Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json)
Hash identifier: YguqjjRzKN08Yb4RHXo/mV2H4qarjwxFBtmIUjLr2Rc=
Subject key identifier: B6:C0:67:4F:C6:2D:62:86:48:36:EB:9F:34:A0:B7:D1:40:96:F2:36
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial: 1630
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
Manifest number: 161E
Signing time: Fri 31 Jan 2025 16:43:46 +0000
Manifest this update: Fri 31 Jan 2025 16:43:46 +0000
Manifest next update: Fri 07 Feb 2025 16:43:46 +0000
Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: UKEXfgR2K49G1Gp5/YsPvuUyf9QN6xw4vIJnSY7C2pM=)
2: E259315C57CA11EA8D931284C4F9AE02.roa (hash: UF4UGi4YvKSRTlKCNcjEh8f4bqwvLQuk9xLcKAJKTWQ=)
3: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: slzLXwHdalwSZSG2cdS37Tf6mGAWnLHG4M+IywxJpUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5680 (0x1630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Validity
Not Before: Jan 31 16:43:46 2025 GMT
Not After : Feb 7 16:43:46 2025 GMT
Subject: CN=679cfdc2-ad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:cc:83:84:f2:ef:1b:db:0b:36:08:6a:a5:
6f:04:ed:95:14:06:e3:e6:da:d1:43:37:16:82:8c:
4f:51:c2:cb:0f:a5:2b:ab:43:26:1e:4c:05:86:74:
11:e1:1d:dc:a2:00:25:11:36:8b:57:80:fd:33:c3:
c7:a8:d3:6e:c3:59:c2:76:06:60:d7:94:e8:07:54:
be:47:b4:f2:bd:7c:dd:81:a3:b6:79:88:92:fc:e2:
15:1a:0d:41:0b:07:05:ce:72:0f:ec:6b:fb:15:c0:
56:48:05:87:e1:fb:9e:bf:6a:08:1b:09:ae:2e:c9:
2a:99:70:b0:9a:7a:aa:c4:8a:09:b0:1e:7c:77:9c:
4a:c8:a6:9d:14:e6:76:9a:84:40:24:5b:c2:22:a9:
3c:aa:95:b2:0b:d1:5a:d2:80:e1:65:ea:08:e2:20:
ed:83:66:8d:46:0a:e6:1e:5d:9b:7d:02:f0:40:d6:
7f:35:6d:48:43:15:54:28:fe:be:d6:5f:42:04:22:
7f:5e:2b:34:da:c7:dd:b9:63:13:f1:f9:06:ef:e4:
79:70:e9:93:7f:48:43:9a:bb:a5:ed:a6:80:e0:5a:
93:86:d5:25:0f:56:a4:aa:d8:af:17:d7:ae:ab:f6:
65:31:d4:ef:c5:ca:4a:05:ef:cc:3c:23:b5:19:68:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C0:67:4F:C6:2D:62:86:48:36:EB:9F:34:A0:B7:D1:40:96:F2:36
X509v3 Authority Key Identifier:
keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:27:d2:93:a2:44:c6:70:c7:dc:41:05:c0:7a:25:71:38:b6:
64:86:c9:f4:93:79:5e:5d:f6:2c:49:35:9e:ba:9b:cc:51:f9:
08:e9:38:00:05:9b:ab:40:53:18:28:ba:ec:c0:d8:f9:f9:e9:
4b:31:7d:2b:09:07:72:67:df:89:46:99:09:df:84:9e:b5:d9:
ea:56:dc:3d:6b:86:b3:c6:b6:33:17:36:84:0f:61:e9:fb:2c:
8f:ac:4f:91:bd:4c:bb:8b:bb:ce:3f:76:e0:eb:a1:8c:42:3d:
6c:93:fa:e0:e6:96:e4:04:4a:d8:c4:27:09:3a:b2:fe:8f:b0:
91:ed:95:a4:8c:a9:af:db:af:4e:0b:11:5b:6d:a9:f6:4b:52:
72:02:b9:26:05:68:49:c9:c7:39:e4:5a:ec:eb:51:a1:b4:3d:
fd:80:16:c7:ac:ac:7e:5d:dd:18:db:22:ef:88:66:60:83:23:
0a:44:43:f6:53:75:6e:52:72:34:f9:f2:bc:04:59:c7:11:93:
1a:f3:e5:99:de:1a:b6:c9:ec:c7:bb:27:ba:53:fd:bb:33:a9:
d1:14:63:16:a5:32:97:70:17:78:d0:9e:79:9e:44:61:84:bf:
0b:d2:bc:7a:9a:ca:19:a6:e7:f5:99:cd:2b:1d:44:e1:19:b5:
85:f8:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:13 2025 by rpki-client