Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft
File: IRxVC1PrIEdRhbq83n5w32dESLc.mft (raw, json)
Hash identifier: jio6dwjo6n9HFm2I8OApSdlAPsxY01+lPBMkxmtO1Io=
Subject key identifier: 44:DC:26:50:05:6B:D2:74:EF:DC:02:1C:4D:E5:18:FC:03:2C:8E:EA
Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Certificate serial: 0C51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft
Manifest number: 0C2F
Signing time: Fri 31 Jan 2025 18:23:26 +0000
Manifest this update: Fri 31 Jan 2025 18:23:25 +0000
Manifest next update: Fri 07 Feb 2025 18:23:25 +0000
Files and hashes: 1: IRxVC1PrIEdRhbq83n5w32dESLc.crl (hash: HNWa0GS8R4iouoEcgG71BnnCDqoUbb7UuGV0wAeAANA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3153 (0xc51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Validity
Not Before: Jan 31 18:23:25 2025 GMT
Not After : Feb 7 18:23:25 2025 GMT
Subject: CN=679d151e-375c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:8a:c4:0e:f5:59:bb:84:1d:ed:de:a4:60:
7b:61:c1:64:89:3f:78:64:45:92:93:93:e7:6c:d5:
23:e3:93:41:9a:01:58:4f:ae:a4:2a:d8:99:fc:e0:
db:0c:e8:08:fa:5d:83:ee:27:ef:97:9e:b7:1d:d7:
de:a2:9c:d2:12:d7:56:76:40:80:48:7c:8f:19:36:
54:cf:5b:fd:6f:e5:8e:0b:ba:e2:54:c8:17:d1:ab:
df:c2:12:d8:1a:63:b0:e3:04:72:7b:48:db:a0:3e:
5b:5b:04:56:5f:f9:0c:22:80:19:49:86:e2:c3:5a:
bb:41:23:6d:0e:20:31:46:79:c1:0c:03:6f:c8:8e:
45:42:45:68:f1:d8:b5:e0:5f:f6:42:80:69:84:05:
58:5a:ef:ed:19:da:7d:ac:91:56:ba:2c:28:5a:ac:
06:99:90:88:2f:9e:bd:8f:0b:de:93:1e:98:12:bb:
48:40:dc:2e:4c:a8:16:3b:66:8f:b3:e3:2d:e2:d4:
c8:b6:21:be:da:e4:67:96:da:cb:d2:cb:ff:6d:ef:
70:f5:6f:63:b6:61:70:dc:b6:46:20:27:e5:23:dd:
44:dd:c1:f7:2d:0c:cf:d9:42:9f:9d:f9:f2:09:e7:
b3:c6:ba:85:ea:a8:7a:3b:e4:70:45:e4:fb:77:40:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DC:26:50:05:6B:D2:74:EF:DC:02:1C:4D:E5:18:FC:03:2C:8E:EA
X509v3 Authority Key Identifier:
keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:4d:8c:ec:7f:fb:7a:a9:ad:74:46:6e:6f:92:85:a1:ca:2d:
03:47:7b:5f:4d:6c:a6:56:ed:da:d8:bf:58:5b:bc:1e:2e:49:
ba:1f:dc:48:c6:ac:cf:ae:ca:57:29:46:49:42:1d:c4:43:27:
8e:4d:e7:93:5b:3e:60:63:af:91:93:7f:11:51:3e:f3:05:dc:
61:5a:1f:cf:8a:40:8e:aa:a8:98:18:9c:15:f1:dc:5a:0c:e0:
89:a4:b9:bd:d4:2d:52:b9:63:c7:01:34:65:c3:19:e7:0c:c5:
5a:eb:82:a5:43:00:7e:29:85:64:3f:79:55:da:7c:00:19:b2:
56:a8:7f:07:c9:4b:c5:da:72:f2:eb:71:16:78:cc:01:cd:de:
cd:d7:3f:4e:14:72:02:d1:a0:c8:33:ed:34:b3:7d:9a:c0:fe:
f2:6c:bf:76:c5:97:1a:94:ed:20:5e:34:87:00:5e:87:07:ff:
d1:77:08:93:60:af:f7:e9:bc:e6:41:94:82:22:da:fa:13:3b:
c9:47:67:e6:b6:58:e7:89:9d:64:fb:63:9c:50:5b:44:50:ec:
b9:12:48:8f:20:5e:25:b0:9f:b3:98:9a:48:e1:ee:90:f0:1e:
c0:24:10:88:28:62:c5:43:6f:c6:bf:14:c2:c2:38:ca:cc:37:
71:da:43:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:18 2025 by rpki-client