Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json)
Hash identifier: 47pP4qS/tQVpDifIy9TwH25oSdx4i1HdLUN9eu+eha0=
Subject key identifier: A7:51:90:B2:F2:FB:3E:17:54:5C:7B:B5:9C:E0:AF:EF:0A:15:A6:7F
Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B
Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
Manifest number: 41
Signing time: Fri 31 Jan 2025 06:29:16 +0000
Manifest this update: Fri 31 Jan 2025 06:29:16 +0000
Manifest next update: Fri 07 Feb 2025 06:29:16 +0000
Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: 6o9WjWMwg05uWeYJPIdMw/TD+FKXniMxfsWFIYxdb7A=)
2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: YBs0kfZTY2sABIi/xaIJAg5Ddfxg9MhnEpmdNb3MBps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
Validity
Not Before: Jan 31 06:29:16 2025 GMT
Not After : Feb 7 06:29:16 2025 GMT
Subject: CN=679c6dbc-dfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:f1:fe:fd:02:64:5f:14:c7:57:45:3e:66:
14:d9:2c:c1:47:5f:d1:be:e4:d9:51:92:28:4a:2a:
6c:45:ba:2d:fe:b5:29:be:ec:03:00:33:08:ee:d4:
d7:3b:74:4c:4e:9d:e6:6a:65:37:4c:48:c6:8a:9f:
8b:93:94:4d:39:14:96:61:cb:e2:3c:ee:59:57:ce:
94:75:19:8f:16:db:25:c0:f2:ad:10:d5:b3:3e:46:
c2:e6:c0:a0:aa:eb:70:aa:29:15:f9:88:f1:16:2e:
be:e4:21:a7:fc:0c:60:6d:62:df:96:16:9e:90:a8:
ff:e4:61:34:9e:8c:c2:71:40:4f:c5:b6:da:3e:42:
1a:fb:a9:6d:fc:7b:74:90:6b:af:09:12:1e:ba:30:
b0:d1:4b:d9:86:e9:1f:f1:39:81:58:3b:50:27:19:
30:77:19:10:01:6c:42:60:5e:25:84:18:e8:6d:80:
e7:86:61:c8:d7:53:8a:2a:69:89:6c:4c:17:5e:48:
4c:95:55:8d:57:d5:31:03:50:76:f6:46:fc:93:08:
eb:bc:f9:23:0d:2f:40:39:9c:72:35:73:30:8b:d6:
d4:85:49:29:8c:29:df:dc:41:0b:27:dd:6f:7c:32:
bc:06:59:54:d1:9b:54:f8:fe:82:7f:ba:cf:a2:de:
13:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:51:90:B2:F2:FB:3E:17:54:5C:7B:B5:9C:E0:AF:EF:0A:15:A6:7F
X509v3 Authority Key Identifier:
keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:64:81:25:52:7e:20:fd:f2:68:ee:fa:5f:cc:07:13:58:0c:
02:f7:91:f1:61:8f:d3:45:6b:0c:c6:1c:88:0a:63:ec:41:f2:
d2:b6:5a:c0:44:2d:0e:50:ad:da:f4:8d:0b:3a:cc:90:3d:4e:
b0:87:6a:b9:95:ea:97:11:ff:eb:55:db:ff:83:0f:44:6d:a8:
de:22:98:07:8c:2c:3d:71:e8:40:74:e9:10:2f:7c:9c:d8:14:
6b:fb:01:d8:66:eb:9e:a3:ef:0e:2d:22:ed:40:7e:b6:60:44:
eb:99:de:44:f6:eb:1c:70:63:56:79:83:9a:12:cf:2f:40:ac:
35:c5:62:4a:d2:74:16:33:f9:41:37:e2:7a:07:2f:9b:77:70:
68:69:d5:e6:e2:7b:28:e6:73:8a:85:dc:c1:c2:5b:7e:b9:9d:
b0:5f:6e:ed:6c:b4:39:d4:8e:62:59:c1:16:51:5b:2b:92:d8:
9b:76:7b:09:93:3a:c6:ba:32:55:8c:ac:d7:08:d0:3b:54:5e:
ec:84:6d:04:44:b1:5c:3e:77:8d:51:a3:79:c6:3f:8b:df:e7:
b8:1f:07:2b:27:7c:42:58:d1:9a:60:9e:b1:c7:ec:26:b2:f5:
e7:6b:1b:7f:13:cf:8c:8e:09:63:35:19:a4:a9:98:1c:fc:8f:
55:c7:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:30:38 2025 by rpki-client