:a9:98:3f:0f:af:4a:0c:11:ac:7c:b1:8a:f7:91:
e2:3a:65:a0:5a:f7:04:d6:26:d2:7b:6e:a5:0a:68:
d5:84:28:b8:fe:cc:6a:b5:0d:0a:48:9f:20:0a:83:
70:41:4c:a4:f2:fb:5d:04:ea:c9:cb:af:dc:4a:f5:
cc:f0:a5:e0:aa:44:1b:ca:fc:db:ea:41:b1:67:d0:
8c:f8:2b:fe:b1:59:08:d8:2c:27:87:2b:9d:34:7e:
7d:fe:bb:e3:fe:96:4f:58:1f:c6:fb:73:0a:3b:6f:
03:2a:54:fb:38:41:59:85:a6:e2:50:b8:ed:aa:e8:
ce:6f:84:e2:dc:12:9e:74:60:34:88:59:4d:ba:2c:
ca:00:3f:05:11:5f:7b:45:cb:5f:9f:05:4a:08:f7:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D9:F3:D3:71:7E:1D:22:AE:6E:E5:89:4E:38:CA:BE:77:7B:83:54
X509v3 Authority Key Identifier:
keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3e:2f:3d:ff:26:95:61:03:be:50:f1:31:77:22:ad:ac:cb:
89:61:bb:6f:74:0d:30:7c:36:49:6c:32:2e:91:f0:87:7d:49:
57:4c:8f:47:07:2a:55:05:92:ba:a6:35:90:08:d6:56:eb:94:
b3:15:f7:e6:4e:0a:82:b5:14:d8:d3:00:64:3d:1a:8e:eb:0a:
04:7b:9a:c4:52:12:da:67:11:93:c9:44:f9:83:86:c7:4b:cc:
40:67:38:62:e7:d8:10:f1:4c:c2:0a:80:90:5e:b8:ee:b8:b9:
61:e9:5c:11:68:77:90:ed:ec:dd:a7:4e:a1:ec:88:9a:e9:d6:
8d:06:31:0c:97:3d:5b:3f:e5:64:2e:bf:75:4b:9b:0c:c6:46:
f9:f7:9f:4f:cc:b7:51:2d:51:ad:6d:2a:de:c4:5b:3d:0d:e6:
ac:58:2f:9f:92:28:55:e4:bf:e2:5b:6b:e3:91:87:3f:83:9f:
f2:ac:f7:84:6e:69:b2:38:0f:96:87:d3:b5:7f:d9:bd:00:30:
86:6e:ab:49:a7:dd:d7:9d:7b:dd:65:11:69:24:20:be:bc:76:
3d:62:c7:46:40:b9:41:0f:30:c8:17:42:8d:4c:11:2a:b3:37:
ac:2b:4b:05:8a:7c:54:09:0a:68:08:8d:0e:60:b1:10:c5:9e:
4e:71:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:09 2025 by rpki-client