Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
File: AiMNlU5PPWqtRJXXTNs-4PKHygc.mft (raw, json)
Hash identifier: L3A8gbtExT5mdjncJ/PSkBoHpokybw0R/acpeVPEX+Y=
Subject key identifier: A0:6E:B0:F7:6B:C1:53:D8:43:DB:52:FD:EC:4C:49:7E:42:95:D3:8D
Authority key identifier: 02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
Certificate issuer: /CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Certificate serial: 2385
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
Manifest number: 2358
Signing time: Fri 31 Jan 2025 15:50:39 +0000
Manifest this update: Fri 31 Jan 2025 15:50:38 +0000
Manifest next update: Fri 07 Feb 2025 15:50:38 +0000
Files and hashes: 1: AiMNlU5PPWqtRJXXTNs-4PKHygc.crl (hash: ULQcHS/MbNlHZAROsmIw8W2zTi6f0fp2bY0NwcWpfrc=)
2: 32B76C00562411E79589C739C4F9AE02.roa (hash: vb5cHcm55U7pljjzoO4g9FNB1flb1KgvWDDtM0SHGvU=)
3: 7DBDA87C561A11E79F98831DC4F9AE02.roa (hash: SI+LLofCjizJ4ADDiYbKrAg1//cncoxs2Ga5Zj0MMu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9093 (0x2385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Validity
Not Before: Jan 31 15:50:38 2025 GMT
Not After : Feb 7 15:50:38 2025 GMT
Subject: CN=679cf14e-9c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:af:66:af:e7:d6:d6:6e:38:1c:e3:6b:42:
70:50:b9:a6:2c:6a:a7:d6:5c:49:33:18:50:42:4e:
3a:1e:41:44:a1:20:9e:8e:06:c7:1e:ed:ec:01:c2:
0b:94:84:3b:89:c5:fd:c0:7a:14:51:a3:c2:86:e4:
e6:44:dd:c3:7a:27:f9:f4:36:2e:9c:e1:95:c7:54:
33:0a:87:5c:d1:f0:ed:aa:e7:1e:cb:b9:69:87:8c:
f4:00:9c:d7:87:6f:59:47:48:d3:58:dd:53:ab:bc:
73:d9:59:5b:27:e2:de:b2:0e:02:0c:e3:c9:ce:ee:
94:93:14:9d:e5:19:6d:29:76:e1:c2:f7:ad:29:67:
64:f8:d5:92:7d:bb:49:5a:be:e5:45:0b:03:9e:84:
7d:98:5f:d8:fc:b6:e2:ea:fc:92:e0:f2:e3:d5:d7:
88:a1:16:68:ae:21:17:ac:9b:ee:23:3b:49:db:e5:
14:e0:55:61:94:ec:71:9a:1b:9b:1b:b4:16:ca:b6:
5f:00:c0:7e:64:7b:24:dc:0b:3e:4b:8e:60:ff:e8:
08:59:93:52:cb:9b:e3:f8:f3:c9:d3:e7:20:00:a5:
a5:92:ac:99:ea:47:8a:0f:7f:e5:40:ef:b3:b4:26:
ec:b2:01:c4:b8:bf:2c:74:cf:70:52:47:72:09:2a:
6a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6E:B0:F7:6B:C1:53:D8:43:DB:52:FD:EC:4C:49:7E:42:95:D3:8D
X509v3 Authority Key Identifier:
keyid:02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f8:72:43:3b:7c:22:2d:f2:59:73:a5:6c:2b:88:1e:08:79:
56:63:5b:db:57:80:7f:e6:89:7e:72:b7:4b:92:28:d9:57:24:
fd:08:eb:2d:58:cf:40:4d:34:9a:05:b0:e1:8c:a5:d4:80:de:
77:8b:5e:ba:ba:63:49:cc:cc:16:a9:1e:95:45:ea:d8:b8:a3:
e7:da:ee:0a:6f:cb:df:fa:67:f9:7c:13:e7:96:34:2d:ee:03:
e8:d4:b6:6b:80:59:3e:47:89:3d:a4:23:42:4c:66:0d:f4:7f:
c8:29:88:72:b7:17:59:62:92:87:a7:14:50:33:18:ff:e4:b6:
a9:a9:db:5e:af:8a:50:4a:cb:ab:da:94:07:7c:42:b5:f4:2d:
ba:84:52:0a:59:8d:63:ca:c8:af:30:47:91:03:ab:d5:bc:7a:
a6:3d:0a:f2:d9:19:29:5d:9d:cc:ac:40:5b:9f:f4:b2:dd:87:
20:40:f8:30:53:89:71:e5:de:e5:d0:5b:10:5f:c3:a1:35:d2:
8c:b4:da:8f:ee:9c:14:88:67:ec:b3:9a:6f:51:a0:73:46:3e:
db:38:58:07:2b:b2:df:f7:0a:56:c5:6d:59:38:22:28:bf:ad:
f7:24:f7:0d:aa:8f:73:dd:d3:28:80:61:51:19:db:fc:a2:e3:
b0:9f:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:13:38 2025 by rpki-client