Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
File: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json)
Hash identifier: QaTx6vtVR1bcsGEbE5veUt8JtEHILo+91QzZju6ShP8=
Subject key identifier: 64:B5:33:5F:83:75:EC:56:DC:86:80:B9:C3:E3:6F:3E:CD:82:72:26
Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
Certificate issuer: /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Certificate serial: 344A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
Manifest number: 344A
Signing time: Fri 31 Jan 2025 14:38:32 +0000
Manifest this update: Fri 31 Jan 2025 14:38:32 +0000
Manifest next update: Fri 07 Feb 2025 14:38:32 +0000
Files and hashes: 1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: /8J5e99YidLENTU6yyxyED79zmwf55oOcxVKnDbaARI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13386 (0x344a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Validity
Not Before: Jan 31 14:38:32 2025 GMT
Not After : Feb 7 14:38:32 2025 GMT
Subject: CN=679ce068-4444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:6b:fa:68:24:22:40:ab:f3:2c:79:26:f0:
03:70:a2:32:76:4b:67:19:a2:6a:99:2e:e0:4f:c9:
19:6d:2c:d4:07:39:2c:f3:50:97:d8:8b:1d:c4:3e:
fa:4c:be:16:13:46:1c:f8:36:f8:f3:18:fc:7f:44:
ff:89:b6:e1:32:e3:0f:e2:23:0b:3c:b9:a0:54:da:
49:17:67:12:93:64:e7:c9:1d:99:c6:7e:32:0a:df:
02:d2:b9:1f:72:15:b9:1c:4a:5c:27:3c:c7:c1:a9:
53:59:5a:87:56:3b:e3:ae:6d:d8:46:97:71:67:b0:
2f:32:b7:d1:17:7c:b8:bd:20:af:d4:4f:5e:b3:b1:
af:4e:cb:86:71:c2:53:4b:f6:12:6b:73:97:bc:a8:
4e:33:ce:4f:4d:6a:3f:3c:03:b2:38:d9:2e:0e:75:
34:81:ab:f7:e2:72:44:0f:be:81:76:af:06:fc:54:
58:c0:8a:3f:8c:bd:ce:d1:b2:65:b2:a4:a8:c7:07:
d0:cf:1c:2d:eb:e7:81:62:4a:19:52:85:7e:19:99:
ce:a1:67:21:f7:df:28:3b:62:3d:dd:6f:1a:30:94:
d1:72:6d:08:5f:0f:59:8a:6e:db:ce:e2:2d:f9:9a:
06:c5:71:9d:82:ee:61:7d:b4:cd:6c:a9:53:98:70:
5d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B5:33:5F:83:75:EC:56:DC:86:80:B9:C3:E3:6F:3E:CD:82:72:26
X509v3 Authority Key Identifier:
keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:ba:80:7c:65:5f:da:f5:d7:d7:22:73:7c:1a:51:e5:4c:6d:
72:a5:a0:3c:be:f8:c8:d2:17:89:04:a6:5f:42:f4:74:91:17:
c1:16:28:ff:9f:5f:df:d2:d1:56:d2:05:3b:b9:e7:04:e2:cc:
cc:80:c9:aa:47:05:9b:6a:b5:48:b0:45:8d:45:21:8a:4e:c0:
6b:f0:c5:43:9d:54:8b:45:81:73:64:b5:8a:a9:f5:4a:c9:81:
59:ac:8c:bc:96:a0:53:bb:e7:40:60:e5:2b:83:85:c4:54:11:
92:f7:1c:7c:3c:ba:70:74:bf:b0:23:a3:fc:ea:bd:90:df:8b:
49:d1:a4:65:89:49:7a:2b:cd:9c:c6:c6:78:5f:4a:30:5b:5e:
e9:6d:07:e5:41:31:da:6c:fe:87:3c:84:36:24:0b:c5:cf:96:
93:14:22:e5:80:dc:b3:63:5d:cc:45:28:ee:99:94:bf:34:44:
8f:4f:75:ff:ed:96:9a:68:28:69:a9:d1:50:26:43:ec:1b:95:
68:9e:18:9c:4a:7e:18:b3:59:b0:61:48:e5:57:24:56:ec:54:
13:81:be:b3:e3:8f:67:bf:65:98:5a:13:7f:42:49:7b:eb:7f:
a2:88:f4:f4:c6:1f:5d:e6:94:99:a8:ac:71:a0:17:29:27:47:
b7:da:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:37 2025 by rpki-client