
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json)
Hash identifier: NFYeSW/bt3rdhLhruqzVoFIplfrVXKNRc0TuL6OAXXE=
Subject key identifier: 0C:9D:1B:04:6E:B6:74:47:87:9D:89:98:DB:EE:B9:59:FD:0A:59:64
Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Certificate serial: 0556
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
Manifest number: 0549
Signing time: Thu 30 Jan 2025 23:32:11 +0000
Manifest this update: Thu 30 Jan 2025 23:32:11 +0000
Manifest next update: Thu 06 Feb 2025 23:32:11 +0000
Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: boVcdYMRaaXhSpw2hfOvBZzum/N5oLWYZhJgRLhSFj0=)
2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: ANHxtKugodgoKSgnFI0z3Q5CTPRRYAMndCAFyQe7v1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1366 (0x556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Validity
Not Before: Jan 30 23:32:11 2025 GMT
Not After : Feb 6 23:32:11 2025 GMT
Subject: CN=679c0bfb-d55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:8d:5f:52:fd:a2:b5:14:cb:ea:b1:30:da:
0d:07:61:d8:44:26:5d:02:48:01:d1:b5:8d:f9:07:
1b:ab:a6:42:6d:17:a4:9a:b7:ea:97:ca:a6:6f:02:
70:85:e4:16:fc:21:02:1d:ab:45:a8:5e:31:f8:35:
9b:c8:97:9f:73:3b:2f:8e:5a:c0:80:cb:55:39:4f:
e4:f0:e7:b4:37:66:c5:fa:2c:fc:22:b0:70:06:9b:
ea:5e:31:3e:56:e4:d2:48:92:4a:47:6e:84:5a:15:
df:02:27:7f:a7:28:2f:c6:9f:c5:d8:0e:35:f0:57:
f3:60:36:12:d8:be:26:3b:29:d6:d9:ad:9a:39:4f:
8c:9e:bf:e2:e6:d3:f1:0d:ed:98:c3:a3:9e:f8:71:
a3:6b:62:1a:33:82:41:cd:57:fd:9b:53:c5:ea:bd:
b8:d5:4d:86:10:e3:44:03:5b:1a:e4:f8:73:97:3b:
5e:da:47:16:0c:b1:1f:6b:24:9d:92:96:2c:b8:34:
40:07:ea:c4:7b:70:cf:27:d9:aa:4d:3e:11:51:86:
89:22:2a:09:ba:6c:69:3d:af:8c:be:1b:5f:11:da:
44:52:5d:1e:e4:19:3a:b6:05:57:56:c2:6a:9d:16:
21:3c:a8:1b:80:6e:f5:83:b6:87:97:1e:c8:17:65:
89:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9D:1B:04:6E:B6:74:47:87:9D:89:98:DB:EE:B9:59:FD:0A:59:64
X509v3 Authority Key Identifier:
keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1b:8f:1b:e5:b3:a8:fd:65:ee:eb:b0:3e:04:ef:21:91:c6:
d5:2b:c5:c0:aa:78:69:ae:9f:62:36:77:62:7a:a1:92:f5:81:
4a:e3:4d:39:75:bf:74:ea:9c:bf:e1:ef:65:6c:29:77:b6:88:
ce:97:53:d4:c3:39:1f:49:02:43:2e:66:5e:03:52:c8:f0:98:
9a:3a:a7:db:0d:68:47:cd:fd:2e:ce:f6:78:ce:c3:8d:1b:0b:
5a:0c:63:71:7e:61:b1:f1:dd:a3:9d:f4:91:f2:bc:f2:ff:b1:
72:d4:5c:ae:da:02:6e:6f:38:f8:d6:87:6c:47:ab:8d:68:de:
94:32:77:42:17:e7:8e:34:be:13:66:df:f0:34:a5:4c:18:0a:
13:05:dd:5c:c8:9d:c3:b0:a9:a6:a9:be:c9:de:70:1d:8c:de:
3a:a2:16:ac:8c:c0:83:b2:e1:82:a8:8b:2d:3b:67:85:24:33:
b9:e8:22:79:35:9a:64:37:6c:e1:a0:9d:1e:cf:d5:57:14:be:
a8:9f:14:2f:9d:87:26:43:19:ff:2d:9b:04:ce:40:ce:76:fe:
b3:63:fe:f9:a8:77:87:ff:bd:8a:de:a0:63:7f:f1:3c:aa:ad:
e0:ac:10:1e:32:16:4b:f6:5f:f1:8b:7a:d7:28:b5:aa:29:78:
dc:b8:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:50 2025 by rpki-client