Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft
File: ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json)
Hash identifier: Nn3MAwG/TSYefLx4z7dGVccRS/3qJ1LA7ps6NkVomOo=
Subject key identifier: D7:F9:0F:2B:99:1E:27:1A:20:AD:99:10:6A:2B:83:B3:55:14:A8:D8
Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6
Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6
Certificate serial: 0BE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft
Manifest number: 0BCA
Signing time: Fri 31 Jan 2025 18:44:17 +0000
Manifest this update: Fri 31 Jan 2025 18:44:17 +0000
Manifest next update: Fri 07 Feb 2025 18:44:17 +0000
Files and hashes: 1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: 7KtgL6tyubtCAJTadHdTIPctJViWcKBe+IEBBAzmAnw=)
2: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: dn3kZoWooSddDB41uptssOk+YJNXq/e4qX48GOTMtT4=)
3: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: 8Ead/6roCcIWAO/F6fTJ08XA18GUuGo77XaTq8IG4j8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3047 (0xbe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6
Validity
Not Before: Jan 31 18:44:17 2025 GMT
Not After : Feb 7 18:44:17 2025 GMT
Subject: CN=679d1a01-e8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:48:05:9f:3c:2a:fe:c1:65:4a:f2:97:bd:56:
e0:03:9e:f8:13:59:48:56:86:18:f2:d7:41:01:8c:
d4:ce:e0:e9:d0:da:c0:5d:3b:b2:45:41:74:c3:4d:
60:9f:aa:da:f8:5e:39:fc:9f:ca:e0:2d:a3:f8:2f:
be:17:06:c7:05:f4:b8:ad:e6:18:fc:7b:17:ea:57:
36:8b:a1:08:1f:c3:db:ce:5a:6e:cf:e4:a7:e1:25:
91:ae:f9:33:01:bb:a3:c2:4e:5b:99:fe:63:37:57:
88:e2:44:2e:2d:db:64:95:1b:e9:09:a8:9e:3c:c4:
f0:b2:0e:be:f2:67:0c:8c:2e:10:b5:cf:2e:e8:73:
73:e6:d2:60:a2:a4:81:c9:b0:6d:9e:9b:f8:20:01:
ed:a8:8b:8e:51:cb:74:98:2a:43:dc:db:14:a9:ad:
0a:b0:61:0f:c1:8e:ae:c7:71:49:5e:43:6f:ec:26:
22:82:f4:e9:d2:13:86:3a:f7:68:fb:26:98:1c:7f:
05:89:9f:92:cf:e8:aa:8f:39:10:75:85:10:b7:0e:
d5:c8:22:52:3a:e6:72:88:cc:7d:77:f1:10:eb:41:
e3:2a:2b:a4:bb:fa:4d:ce:2c:ee:0e:4b:a1:3e:e3:
08:ea:b2:30:8b:c8:9a:9b:06:37:ff:c3:4a:52:e6:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F9:0F:2B:99:1E:27:1A:20:AD:99:10:6A:2B:83:B3:55:14:A8:D8
X509v3 Authority Key Identifier:
keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:62:8a:7e:f4:bd:6f:92:df:9c:63:14:ed:3e:1e:1c:09:eb:
fa:6b:70:05:05:66:02:09:16:0b:ab:89:1c:ac:78:3f:92:50:
24:d4:81:f7:b9:81:f9:0f:63:4c:82:90:1c:de:72:a4:53:66:
b6:74:8b:72:9d:31:1f:da:c2:f8:bb:4a:50:3b:c1:b4:9d:4e:
7d:56:dd:00:b4:8f:f6:72:bb:9b:a1:0b:90:a9:50:fc:9d:42:
f5:94:cb:a9:1b:e0:12:03:af:57:4d:1d:25:1f:b4:b9:18:45:
ef:6f:54:d8:a2:94:1c:de:32:f6:35:3b:c6:4e:f1:4b:88:e6:
c2:99:3c:b6:ad:f2:83:21:82:ec:0b:30:e9:64:14:c8:1f:46:
5d:b1:c2:6c:2e:b8:47:25:49:aa:d1:1e:c9:0b:61:a0:13:fb:
78:51:ec:38:97:3b:ca:6b:e1:d4:17:37:4e:df:a0:13:27:55:
31:2a:25:51:18:40:c9:9f:6a:9a:d7:1d:00:6e:03:2a:07:97:
2f:d6:8a:2a:f9:26:21:35:5a:31:38:0b:73:cd:8f:12:69:84:
09:36:3d:c8:5d:2b:74:36:a9:62:c6:81:49:35:b3:7f:52:14:
b6:33:3c:9a:ce:25:cf:b6:d3:4e:01:48:58:bb:74:a0:60:c1:
26:71:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:29:43 2025 by rpki-client