Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json)
Hash identifier: jryDl5lbZjapw9a04sI09KWydXRNg6VjcLjFhIPuXUg=
Subject key identifier: A9:FD:6F:45:21:06:23:62:B8:48:02:4D:72:9E:B9:40:C0:B5:6A:85
Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Certificate serial: 07AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
Manifest number: 079C
Signing time: Thu 30 Jan 2025 21:14:42 +0000
Manifest this update: Thu 30 Jan 2025 21:14:41 +0000
Manifest next update: Thu 06 Feb 2025 21:14:41 +0000
Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: ov14Vi07fTul1TvqKPgzQcNtYzNa5HX2Rei7mBUGz0o=)
2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: qjMMlEqEvaBO7XAFYzvleISXKC2IIZdSXJalJOe7pw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156
Validity
Not Before: Jan 30 21:14:41 2025 GMT
Not After : Feb 6 21:14:41 2025 GMT
Subject: CN=679bebc2-dd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:c6:f8:fd:57:a3:ef:d7:7e:c9:74:f1:c8:
30:71:d1:70:04:50:e3:6c:d2:81:3a:3b:7e:64:0c:
47:73:ac:91:00:bc:e6:02:5d:8d:a7:03:5f:c0:75:
78:f0:9b:4f:f9:4d:ef:d3:60:f4:e4:da:3a:94:f7:
8e:a3:29:ca:58:1f:7a:a6:16:b5:c5:d2:fd:a5:67:
13:68:b0:59:e9:41:52:62:7a:ad:d6:16:83:cf:46:
19:68:81:4a:97:3a:65:09:33:5f:46:ff:33:d5:f0:
6a:2c:8f:9b:e2:d4:8f:23:34:08:10:72:e4:a6:6b:
a2:db:01:5c:66:31:e2:98:d2:d7:4f:42:1e:fa:93:
0f:e3:e4:6c:c8:ff:f2:75:70:43:73:6a:0c:d6:c0:
9a:85:0a:78:ae:73:12:88:44:f9:ae:03:80:c1:7a:
d9:00:f4:5f:1e:bd:39:4e:ce:91:34:db:aa:85:25:
6e:ce:57:6b:ef:f5:8e:27:98:87:59:3e:ec:4a:4a:
7f:d5:7c:f1:c3:7e:da:28:c2:e2:38:90:44:c2:da:
d4:b1:44:86:fc:69:9d:58:a5:8a:a1:6e:a2:97:b2:
44:8e:aa:21:22:c3:ef:ba:b1:ee:5f:b1:13:ac:a4:
6f:18:0f:88:a1:9e:b4:27:78:43:7c:35:9a:de:86:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:6F:45:21:06:23:62:B8:48:02:4D:72:9E:B9:40:C0:B5:6A:85
X509v3 Authority Key Identifier:
keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7b:18:9e:41:f0:e7:6c:19:f7:4c:19:1a:8e:d3:fd:32:7b:
52:c7:4d:a5:28:fd:f0:86:75:5f:05:76:bc:16:84:9d:e3:bb:
68:aa:9e:c4:76:50:c0:4f:79:e2:6b:ad:ba:d2:82:37:51:82:
29:9f:2a:b9:87:b7:61:b6:e6:7f:ad:0d:d6:0a:a6:fc:65:46:
28:d7:d6:7f:40:bc:ed:65:0a:91:5c:4e:d3:cd:e7:af:03:46:
3a:47:cc:36:58:38:da:52:5f:eb:6f:ce:6e:d6:1a:64:cc:d3:
1b:97:33:18:fa:b9:4c:8e:ad:bd:1b:aa:2b:c0:e2:4f:05:29:
f9:cd:f9:81:65:db:27:a0:93:44:6b:12:8c:e4:9d:fc:d7:53:
a7:9c:9b:06:c3:d2:37:58:25:45:2b:d3:00:6b:82:6b:be:64:
c2:b7:2f:88:22:7a:a8:d7:61:74:69:b8:61:a7:ea:68:ce:78:
9e:7b:07:2c:31:31:48:42:93:92:65:8d:41:43:a1:7c:b8:c7:
78:dc:ce:21:5d:73:18:62:31:5f:11:af:6c:79:c7:bd:49:86:
db:b6:64:dd:2b:74:47:95:6f:1a:23:70:c2:be:69:f3:ee:1b:
05:97:14:62:14:73:18:cd:e6:7c:da:8f:cb:69:ad:25:de:54:
4e:0d:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:42 2025 by rpki-client