Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
File: 19wEkNjuc-uWU-jiR2_8-4l0qt8.mft (raw, json)
Hash identifier: 4AXzJbp50E2Q6EIL68dcNkAxxbUlEfZr3B5sPNs1zj0=
Subject key identifier: 26:31:EE:68:E3:A6:E1:A6:23:8D:96:7C:EE:3A:80:80:1D:A7:5A:D4
Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF
Certificate issuer: /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
Certificate serial: 0476
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
Manifest number: 0470
Signing time: Fri 31 Jan 2025 00:08:24 +0000
Manifest this update: Fri 31 Jan 2025 00:08:23 +0000
Manifest next update: Fri 07 Feb 2025 00:08:23 +0000
Files and hashes: 1: 19wEkNjuc-uWU-jiR2_8-4l0qt8.crl (hash: kSBNhV+jQa3pv6PzMKCpvUN5ooiHnLRwyOBmUP/mj/g=)
2: 233E4D90309811ECAED04B4AC4F9AE02.roa (hash: mvkJO23Rhne3EOWrAQ2tX8d2RfjeSAd4lU2tWfhmNuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
Validity
Not Before: Jan 31 00:08:23 2025 GMT
Not After : Feb 7 00:08:23 2025 GMT
Subject: CN=679c1478-dc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:60:b8:41:86:f4:61:e9:59:ea:60:4a:7e:
26:f4:c6:ef:16:eb:68:14:7e:76:0b:6a:d2:02:09:
8a:29:64:5e:ac:c1:67:a6:bc:fd:ab:05:d8:3f:b4:
20:40:ec:31:25:fc:29:b0:ae:f3:17:78:47:39:9f:
5e:45:39:40:9f:f1:4f:0f:77:ba:f0:93:14:4d:06:
16:b2:bd:fd:7a:02:04:24:4c:24:fb:4f:5a:aa:7d:
c2:d9:54:50:bd:45:b4:b6:1b:e3:42:9a:78:f0:50:
13:60:90:ef:74:da:93:31:fa:51:67:8c:64:ef:c1:
68:d8:d5:49:ae:89:68:cd:15:25:ba:c9:b2:f3:5d:
28:4c:b3:db:fb:c7:0d:09:90:b2:2d:08:49:09:62:
0d:2a:05:92:20:81:9b:f9:67:a4:00:3c:6c:c5:25:
ec:ef:40:79:23:90:50:32:85:74:67:e4:01:71:59:
42:1a:97:ec:a0:c8:62:6f:92:fc:85:00:c6:ee:9b:
3f:84:68:26:63:6b:73:62:0d:da:9a:21:ed:61:0a:
20:0c:ff:9e:aa:30:f9:24:c4:49:54:9b:2a:17:a4:
19:81:6a:ba:a9:ed:2f:a1:18:57:22:cf:e3:63:22:
93:80:4e:8f:6b:e2:2c:d7:b8:4e:5e:8e:45:10:5a:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:31:EE:68:E3:A6:E1:A6:23:8D:96:7C:EE:3A:80:80:1D:A7:5A:D4
X509v3 Authority Key Identifier:
keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:09:20:04:30:95:ea:0b:14:0e:24:f1:76:ee:81:ca:50:22:
56:6c:e7:95:0b:23:05:4e:7b:43:3f:94:2c:9e:6e:ef:e1:8a:
1b:cd:74:47:5f:ab:40:33:bf:71:c0:64:8d:9e:e0:69:a3:0c:
69:0e:b9:1b:37:c3:7a:d6:e6:e5:72:f6:1c:1a:cb:93:4d:a8:
ac:ee:28:21:27:97:73:cf:f0:8b:3f:a5:3a:58:cb:c5:8b:b1:
1b:82:05:00:29:33:fb:1e:42:a7:65:aa:40:87:64:09:8e:f7:
0b:ce:0f:75:3a:a9:64:28:2b:92:20:66:52:2f:9d:c8:95:12:
a8:85:a3:00:97:ef:c0:8c:11:e6:bb:c3:50:1b:1c:04:0c:50:
c6:fb:8b:e8:f7:49:32:31:6d:b3:70:89:6a:c2:85:dc:dc:fe:
43:51:a9:43:a4:4a:dc:dc:80:c1:d1:9a:7b:98:16:ad:d2:6a:
d2:c5:04:60:69:ef:ac:11:d5:34:47:98:96:65:98:da:5b:59:
fc:34:f5:e1:9d:1b:ea:32:d3:a0:0e:8d:b4:0d:bc:1b:21:f2:
1a:2c:3e:a3:1f:81:d5:53:c3:b0:ed:8c:4d:d5:8f:ce:01:cf:
94:ef:ba:15:27:6d:a6:41:9e:db:84:1f:30:98:c1:f0:bf:66:
5c:e7:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:54 2025 by rpki-client