Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft
File: FMR1z9KLd-wRUsLvM-XkPhdawiE.mft (raw, json)
Hash identifier: 7hIw4u63RtPlmedALH3wjhhUKd84OBk/2yMXb/jsZFk=
Subject key identifier: AA:95:E6:2F:B7:2F:00:45:B3:A6:81:C7:A1:1E:05:0E:61:05:88:DB
Authority key identifier: 14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21
Certificate issuer: /CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft
Manifest number: 1244
Signing time: Fri 31 Jan 2025 17:59:43 +0000
Manifest this update: Fri 31 Jan 2025 17:59:43 +0000
Manifest next update: Fri 07 Feb 2025 17:59:43 +0000
Files and hashes: 1: FMR1z9KLd-wRUsLvM-XkPhdawiE.crl (hash: Jo3m72c/vl9qE+ELG2Y5Lxu+lZclFQWZDh4wk6lokmY=)
2: 07F7821E890011EEB1D8307EC4F9AE02.roa (hash: Ex+6JUYUT1fn58MXzUbTsKkSfKCLrTn1oSCE194tkqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221
Validity
Not Before: Jan 31 17:59:43 2025 GMT
Not After : Feb 7 17:59:43 2025 GMT
Subject: CN=679d0f8f-a07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:79:08:8f:5a:8f:38:04:85:32:23:16:2e:
f4:b0:a3:a0:ff:7d:65:26:15:26:d4:bd:34:ef:03:
70:54:7d:c3:8b:fb:0d:ff:d4:f7:a0:e0:34:f7:d2:
a6:2f:43:4e:8e:ba:4f:f8:a8:fa:ec:fb:10:59:ef:
f7:6c:25:ff:46:ce:5b:75:3e:97:b2:d4:ad:38:6a:
e9:df:0d:11:b3:42:06:c9:2d:ee:1c:68:d2:9d:04:
63:5b:9c:8a:a5:97:0b:10:9a:b8:b4:51:10:cf:9c:
74:7e:80:ef:6a:fb:2b:ad:84:18:02:3f:3b:6a:4d:
b8:29:3b:23:14:5c:d8:27:f4:cc:7d:a5:4e:2d:01:
9f:dc:0d:df:c3:e1:b9:08:d1:1f:c0:61:46:38:60:
39:63:ef:2b:ff:a9:f2:7d:c0:2a:a7:40:9e:dd:8f:
23:ea:64:40:61:e1:f0:e2:b9:af:c8:12:71:51:ed:
cd:65:d7:1f:17:0d:0f:1e:5a:76:ad:6b:21:23:8e:
b6:5d:f5:a2:a5:09:e7:9a:e6:8d:e1:9b:4c:c9:ac:
d0:73:5d:33:10:a0:98:6c:70:f9:81:05:6c:aa:f1:
eb:59:9a:dc:ed:6c:72:8e:10:bf:54:0c:55:bf:87:
06:7c:2a:b6:c2:55:cf:b3:38:2f:dd:1d:05:c6:c0:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:E6:2F:B7:2F:00:45:B3:A6:81:C7:A1:1E:05:0E:61:05:88:DB
X509v3 Authority Key Identifier:
keyid:14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:16:42:b4:a8:84:59:93:f4:c0:15:6a:b3:a2:92:af:ff:32:
98:09:0f:30:98:85:2e:ec:7f:94:25:63:c5:f1:43:77:60:2a:
20:12:94:7a:48:47:3d:b8:aa:26:cd:10:98:de:de:26:ad:31:
6c:22:f1:b5:29:77:2d:95:a7:c0:d2:d0:89:ee:87:da:f9:5d:
6c:20:02:5a:9e:7e:e6:88:27:58:01:24:59:78:bf:93:fb:a9:
b3:6b:d7:18:d6:bf:04:c6:2c:ce:93:6f:23:c7:ab:ee:12:0e:
3e:b6:60:82:17:fd:ac:57:d2:d7:79:f5:0b:e9:47:9d:66:b4:
18:7d:09:e9:d0:b3:17:cc:f0:42:b0:6d:55:ac:f8:a5:1c:89:
c7:a5:20:98:d2:08:d9:6e:d1:b5:41:54:7f:7e:4b:c8:72:ae:
10:df:2e:66:a7:31:fc:81:38:f1:e1:25:63:27:9d:67:6a:71:
bd:db:32:34:20:01:80:f9:6a:ba:56:7d:f6:94:08:2c:be:84:
32:a9:01:78:3d:69:2e:3d:0f:6e:0f:ae:d4:3d:83:82:fc:4d:
12:ed:ad:26:41:74:08:c0:a1:22:39:73:60:06:41:f7:0d:dc:
b3:75:5c:8d:18:20:13:67:c8:18:b2:18:bb:58:db:0f:0d:59:
ca:18:fd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:16 2025 by rpki-client