Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft
File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json)
Hash identifier: 116ckXH2fpORPKydcw1rsBej83Ltxpb51c82fx8asEo=
Subject key identifier: E8:95:30:21:93:F4:EC:34:AF:63:89:33:7A:86:D2:98:35:70:13:EC
Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft
Manifest number: 010C
Signing time: Fri 31 Jan 2025 04:06:10 +0000
Manifest this update: Fri 31 Jan 2025 04:06:10 +0000
Manifest next update: Fri 07 Feb 2025 04:06:10 +0000
Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: dBjyBAyL+Ch/Ihh3duN9jwW7dYeTjY6B4VLZu100igY=)
2: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: hWNFLgRLV5rq9DJdXOOCkETTtq81cKwNe+EsCM4by08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Validity
Not Before: Jan 31 04:06:10 2025 GMT
Not After : Feb 7 04:06:10 2025 GMT
Subject: CN=679c4c32-33e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:45:57:8e:13:6d:b5:c1:9f:ca:22:51:a4:
0c:80:93:49:c0:98:92:93:ec:d3:83:83:64:fd:5f:
a4:c2:a1:e6:8d:c5:03:ea:3e:ac:90:52:88:bf:1d:
75:ca:60:e0:9e:71:79:6c:0e:7d:63:94:3a:e4:fd:
ab:87:50:43:00:a6:30:af:f9:5b:ba:94:99:5c:ee:
89:5a:38:18:fc:57:93:d6:73:52:ae:33:2c:e7:70:
98:9f:4b:5c:6c:7a:f4:5e:84:57:9c:96:52:20:de:
e3:56:a0:e2:5f:b2:95:fa:70:e2:18:d8:e4:21:7c:
9b:7c:3a:06:5c:3b:ce:bf:cb:4b:aa:60:d3:3c:e8:
49:d0:c1:a1:a3:64:24:27:13:c4:1e:d7:d7:90:55:
58:49:f1:dd:81:34:e5:6b:9e:16:4c:08:67:24:6d:
f9:d7:79:71:9a:98:68:f3:cc:5d:db:da:8e:7f:b7:
7f:ca:1d:42:43:1b:3d:ad:6d:e8:40:66:34:24:2b:
79:c5:fe:09:e9:76:c8:33:38:f8:48:ab:4e:36:3b:
ad:7a:88:90:3d:ff:96:4c:4e:f3:7c:71:98:db:1e:
c9:a0:c7:47:12:eb:c5:32:1e:db:51:cd:8a:5f:39:
71:21:f0:f8:34:c5:93:ec:22:fe:81:03:cb:52:3b:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:95:30:21:93:F4:EC:34:AF:63:89:33:7A:86:D2:98:35:70:13:EC
X509v3 Authority Key Identifier:
keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:84:a4:f2:d2:97:03:5a:51:d0:c1:eb:fd:a7:51:a4:e0:9b:
77:ec:3b:7a:67:75:b3:a3:1e:ee:57:29:6e:bf:7a:04:34:e9:
24:fd:5b:d4:02:af:b2:d0:f4:47:a4:f9:01:32:dd:87:13:23:
fd:3d:a4:15:64:ba:da:2c:59:ab:a2:d2:d7:08:e6:79:e2:f3:
68:1f:3e:8d:19:fe:51:d9:1f:97:9c:d3:f2:b4:40:b1:5a:4e:
6e:21:be:10:42:8f:41:98:b0:49:7a:74:60:11:20:a6:e3:55:
22:dd:3c:f1:90:f7:8d:3e:c4:a0:be:e4:31:f4:51:26:ae:7c:
42:d1:77:21:e8:26:b6:ca:38:7f:ce:71:11:d6:ee:95:3c:e0:
b9:9c:b0:cb:0c:b0:6c:67:30:ce:9d:ef:7b:01:31:35:46:4e:
e5:ca:e4:f3:c9:72:10:60:86:3e:2f:fe:b5:16:84:9b:db:9d:
f4:6c:57:49:21:a1:6a:1c:4a:eb:d2:6c:54:9e:73:34:8d:0d:
53:e5:2d:39:6f:41:b3:f1:10:ec:06:82:36:ac:c8:11:97:d8:
c1:99:6e:6b:df:28:80:63:65:eb:f5:28:87:b4:c3:99:5a:ae:
07:dd:08:1f:99:4a:00:7c:19:cc:3d:b3:d4:28:99:95:d4:71:
16:39:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:05 2025 by rpki-client