Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
File: 1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json)
Hash identifier: gK5wFr3I/W3UEHdxiychuRiY1nZ6bw+YZRhHC0v9CqI=
Subject key identifier: 82:04:F1:D5:1B:F2:35:C8:0E:59:E2:3D:A0:A5:9F:AE:0A:7B:39:91
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial: 03AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
Manifest number: 03A9
Signing time: Fri 31 Jan 2025 00:47:11 +0000
Manifest this update: Fri 31 Jan 2025 00:47:10 +0000
Manifest next update: Fri 07 Feb 2025 00:47:10 +0000
Files and hashes: 1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: er1esUfBDPbsHYl7Fmf7H4EwRDfYS/KmDVviImcoXAY=)
2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: rZC8SWsdSZa+0Z4sByJs9WyDe0koVPrw0IvazT8IwQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Validity
Not Before: Jan 31 00:47:10 2025 GMT
Not After : Feb 7 00:47:10 2025 GMT
Subject: CN=679c1d8f-d702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:61:40:ee:79:b4:22:1d:a3:6b:05:7c:b2:
24:c7:9f:95:d0:7e:ad:7c:e6:01:02:c7:2d:5f:91:
53:ef:9d:5a:53:54:76:49:5f:33:40:87:15:0e:3a:
3d:51:06:0b:50:50:dc:f7:0a:23:77:94:98:cf:4a:
77:e8:ff:98:44:33:c1:fc:56:92:98:2c:8c:de:7c:
fe:ed:9e:d5:13:ef:74:b0:7c:35:d2:23:8f:3d:15:
e3:d6:f0:72:b3:56:ff:9c:87:72:cd:4f:ff:8d:84:
f9:68:76:f0:b3:6b:9f:21:f6:52:47:55:c9:9f:0c:
dd:ca:1d:d8:9d:83:f6:dd:45:50:97:4c:31:68:54:
e9:fe:69:55:7c:7c:bc:2a:ca:83:db:35:50:11:1a:
9f:a3:ce:75:d0:2b:73:c3:e2:92:21:46:f5:6e:46:
a2:0b:48:10:7a:ee:1e:d5:3f:25:2f:8b:a1:0d:f4:
a8:3a:95:f8:79:fe:c6:e7:55:1f:c7:d2:3a:bb:04:
02:13:0f:c7:07:1a:d2:f2:fb:c3:06:d6:5e:d9:83:
4c:46:20:f0:39:5b:06:2b:a8:2e:54:6a:be:e3:65:
74:98:02:99:c5:c8:b0:6d:8e:06:a5:f3:51:4d:92:
7d:39:f1:bc:bc:8c:b0:6b:72:36:7d:7b:39:97:01:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:04:F1:D5:1B:F2:35:C8:0E:59:E2:3D:A0:A5:9F:AE:0A:7B:39:91
X509v3 Authority Key Identifier:
keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:91:c6:0e:e2:dc:f3:8e:c8:e8:a1:46:51:7f:96:a2:44:dc:
ff:52:ca:16:fc:76:31:06:84:af:9d:ae:69:9e:e9:ca:67:2c:
66:9f:15:57:91:07:a0:58:f9:5e:58:28:81:dc:5e:71:c9:a5:
ed:3c:13:bf:80:81:0f:e9:5b:be:bb:f7:57:5f:30:b5:a4:cf:
ed:16:15:5d:3d:20:7e:03:b1:7a:35:0e:4c:d1:ca:28:f1:9e:
83:27:c8:c6:4c:04:01:45:57:49:e2:31:5b:f8:6c:5f:4f:68:
2d:54:2d:87:10:b6:80:04:44:68:b5:c0:a4:bd:39:72:f0:b3:
28:fb:83:41:5e:ef:cb:8c:7d:87:ca:30:7b:cf:18:42:ba:6a:
e1:35:af:ca:bc:6c:5f:dd:7a:3a:9d:04:31:6e:74:ea:5b:fe:
23:59:bd:de:d2:82:e4:13:f3:c7:20:16:97:e7:b0:8e:84:45:
9c:48:27:0f:1a:10:c6:7b:91:80:8c:75:92:15:05:29:b8:88:
dd:96:28:a8:7b:f0:ba:04:14:07:e6:2e:0a:23:8b:de:65:3d:
3d:76:86:e3:57:df:49:ad:12:a9:0c:6c:d2:c4:1a:1c:e4:db:
ed:52:59:4b:32:f2:25:23:41:06:c5:f2:1c:b2:f2:89:a9:0d:
b5:ce:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:41 2025 by rpki-client