Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json)
Hash identifier: IG9kRcqnZCHhTdoA0EmnMUdv5eXdqQ4H0lDhwI+fcyk=
Subject key identifier: 68:BF:09:72:95:E0:F9:3D:E2:23:7A:35:C5:A5:35:43:18:9B:15:08
Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
Manifest number: 80
Signing time: Fri 31 Jan 2025 05:46:30 +0000
Manifest this update: Fri 31 Jan 2025 05:46:29 +0000
Manifest next update: Fri 07 Feb 2025 05:46:29 +0000
Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: ZmUrwYJE1jUFJprRc3l/FtFoCHOzE0UHv+4m9q70AfA=)
2: 6923942E252711EF948A5E18C4F9AE02.roa (hash: Ig8+Vj7msP69DeMaHArdqVKnxDzk4tSne1MZpXRqLK0=)
3: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: HHoEjJtkFTBdrNU9U4PlS7w1Esr2CS45jVgLsGJvEos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
Validity
Not Before: Jan 31 05:46:29 2025 GMT
Not After : Feb 7 05:46:29 2025 GMT
Subject: CN=679c63b6-e0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:0f:99:4c:a3:62:c6:5c:03:60:a0:1f:01:
78:49:f4:a6:8e:2a:56:62:7e:8d:07:06:81:c2:08:
27:d2:d1:1c:59:30:eb:5a:16:ce:0f:37:73:41:8e:
65:b6:a6:2a:70:19:ee:4e:18:e3:41:04:2e:b3:35:
e2:91:f3:76:1a:05:f7:2c:57:f1:95:c5:2b:3f:10:
1d:cd:ce:f3:a5:0e:5d:d4:cb:db:2d:80:2a:28:e5:
69:8d:fe:92:17:00:2f:52:11:ce:b7:f4:df:c6:4e:
93:75:bb:48:6a:30:e2:3e:fa:e1:02:8b:60:88:89:
50:a0:2b:f9:f4:a0:e6:98:78:21:65:74:1c:cb:cd:
ac:e2:f5:ca:ed:bb:ee:69:c6:97:f0:f1:f9:4f:0a:
31:e3:23:f9:f2:d8:04:01:64:30:91:04:e4:c7:78:
11:74:05:76:6b:cd:1c:0b:fd:b3:e3:25:d7:d6:7d:
31:47:6d:5a:ae:b6:0e:d1:dc:35:c1:3f:b9:28:e3:
47:9e:ca:e2:ee:ff:b6:3d:9c:ce:3c:c5:01:07:d3:
08:48:b6:59:03:e3:98:aa:11:57:24:d4:e6:c8:32:
a2:31:ca:b4:a0:42:24:d1:87:aa:4b:32:48:79:f4:
73:98:96:3a:2f:14:e8:f7:82:f7:54:e1:3b:1f:5f:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BF:09:72:95:E0:F9:3D:E2:23:7A:35:C5:A5:35:43:18:9B:15:08
X509v3 Authority Key Identifier:
keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:18:dd:84:ba:37:4c:ac:21:1a:3c:43:a4:e6:a7:f1:09:f9:
18:03:31:24:31:2e:d9:dc:10:e4:23:ae:c7:63:7a:0d:ae:c1:
90:1f:bc:13:1f:de:02:6b:de:8c:9c:d5:82:0d:de:1c:42:c9:
67:6f:b6:e5:2b:06:e3:34:b3:d0:39:81:50:5e:24:b6:3d:dd:
ee:f6:fd:b0:ec:99:d7:30:c3:70:2d:1a:55:12:25:14:88:af:
69:16:c5:7d:a4:39:77:b7:64:f0:c4:a2:a5:74:d1:a6:5c:61:
23:b2:31:a5:5b:4c:79:31:3a:5d:7e:c5:d5:0a:19:8b:af:d7:
10:1c:31:db:65:7f:33:69:a8:9e:57:a1:d1:8e:14:25:16:2b:
b0:4c:d9:49:3a:b9:35:12:2c:4d:8e:87:83:2d:fa:25:02:09:
46:5e:bc:d1:22:75:4d:14:6e:c2:9a:7e:0e:cf:b0:8a:e8:cf:
d3:70:9f:9c:03:dc:7a:c0:4d:b9:98:c4:46:34:ce:29:d5:3c:
69:76:31:ef:1e:33:4c:8e:19:d4:d7:d3:bf:67:5e:99:f2:67:
17:0d:5f:55:a2:57:e2:a5:5c:dd:f6:bb:e3:a6:a2:82:50:d8:
92:cc:7e:53:ad:99:04:6b:bc:05:9b:66:f0:ba:54:65:97:07:
cb:80:f4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:46 2025 by rpki-client