Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json)
Hash identifier: SMpQuFb36GEwZuM1y33QucluCLmV31D2+esTX0maQTI=
Subject key identifier: 0F:47:86:9D:5D:FE:19:6C:2D:4E:60:11:09:DF:AF:03:D6:8C:43:E6
Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82
Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
Manifest number: 41
Signing time: Fri 31 Jan 2025 06:29:14 +0000
Manifest this update: Fri 31 Jan 2025 06:29:14 +0000
Manifest next update: Fri 07 Feb 2025 06:29:14 +0000
Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: MvMgrCIusg9ayWMOBpqsJtk2wxtGI0isrPoR7S7o+Ak=)
2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: C1wubfWXdpG304JONiKw+mbOc+sIyxib62Hzqan2NP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282
Validity
Not Before: Jan 31 06:29:14 2025 GMT
Not After : Feb 7 06:29:14 2025 GMT
Subject: CN=679c6dba-89b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:68:cc:71:88:d4:f8:40:b6:09:91:b1:5f:aa:
df:98:76:f4:6d:20:8e:ec:9f:ce:9c:ea:98:3b:2a:
10:3e:98:85:63:eb:c9:c2:1c:0f:f1:f9:ba:f8:af:
f2:21:39:74:67:ec:a7:df:46:bd:e3:b7:f1:07:78:
af:c0:ab:5f:c6:47:a7:49:51:86:e0:42:5c:58:32:
14:48:12:fb:37:eb:07:57:77:fc:eb:ef:4a:ab:21:
bf:69:67:98:88:01:a9:15:ef:13:22:39:ce:53:d2:
27:82:68:be:66:03:bd:b1:44:1f:c0:15:df:2e:f9:
08:d6:af:d4:53:8d:cf:f6:39:ac:42:e0:c3:48:67:
23:79:9f:b9:08:72:ff:7e:61:20:c8:07:85:7c:05:
41:d9:22:63:83:94:95:5c:76:c7:a4:8a:cc:3c:17:
03:31:1a:22:f8:2c:64:c2:5e:8d:37:f9:fc:c1:2e:
e8:86:b2:62:11:19:9a:67:9c:a7:03:53:cd:0a:d6:
94:15:c9:83:32:3e:97:89:24:00:e3:34:bc:7f:1d:
26:8e:dc:fb:14:f0:63:6d:fb:b6:92:49:4b:a7:51:
6f:09:67:02:20:a4:a7:cf:fd:61:4a:85:62:a0:05:
ee:2a:a8:c1:e3:7b:d5:5b:b2:f8:65:c6:01:5a:05:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:47:86:9D:5D:FE:19:6C:2D:4E:60:11:09:DF:AF:03:D6:8C:43:E6
X509v3 Authority Key Identifier:
keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:bb:4a:80:60:57:7b:8f:b9:5d:43:c8:a3:e7:40:05:19:8c:
b2:91:17:f5:9f:16:56:75:89:cd:13:bc:6e:d4:84:be:49:4f:
6d:eb:dc:29:dd:a6:9d:e9:f0:26:99:d8:94:6d:99:f7:6c:f7:
35:43:16:3f:00:9b:53:16:b4:2b:3d:ce:88:95:e3:75:82:78:
c5:bb:0b:7b:a1:99:7a:5c:77:9d:c4:40:87:0c:16:78:bb:c9:
32:56:9a:8c:54:d3:44:de:ac:3d:99:b8:60:a1:67:99:af:af:
92:cd:f2:19:0a:ef:2f:3c:6d:eb:38:da:e7:7d:23:2a:70:3b:
4c:3f:6d:f6:91:33:80:b9:3e:63:ae:aa:dd:ec:06:82:05:f7:
c9:e1:9c:38:55:c3:ce:a6:b1:40:f1:10:b2:64:49:4b:cc:73:
c9:a9:96:68:bf:97:f0:1e:0f:af:b8:09:25:4a:0d:bb:73:55:
50:f4:e8:af:cf:39:e1:76:f8:f6:e6:e1:7f:ea:2f:9f:45:ed:
54:ce:15:f1:3f:87:d1:0f:45:73:cc:53:d9:62:54:94:c5:4b:
9a:9a:71:ce:85:37:0c:aa:84:c5:06:b0:fb:e0:a3:f1:6a:f5:
8a:dd:1a:2e:dd:09:ba:ba:62:04:60:4c:d0:58:9d:1d:29:16:
c9:48:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:35 2025 by rpki-client