
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json)
Hash identifier: mqljZ8CXFTfCPoPAWsNirzjG4NMNTMqaZIWJGXsQZt4=
Subject key identifier: 55:98:F7:02:81:7D:81:0A:45:3D:2A:EB:3D:76:A6:D3:AE:98:66:67
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial: 0B01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
Manifest number: 0AEC
Signing time: Thu 30 Jan 2025 19:23:22 +0000
Manifest this update: Thu 30 Jan 2025 19:23:22 +0000
Manifest next update: Thu 06 Feb 2025 19:23:22 +0000
Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: WQz6xiXTKbC4Or0WU8gKf+9wOgQAmFziU3RY3Z1td38=)
2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: da18YanehMb25ZME1c4CpzCwhlEVLs96RlfGiZoiMxU=)
3: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: feQeohVrk3aa2EM/daTKcvI0d6w6k0q2b/efqxvduBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2817 (0xb01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Validity
Not Before: Jan 30 19:23:22 2025 GMT
Not After : Feb 6 19:23:22 2025 GMT
Subject: CN=679bd1aa-fa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:6a:2d:92:89:6a:d5:86:43:83:c5:ec:c5:
c7:f1:1f:84:12:1d:b6:f1:a4:72:9d:4e:9d:83:40:
53:64:15:ac:12:8c:ea:64:fd:9b:b4:af:f1:18:68:
34:da:c3:b9:4c:5d:20:b5:e8:74:1c:73:dc:56:db:
df:f9:82:6c:96:d5:85:4a:39:d1:30:94:6a:e0:30:
ff:c5:7c:66:85:9a:ad:02:68:da:0d:56:07:6f:e7:
99:1f:73:4d:e8:6c:98:6e:93:a3:65:70:60:c2:bc:
9c:44:d5:f2:08:4e:16:9a:d2:77:2a:9b:f9:3c:e5:
20:3d:ad:53:77:23:62:5b:dd:17:09:90:ab:df:4e:
6d:a0:da:eb:b9:02:b8:2c:d8:6e:0c:ae:fe:27:31:
02:22:d3:63:75:fa:23:6a:82:c8:fe:ca:6b:fb:5a:
d7:a5:5c:d0:3a:4f:4f:83:cb:a2:91:b0:18:be:54:
7b:01:50:56:be:eb:8a:ec:7b:c0:81:fb:68:cb:47:
b8:24:5c:4e:a9:be:f9:26:8d:21:4a:d8:ea:98:09:
c2:fc:d1:b1:27:95:61:0e:2e:d6:72:b5:89:ac:a2:
22:57:44:85:13:88:64:74:32:50:92:e2:a8:00:a9:
07:e9:d7:cc:32:5c:93:32:ca:20:5f:54:a7:f4:fe:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:98:F7:02:81:7D:81:0A:45:3D:2A:EB:3D:76:A6:D3:AE:98:66:67
X509v3 Authority Key Identifier:
keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4d:cc:b1:67:7c:b1:a3:91:28:33:a2:db:39:eb:18:d6:d1:
1b:ee:ef:fc:83:fa:6b:cf:ef:22:4a:72:98:1b:2a:eb:10:ba:
aa:65:5f:c3:08:8d:6f:6e:ac:6a:8a:55:c6:e6:f5:0b:19:07:
5c:ce:30:37:c3:58:63:73:8f:3a:6e:36:b5:b3:31:6e:b3:f6:
b8:6b:96:ac:64:c2:de:16:cf:08:80:fb:ca:8a:04:2f:55:47:
de:7a:9e:4b:1b:e1:0b:a5:0e:46:4e:d2:08:91:44:d6:7c:1a:
c2:c8:99:0b:45:e0:70:c9:1a:c6:50:bf:a6:14:06:72:c2:4a:
d0:d0:d5:4c:5a:f4:fd:30:80:6c:68:d9:87:aa:db:4e:29:f5:
98:e2:b7:ec:5a:47:30:f7:56:fd:d9:da:e7:d1:1b:dd:c2:5f:
60:c5:0e:37:ce:23:05:28:68:3a:8e:0f:49:50:2c:08:a6:5d:
87:f1:5b:62:7a:42:23:d4:f9:64:60:aa:2f:13:e7:48:e9:7c:
90:28:ee:fd:35:e6:16:06:b9:6d:fd:3e:3f:ff:eb:da:53:23:
99:f3:99:cf:63:84:50:84:09:84:30:ce:e8:a0:0e:08:c8:fa:
89:8c:5d:3b:44:46:49:dc:5d:95:39:1b:19:6a:aa:98:cb:6c:
22:89:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:22 2025 by rpki-client