Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json)
Hash identifier: ZB/OsTRArNG/TszdRgRxWDMz4WzG53YtNT2SrIyyATs=
Subject key identifier: 20:77:66:4B:42:B1:72:97:01:65:EE:44:E7:65:DB:87:86:ED:60:86
Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
Manifest number: 013C
Signing time: Fri 31 Jan 2025 03:36:33 +0000
Manifest this update: Fri 31 Jan 2025 03:36:32 +0000
Manifest next update: Fri 07 Feb 2025 03:36:32 +0000
Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: MQqQaGtNmv/r9V/+elxzjvLkupzKtU8tz0EWCLr0Mgo=)
2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Sh9MMHhw+WZ/mCiixFTMPeTs0/iUB/LaBQpEWqALmcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Validity
Not Before: Jan 31 03:36:32 2025 GMT
Not After : Feb 7 03:36:32 2025 GMT
Subject: CN=679c4541-b382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:dd:ef:4d:74:a1:23:dd:c6:bc:49:ca:ed:
65:e6:b3:d0:c7:1e:5c:e9:8b:ac:f0:f8:c7:82:79:
ce:df:c7:19:f2:26:ab:71:f0:5c:09:5b:e3:24:b4:
1f:2e:c5:04:69:b7:da:5c:4e:85:74:d8:64:39:32:
dc:09:38:74:2f:5b:b7:15:31:87:a7:0c:a2:72:70:
07:a9:15:70:67:2d:52:e6:39:49:a1:4a:a7:bc:5c:
ae:bf:b8:8d:b9:d3:d6:8e:53:c2:0a:3d:d6:93:fa:
aa:3b:28:3f:8e:5f:d5:c2:94:a2:d4:e9:6f:43:b7:
56:6d:b4:8e:6f:ae:57:d8:74:2f:7b:12:1c:1f:97:
f8:2d:6e:2e:74:44:46:17:ca:ee:ed:8f:c2:82:6c:
e2:14:89:71:c7:88:54:d8:0a:07:3e:d8:06:81:24:
67:b6:2e:87:f6:d3:39:5b:d3:6c:34:a0:2e:6d:a9:
ce:bc:45:01:4c:af:a1:22:cb:10:f6:96:de:ca:e1:
40:fc:2f:6a:ab:61:b4:20:28:f3:c1:cd:e7:9b:b4:
93:77:4d:e5:b5:b2:9e:cb:20:57:d0:f0:f4:37:40:
23:bb:4e:22:55:67:f2:e6:44:5d:e1:d1:ca:58:f2:
3f:f2:45:de:96:88:9b:de:c7:65:6b:af:ff:b9:5b:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:77:66:4B:42:B1:72:97:01:65:EE:44:E7:65:DB:87:86:ED:60:86
X509v3 Authority Key Identifier:
keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:69:27:7f:b3:94:ea:bd:51:f8:a0:6a:db:68:15:45:3a:42:
1c:90:9f:3d:6c:cc:18:f7:e1:0d:8f:4a:ac:dc:ea:8f:59:48:
76:fd:9c:93:f6:e5:0e:24:f9:75:d2:8f:a8:df:9d:51:30:fc:
be:79:33:90:37:cc:89:00:3f:1f:72:40:11:a3:5c:a3:0c:df:
ff:69:a5:a9:57:3d:d0:88:f5:a7:65:51:85:79:c3:43:70:d7:
ce:ec:fd:dc:47:43:ac:72:eb:99:ce:37:12:02:41:00:35:15:
90:35:2b:07:c5:06:70:91:cd:dc:bc:dc:b5:e6:a1:2d:46:01:
a0:bb:a7:71:46:49:fb:0b:e8:02:93:db:41:fb:92:c4:74:e2:
eb:fd:c7:82:6e:5c:57:a6:75:41:18:8a:b5:c8:6d:46:5f:f1:
bc:29:1b:b6:11:ec:39:99:8d:b2:e8:95:d1:41:d7:65:f9:33:
e0:9a:d4:ea:3d:cc:bd:65:62:d5:ec:ec:00:e6:9f:d9:b2:2b:
38:9c:cc:e9:b6:c0:ad:f9:5d:5f:43:b2:7f:0e:35:cb:6e:c9:
83:e4:c0:b2:30:05:c7:36:b6:5d:7a:8c:30:17:75:da:8e:91:
7d:8e:90:17:89:20:d7:7a:0e:b5:e8:44:fa:47:00:74:da:0e:
9a:a2:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:13:11 2025 by rpki-client