Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json)
Hash identifier: 6zVntZ/hdYJZnVOTEVTCYWFYPsP8GLOOXwAAgEM9veI=
Subject key identifier: D8:93:20:F3:58:77:FC:21:9E:CA:9F:9B:70:6B:EB:EF:BB:B8:14:6D
Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
Manifest number: E3
Signing time: Fri 31 Jan 2025 04:36:48 +0000
Manifest this update: Fri 31 Jan 2025 04:36:47 +0000
Manifest next update: Fri 07 Feb 2025 04:36:47 +0000
Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: 0IKpqXgUIQqfjcLbPffdj9b1bNqfBKgfd0KC7E33PrA=)
2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: 1La2YjR8695Kv+ENKHdPNPLlVQUHdNzlGYNxYnnCBUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Validity
Not Before: Jan 31 04:36:47 2025 GMT
Not After : Feb 7 04:36:47 2025 GMT
Subject: CN=679c535f-59bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:a6:f3:c3:61:2d:04:e8:ba:17:61:1b:80:
f9:b1:71:c8:f5:02:2e:fc:b7:c6:35:f4:38:ce:a2:
52:31:37:f5:0d:59:90:87:d9:26:6c:c4:fb:99:59:
ab:66:e4:55:50:6e:76:fc:a9:22:90:c4:e4:4a:8a:
8e:d1:07:72:96:23:b9:f8:f5:11:47:b8:a6:28:51:
6d:36:17:f6:68:e3:ce:82:14:03:72:91:b6:48:55:
e9:76:9b:9a:29:74:a8:65:d7:f6:a5:d6:62:43:a7:
ff:7f:50:c1:a3:e0:c4:1e:40:ea:d3:35:33:a5:9c:
cb:b4:f7:ae:88:61:de:f2:6d:df:15:e7:d6:20:fb:
fd:8d:8a:07:d8:bb:17:aa:9e:e5:49:0b:55:4d:79:
89:98:b3:4c:25:4a:bc:51:98:94:b1:a0:4c:c1:3c:
f5:72:12:2a:93:15:b9:a2:12:00:50:1e:b6:0a:5b:
ca:7d:86:c6:fe:7f:bc:7e:7a:e7:07:11:a3:c5:38:
31:f8:26:52:8a:77:16:53:d8:b4:66:de:cc:a1:19:
87:b4:f6:39:df:bc:ab:7e:0b:87:f8:a9:95:cb:29:
c2:82:10:0d:1e:64:6c:d7:ff:7d:24:df:09:d6:0c:
81:db:63:da:51:31:3e:d8:fd:ec:de:3b:99:2c:a7:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:20:F3:58:77:FC:21:9E:CA:9F:9B:70:6B:EB:EF:BB:B8:14:6D
X509v3 Authority Key Identifier:
keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:42:86:f7:01:27:2e:74:22:3a:7b:b3:cd:e0:95:a3:1f:2d:
bb:d0:07:65:3a:cd:ce:6f:5b:72:80:3d:57:b1:ef:a0:b9:78:
96:c3:19:18:1f:5e:71:3d:19:b6:1c:b9:01:74:b0:f4:a7:fb:
ab:7d:c6:56:c9:33:fc:92:aa:a2:f5:72:b8:06:ee:11:ba:26:
61:f2:72:fb:30:66:d8:3a:f3:e7:18:35:49:27:8d:68:83:e5:
a5:ea:1c:40:98:01:9f:90:71:86:f0:3e:fd:e2:12:db:3a:66:
e4:a5:13:bb:3a:4b:19:fd:97:55:55:c7:6d:a2:3b:00:cd:b7:
27:ad:41:b8:09:64:70:11:11:88:0c:cb:68:66:34:99:37:95:
69:09:bc:38:34:c5:71:ca:46:22:3d:90:63:b1:1c:d5:57:ed:
3d:6b:fb:b7:b6:f1:a7:65:d1:2c:10:8d:5b:a6:de:78:5f:52:
81:a5:5e:8d:9f:58:09:19:4b:87:d0:39:2d:9b:7d:2c:7d:a0:
85:ec:07:c9:dc:a5:1d:30:1c:7f:be:91:cc:c5:7d:ba:5e:84:
e0:6b:31:4a:dd:62:ef:c2:77:17:19:c3:b6:5c:14:68:76:0c:
f2:78:74:68:44:f0:99:07:38:ad:3f:0a:d3:da:5c:3c:37:31:
09:4b:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:13 2025 by rpki-client