Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
File: J7kXbXUBrEb9oBkmur5-vwlfko4.mft (raw, json)
Hash identifier: 3156O4yTIEHd9ows263uyW3wK2H52k7v53GxiEC3qtY=
Subject key identifier: BE:97:75:D7:82:11:39:DC:70:E6:E8:75:9E:6F:94:1C:54:9E:2F:FC
Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E
Certificate issuer: /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
Certificate serial: 0E8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
Manifest number: 0E76
Signing time: Fri 31 Jan 2025 17:41:46 +0000
Manifest this update: Fri 31 Jan 2025 17:41:46 +0000
Manifest next update: Fri 07 Feb 2025 17:41:46 +0000
Files and hashes: 1: J7kXbXUBrEb9oBkmur5-vwlfko4.crl (hash: 1/GH0oRkoiM8It4iMF7wNfiJr7eYHUD/qWYEs6gJpGQ=)
2: C74924EE159F11EEBCFC135CC4F9AE02.roa (hash: 6QYV9FQpqrhneDa4DXvOdtP1INWlFJdLfJWnJ4N05bI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3722 (0xe8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
Validity
Not Before: Jan 31 17:41:46 2025 GMT
Not After : Feb 7 17:41:46 2025 GMT
Subject: CN=679d0b5a-55ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:bc:86:da:02:f0:df:72:83:fc:5b:1f:d2:
8b:b1:c2:ae:bb:b6:93:8f:6d:1a:f0:ee:71:bf:cf:
67:d7:4d:d8:7d:8a:be:74:f3:32:c2:ae:74:e1:b6:
b2:d3:08:88:2b:65:15:27:c1:bc:73:4e:a0:a0:93:
ba:6d:80:f1:08:df:e3:90:85:19:8d:d0:b0:84:1f:
df:5d:4f:c7:a0:5b:d4:41:07:cc:c6:38:a3:84:1c:
5c:0c:d1:de:44:be:62:95:9c:68:95:af:c7:f7:66:
29:c5:11:cc:6c:39:5a:c5:8a:72:73:85:0f:6b:a1:
3c:a5:02:9a:79:78:0f:b2:86:37:fe:c1:7e:78:26:
18:36:77:0f:33:c5:10:39:00:0e:f5:f7:89:8c:2d:
8d:af:f5:ca:2f:7f:79:20:41:29:d7:e8:de:2e:64:
30:70:8d:56:36:c0:ac:88:83:6a:fd:93:bc:e9:52:
0d:4b:3e:97:4c:2f:a5:83:b2:92:4d:d0:88:6d:96:
99:0b:df:c8:e2:f8:0f:7c:38:aa:ad:ee:94:11:a6:
6b:84:c6:a6:fc:36:f6:2c:dc:2e:98:f9:e9:97:a1:
3f:70:2a:dd:f4:e8:56:20:54:44:e7:99:30:32:15:
93:0c:40:16:fe:43:62:c8:f7:8a:1b:3e:86:7d:80:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:97:75:D7:82:11:39:DC:70:E6:E8:75:9E:6F:94:1C:54:9E:2F:FC
X509v3 Authority Key Identifier:
keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e2:8d:c4:c5:c3:cd:e2:26:95:29:79:ea:ee:fb:17:8c:27:
47:c7:c3:f8:81:e7:ad:ac:fa:87:7d:68:1e:e0:69:a1:35:bf:
ab:0b:b8:27:74:fd:6f:cf:9d:4d:bf:35:73:07:92:5c:39:b4:
2a:2a:2d:a1:d9:b0:59:d8:84:ea:6c:94:64:cd:08:36:9d:0a:
33:12:5c:21:8b:b7:1d:06:38:de:01:32:30:12:87:2d:af:41:
85:86:31:64:c9:16:90:bc:67:cf:a3:52:87:ff:63:cb:9d:62:
7d:be:d2:0f:27:48:34:74:62:fb:0f:7e:25:7e:28:de:9f:db:
0d:db:73:ca:7d:67:e7:5f:6d:03:c0:77:c4:d9:6b:27:56:da:
ca:2f:ef:1e:1c:15:f7:30:72:bb:4c:85:5a:a1:54:3f:97:b7:
85:5b:dd:3c:3f:c9:47:b7:13:b8:0a:90:7c:03:21:9c:a7:fe:
f4:ff:e8:10:7c:2e:2d:c1:56:13:2e:4d:e0:65:f4:89:7b:b0:
d2:f8:22:50:fc:2c:b8:dd:5e:5e:be:ce:3c:8a:27:a0:ac:cf:
86:51:ab:5f:81:ad:74:20:54:f4:5a:f2:25:d8:c9:1a:e2:51:
cf:14:f9:4c:d7:34:1b:81:72:83:4c:31:68:ff:e5:dd:0b:f8:
3c:1e:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:50 2025 by rpki-client