Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json)
Hash identifier: nU+vejf+Yqzb/5No5X6CEo4Enrb8vwG/xqJF1qBMHZg=
Subject key identifier: AF:BF:CE:10:EA:41:F6:83:DA:54:47:41:DA:85:89:9E:1F:3F:E5:13
Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
Manifest number: 0194
Signing time: Fri 31 Jan 2025 02:45:40 +0000
Manifest this update: Fri 31 Jan 2025 02:45:40 +0000
Manifest next update: Fri 07 Feb 2025 02:45:40 +0000
Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: JSiuxYwc6q5c3gTX/4X6QyYlNi2UpAIs0qhOgpMxdzs=)
2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: ZvVWR24fiTgTKL1AgxjjU+8hvOzH690FD/ftf9Pub2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Validity
Not Before: Jan 31 02:45:40 2025 GMT
Not After : Feb 7 02:45:40 2025 GMT
Subject: CN=679c3954-eb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:fc:c1:b8:e4:85:1f:96:ea:cc:a4:a7:09:
3c:2f:5e:75:c5:fe:46:09:71:a9:a7:8c:f7:85:a4:
47:d5:fd:43:34:e2:32:5d:31:b9:ba:50:1f:7a:45:
8f:3c:e6:b7:08:55:43:73:4c:ba:d0:40:40:8c:69:
ee:f9:ac:d7:31:1c:66:23:f9:87:85:1c:fb:a2:17:
7a:1b:bf:f8:ab:ee:a7:27:f0:91:3f:cb:f0:24:dc:
b3:ea:ad:0d:f7:62:6b:fe:c6:63:30:c9:34:db:15:
e2:76:97:83:2c:2c:ed:5c:28:b8:74:0e:29:1f:67:
da:56:54:cf:8f:3a:19:ab:02:45:04:e9:ab:d7:48:
03:f7:e0:0a:93:b6:9a:e7:cb:09:5c:51:5a:63:93:
68:bc:2b:91:2c:2c:65:05:bf:ef:99:f6:35:ed:b5:
ed:cc:e7:5e:8a:df:3b:1e:86:14:90:b2:63:85:69:
95:e3:13:2c:6a:c5:ba:cb:af:7b:c6:c9:13:72:c0:
b8:04:66:82:3c:15:3b:3e:18:0f:e9:56:d6:db:a8:
f2:9c:a3:d2:02:a1:9e:7e:4e:58:bd:12:1b:b1:25:
7f:70:07:fb:c2:e8:b5:9e:e0:29:bb:57:b8:fd:4c:
e4:7f:2d:d9:9c:7c:30:0c:46:9b:96:ea:de:52:7a:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BF:CE:10:EA:41:F6:83:DA:54:47:41:DA:85:89:9E:1F:3F:E5:13
X509v3 Authority Key Identifier:
keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ed:58:d2:0e:52:81:79:af:2d:84:85:42:4e:46:13:95:b9:
22:62:f9:79:d8:99:74:d8:1b:34:2b:d1:ab:ec:ab:06:2f:5b:
ff:aa:35:a4:65:58:00:15:0c:43:6d:f6:b7:5a:ea:9b:0d:17:
79:56:6a:47:77:8a:2d:ee:4e:63:9b:8a:8d:ca:9f:2b:f1:47:
ed:b6:29:63:b7:4f:ed:fd:e2:4c:79:9f:f7:c4:4d:08:8d:1d:
e3:86:c8:4a:28:8a:cc:4d:12:fd:91:ec:3f:2b:ee:8a:47:a0:
71:a8:37:d8:ce:de:7f:95:24:ec:4c:d9:44:6d:29:51:ee:82:
46:85:67:a2:aa:89:fd:34:6f:6f:8f:15:5f:ca:6e:84:64:90:
b3:70:7b:f7:68:3b:9c:19:ef:fd:3d:e4:ee:75:2d:d1:25:fa:
a5:ab:f1:32:67:b2:fd:cf:89:f3:6b:05:09:6a:c9:9c:20:81:
31:2d:71:61:59:c6:2b:0c:96:3f:59:3f:97:df:ff:66:76:96:
05:9e:dd:f4:ef:5c:f6:ca:7b:62:5b:cd:b7:40:d9:4f:d8:a0:
65:4b:81:db:26:44:47:27:b7:3d:c3:eb:b3:14:14:aa:f9:a6:
28:87:f4:5c:40:cb:09:d1:01:9d:39:1b:c5:aa:1b:e4:20:f0:
c9:16:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:53 2025 by rpki-client