Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json)
Hash identifier: fGPv/ynzcb5KhArp8WMHCKuuw3NJg3alyxe6qhkq210=
Subject key identifier: E6:D4:EE:E3:1B:EC:C1:84:BB:86:42:AA:83:BB:09:2C:A6:FD:66:54
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
Manifest number: 1F
Signing time: Fri 31 Jan 2025 07:00:35 +0000
Manifest this update: Fri 31 Jan 2025 07:00:35 +0000
Manifest next update: Fri 07 Feb 2025 07:00:35 +0000
Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: pWSL1hrw1J8iqY6UUuFb2i6gmFKVySvRXqR0c8md5g4=)
2: 4D4183A2D73C11EFB0F9227BC4F9AE02.roa (hash: herWewxhbd+Al2td5L8smiJ9gpdpuG0j6isOlm9UtaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Validity
Not Before: Jan 31 07:00:35 2025 GMT
Not After : Feb 7 07:00:35 2025 GMT
Subject: CN=679c7513-a903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:09:74:f5:61:f1:3b:fe:6a:73:01:18:64:
8d:80:46:53:0e:f8:38:6f:8e:88:55:42:48:7a:4d:
49:0c:a2:78:dc:8d:61:5a:e9:0a:b1:83:90:ae:d4:
f8:11:ec:03:00:0a:48:73:27:46:e1:46:86:85:7e:
32:e1:b3:26:a8:07:e1:88:49:1e:b4:fa:64:b3:04:
73:7d:74:2e:a7:03:0c:fa:37:1d:e9:4f:3b:7b:19:
6e:41:0b:f7:46:f8:c1:03:61:78:1d:51:5a:a2:53:
07:d7:cf:58:b4:66:a4:1f:d7:10:61:6b:de:b0:f1:
b8:41:71:9b:24:3b:41:b7:ec:4e:f7:68:15:cf:99:
64:0f:da:42:ef:b1:0a:7a:e6:c7:51:ad:42:b4:67:
4a:d0:f3:53:f9:f3:b9:cc:05:ac:41:1f:a8:d3:ac:
bf:67:0f:88:1b:2f:7a:0f:9c:0f:1b:81:ed:2b:33:
1d:cb:77:7b:7c:f9:88:90:f5:3e:45:7e:8c:68:3d:
82:c9:b9:6f:eb:1c:ab:9e:f0:ee:8c:d1:01:79:8b:
be:de:bc:24:6d:6f:40:16:2a:02:c3:39:89:d9:53:
05:3b:52:c3:b8:19:5a:3d:08:7d:d9:36:a2:07:2a:
c6:cf:ed:4a:4d:16:d1:da:67:e2:56:3b:26:c6:8e:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D4:EE:E3:1B:EC:C1:84:BB:86:42:AA:83:BB:09:2C:A6:FD:66:54
X509v3 Authority Key Identifier:
keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:03:9c:34:fe:60:d4:ca:f0:b6:44:d3:39:90:47:4c:12:77:
55:6f:8c:37:a4:f8:28:1a:69:f6:2d:12:99:6a:90:b1:e8:ca:
ea:d2:8a:3c:17:9f:5b:45:aa:a0:fd:93:22:08:9c:fc:6b:87:
fa:f6:17:7d:45:65:44:09:17:bf:29:97:06:62:ce:45:10:0d:
f6:4a:33:8a:cb:9f:d7:e7:c2:85:fc:a0:f0:45:e9:51:f0:27:
28:a9:07:bb:b1:d6:7b:c1:8e:f6:93:b5:e1:64:e0:28:91:fb:
6f:3d:f7:2b:25:4e:f5:0f:06:38:27:6d:6b:76:c4:79:62:21:
fb:a4:25:cf:f6:5f:5f:5e:73:f7:d6:4b:89:b1:ca:cf:2d:4a:
7a:57:47:fe:00:3a:de:12:f2:10:63:25:c8:00:bc:7c:f4:13:
dc:5a:96:b6:3b:e4:ed:0a:6e:0b:94:9d:ec:80:75:a1:d9:1e:
59:90:a0:8f:3e:6c:34:ae:d3:63:db:31:45:0a:8d:f3:88:fc:
41:97:99:7e:fa:d2:35:95:2a:3d:56:c4:09:b7:2e:f2:d0:65:
2d:e1:6e:24:b7:22:de:22:fc:6e:54:09:50:a8:5c:00:1f:29:
f9:59:44:c1:f2:f4:1b:47:f4:62:5d:66:c4:af:67:8f:75:1c:
5d:c9:85:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:57 2025 by rpki-client