Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
File: 1AwbOf4FNm7Ysj4IgLaet198kOI.mft (raw, json)
Hash identifier: Nnae0PAsplcgEixr7kPUAGM5mj7YrRqwkCoN6BsOZu8=
Subject key identifier: 05:F0:13:6C:74:38:0C:AA:68:58:70:2D:7D:95:A3:F3:9A:2E:8D:3C
Authority key identifier: D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
Certificate issuer: /CN=A9171A26/serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Certificate serial: 0AC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
Manifest number: 0ABA
Signing time: Thu 30 Jan 2025 19:33:54 +0000
Manifest this update: Thu 30 Jan 2025 19:33:53 +0000
Manifest next update: Thu 06 Feb 2025 19:33:53 +0000
Files and hashes: 1: 1AwbOf4FNm7Ysj4IgLaet198kOI.crl (hash: rwgUxWlNQ4OAJQ0iWxrZjUz18kE3H1Z+EmtdMIIHNng=)
2: 5C9BC9D045C311EA9DE6F237C4F9AE02.roa (hash: ZtnYKrh+yDnEIQelTNQoTzDHev59ss72beEWQRcR3+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2753 (0xac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A26/serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Validity
Not Before: Jan 30 19:33:53 2025 GMT
Not After : Feb 6 19:33:53 2025 GMT
Subject: CN=679bd421-344f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:01:fc:62:58:b3:a6:4c:f1:b7:d0:44:cf:
c2:b9:17:3a:51:10:b6:e5:88:4a:2b:bd:25:a4:5f:
d1:d3:31:31:4d:22:c8:00:4d:2a:a7:ee:24:b2:d6:
25:48:a9:a0:b4:09:5b:92:19:fa:94:37:87:58:fe:
56:cb:b9:11:6f:b8:c4:5b:d0:73:ec:a1:23:90:a2:
9b:01:ea:e2:92:ee:c4:5b:3a:a4:23:cf:e6:bb:90:
87:bf:47:fb:5a:21:71:d7:4b:31:9b:0a:10:e7:66:
c5:e4:be:09:c7:cc:dc:c5:d1:02:d4:7f:31:52:dd:
2d:b7:3c:34:cd:d0:be:4a:02:76:14:bc:23:84:07:
0f:0a:91:8b:97:81:90:46:ac:3b:49:73:6b:0d:e9:
4d:1b:dd:32:90:6e:a5:4f:9f:a4:84:0c:6c:7a:6b:
d7:2c:a5:c8:e7:25:c9:f8:4a:4a:33:98:09:b4:01:
99:dc:97:b5:ac:65:06:70:a7:73:ee:f1:db:2e:4c:
3f:5b:5b:e6:4f:d2:44:ea:b9:ae:a6:1d:f8:a1:f7:
3b:07:82:a4:ea:4a:25:06:80:72:cc:af:ef:b5:f5:
77:99:06:eb:7f:d5:2c:0a:fe:bb:4b:6d:2a:73:0a:
a4:65:54:11:0f:d5:86:86:c3:4a:4f:b8:41:05:7d:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F0:13:6C:74:38:0C:AA:68:58:70:2D:7D:95:A3:F3:9A:2E:8D:3C
X509v3 Authority Key Identifier:
keyid:D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d4:53:52:be:db:d3:07:5e:20:81:eb:c7:7d:d7:b2:7c:2a:
4b:bb:98:c1:eb:6e:97:2d:df:0f:71:be:6f:52:5b:86:a6:5d:
32:59:5b:91:f1:ff:e9:e2:ee:b0:8b:9a:c4:f5:ef:de:a3:51:
cc:9e:19:9d:27:3f:cb:17:8b:e5:ae:f0:c7:df:39:fd:a3:a4:
c1:3e:88:41:63:d0:b1:a5:c3:55:ef:c9:22:c1:db:4e:76:e7:
9f:57:b1:15:af:84:60:a7:d1:1f:1b:7b:23:e2:52:b2:06:b2:
36:ae:3f:1e:12:ed:58:9f:97:4a:65:51:9f:7c:38:2c:73:56:
e3:c2:ed:9f:0e:3b:b1:c0:60:70:b1:43:23:83:c8:f3:5d:5d:
79:ea:86:d6:15:e2:08:c5:14:f2:75:8d:6f:1f:1b:ab:27:b8:
5b:39:60:6d:de:bb:e2:72:21:cf:8e:10:a5:95:62:ee:e4:cf:
2e:4b:2d:cd:fe:14:7d:45:0b:5e:1e:c2:16:e2:22:6e:c6:d9:
b0:13:4b:04:67:e5:35:59:91:e2:11:24:14:b7:89:88:2e:5f:
68:79:e9:99:11:62:83:7c:51:8a:be:57:5e:ed:bc:2a:f8:b7:
43:bd:b3:39:e7:3b:c6:38:1e:e3:a6:e5:22:fc:98:2f:6a:4c:
d1:d4:03:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:48:20 2025 by rpki-client