Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/X2rsonLVbJhJShClpYl-LCz5XwE.mft
File: X2rsonLVbJhJShClpYl-LCz5XwE.mft (raw, json)
Hash identifier: N/4oldUCd+LIpREv35nQ1UmRCUC+Wic2wTB7YFXZD9c=
Subject key identifier: D5:44:20:8F:AC:C4:CE:60:1D:E3:65:16:6A:9B:E6:8D:4A:B4:8C:5F
Authority key identifier: 5F:6A:EC:A2:72:D5:6C:98:49:4A:10:A5:A5:89:7E:2C:2C:F9:5F:01
Certificate issuer: /CN=A917A220/serialNumber=5F6AECA272D56C98494A10A5A5897E2C2CF95F01
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2rsonLVbJhJShClpYl-LCz5XwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/X2rsonLVbJhJShClpYl-LCz5XwE.mft
Manifest number: 0C0A
Signing time: Thu 30 Jan 2025 19:28:02 +0000
Manifest this update: Thu 30 Jan 2025 19:28:02 +0000
Manifest next update: Thu 06 Feb 2025 19:28:02 +0000
Files and hashes: 1: X2rsonLVbJhJShClpYl-LCz5XwE.crl (hash: PiBdgKbkXYK8Fx0ot8OX0ZGC6tBHmWB89VfmAG8e5E0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A220/serialNumber=5F6AECA272D56C98494A10A5A5897E2C2CF95F01
Validity
Not Before: Jan 30 19:28:02 2025 GMT
Not After : Feb 6 19:28:02 2025 GMT
Subject: CN=679bd2c2-f2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:b7:b4:11:a9:78:9b:69:65:e6:83:75:89:
8c:e1:34:09:a9:15:65:bc:6d:38:42:4e:ab:2f:6b:
32:27:23:61:b1:70:55:ae:b6:95:59:ce:13:c2:6a:
9c:c6:f9:c8:c4:72:57:0f:2c:b4:8a:51:21:1b:59:
03:23:c8:fa:3a:56:84:d7:3e:b7:e0:44:c5:1a:84:
90:c5:ea:17:b3:80:ca:a0:73:80:8d:9f:cd:a9:06:
f3:30:ef:52:97:04:c4:8e:8e:91:61:ee:17:10:df:
a3:b9:3c:fc:c9:a1:35:e6:39:89:2f:09:2d:cf:e5:
d7:d5:80:90:b5:83:10:ad:07:98:d0:ff:94:23:0c:
f3:c6:d6:60:e2:97:6c:fb:de:7e:c7:a3:b4:e0:de:
cb:50:ef:5a:e8:04:b3:44:f2:5a:28:6b:83:5c:06:
a8:fd:7b:52:9c:95:24:7f:c8:95:81:0f:45:b0:a0:
f3:ea:1e:77:e3:d7:e8:e9:73:7e:7d:ac:b1:5d:03:
7d:aa:ed:28:ad:94:16:d7:05:fc:a7:61:70:a2:10:
de:7a:44:0b:a0:15:d7:05:55:1a:0b:f5:ba:b2:0d:
5c:34:f5:ec:cd:da:66:70:97:17:ca:ac:e1:4b:e9:
b1:2c:8e:7d:8b:18:b4:a2:2b:67:a0:60:bf:52:f0:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:20:8F:AC:C4:CE:60:1D:E3:65:16:6A:9B:E6:8D:4A:B4:8C:5F
X509v3 Authority Key Identifier:
keyid:5F:6A:EC:A2:72:D5:6C:98:49:4A:10:A5:A5:89:7E:2C:2C:F9:5F:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/X2rsonLVbJhJShClpYl-LCz5XwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2rsonLVbJhJShClpYl-LCz5XwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/X2rsonLVbJhJShClpYl-LCz5XwE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9e:51:2a:ef:5c:5a:ed:74:c8:27:4d:0c:b3:85:7e:be:bc:
df:6d:f0:8b:74:76:43:c5:6a:2f:13:f5:5e:19:9f:66:84:f9:
cf:e8:46:ab:d7:44:2a:c3:a6:8f:8e:63:3f:81:62:80:49:5a:
9a:1a:30:14:cd:01:29:3b:76:f7:22:5e:d6:be:b9:d4:78:3c:
ef:a1:bd:0f:7d:d9:58:a1:59:e3:da:17:a3:88:63:4f:6e:68:
29:f9:24:ef:cc:34:cd:10:cd:a9:62:b5:98:a6:e5:d3:f6:30:
e2:18:c9:c7:1e:0c:e4:4e:5e:f2:87:d8:94:86:f7:2d:06:3c:
cd:97:51:69:a3:55:9e:ff:77:a7:41:44:dd:3a:7a:e5:01:ff:
14:2c:60:c0:39:eb:be:d0:76:cd:28:c0:6c:8d:c5:7e:ae:26:
8b:ed:cc:87:01:ed:da:41:98:cf:3d:11:8f:32:2f:e2:e6:ed:
16:33:52:ab:7e:a9:42:e1:1d:19:57:e5:a7:89:16:30:33:29:
ce:80:df:f8:d3:45:45:a3:63:e0:23:7b:e1:8d:5a:2b:99:b7:
e9:da:3c:d0:f3:d9:80:0e:ff:5e:81:fa:13:37:e6:a0:ce:e1:
6d:d0:7c:07:a6:0a:40:6f:21:e3:80:b1:81:70:c8:6a:d3:f2:
60:a0:a1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:10:24 2025 by rpki-client