Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json)
Hash identifier: 6GmXMXqflB75AnXcRsvDEwGdOL1mcwOTZ1xS4W+S8zI=
Subject key identifier: 6F:65:59:BE:D0:75:34:51:19:B6:B5:87:44:D8:F4:8C:D9:07:6B:FA
Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20
Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
Certificate serial: 0DEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
Manifest number: 0DE7
Signing time: Fri 31 Jan 2025 17:49:55 +0000
Manifest this update: Fri 31 Jan 2025 17:49:55 +0000
Manifest next update: Fri 07 Feb 2025 17:49:55 +0000
Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: Rb02yyv1+yZAbZovkyK8QUby4d73eTDdtfVrvQs+99A=)
2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: Rv5KdZYUUJXCu7wDvbb7pgmO3r2+H7sPCodZxryWYjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3566 (0xdee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
Validity
Not Before: Jan 31 17:49:55 2025 GMT
Not After : Feb 7 17:49:55 2025 GMT
Subject: CN=679d0d43-33cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:f0:33:44:e2:77:be:9b:77:89:85:04:04:
65:e3:29:9d:e7:e4:98:7e:f7:65:5c:52:bf:3a:28:
2c:14:f1:17:a8:06:88:82:a0:0f:a0:67:39:b0:06:
17:06:a3:65:fd:f1:f0:f8:d5:8f:a6:62:0a:28:9f:
25:b3:66:13:e9:40:72:5d:db:d7:f8:96:00:bb:03:
f5:f3:f8:a2:73:f5:d9:03:9c:30:31:c2:3d:a6:63:
3c:4b:ff:95:1d:81:16:b6:75:55:80:b4:48:c2:0c:
e0:a2:78:f0:4f:57:bb:78:95:29:db:65:6e:c4:ca:
24:7e:eb:57:87:49:64:e1:9b:20:0a:ab:2e:64:38:
55:43:ff:70:6c:53:dd:d5:8e:d4:c2:3d:c2:f2:a7:
e6:ec:67:e0:9d:91:b2:08:10:ba:1d:17:52:84:95:
5e:f1:75:6e:bc:3f:16:18:d4:a4:9e:98:91:43:af:
99:7d:99:2e:87:7e:00:74:ce:b1:dd:f4:5c:c5:19:
48:66:73:3d:f1:9f:99:9d:44:ba:4c:09:6b:07:7b:
b7:cc:33:93:7b:08:09:42:62:57:42:15:45:e5:83:
6c:94:eb:21:b1:aa:f5:e9:79:10:1f:a1:69:03:b3:
5b:1f:03:c8:7b:f8:78:82:a3:7e:36:6c:a0:99:8d:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:65:59:BE:D0:75:34:51:19:B6:B5:87:44:D8:F4:8C:D9:07:6B:FA
X509v3 Authority Key Identifier:
keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:d5:62:23:6e:d9:a4:ca:5c:a5:07:69:ac:66:67:a0:2f:f4:
70:95:f9:99:c1:31:7b:11:4e:89:e8:49:a6:aa:f2:48:14:f5:
d6:25:95:34:f0:ad:a7:36:ae:02:63:3e:de:ba:bc:55:5a:8a:
a2:ff:a0:91:73:22:18:d2:d3:9c:3c:25:e3:82:0c:78:42:09:
c6:f5:45:ae:67:6b:f6:fd:b2:39:68:20:91:2c:41:03:25:f2:
d4:40:a6:7a:4b:a8:96:37:81:0d:12:32:af:c2:24:9d:c1:2c:
78:0b:fe:c1:f1:fe:fd:3b:09:0b:32:de:23:a4:63:22:80:1f:
d6:1b:27:01:78:2c:ce:01:4c:05:42:0a:a6:c0:19:df:00:7a:
b4:ef:c8:c8:d7:21:d5:44:28:18:e2:45:5c:b5:f4:52:ba:0e:
6d:cb:b9:a8:f9:fc:cb:13:3c:c0:b8:03:17:61:b4:80:0d:46:
9d:ff:d4:73:89:11:56:2f:e3:f9:06:31:5f:3d:89:c0:9f:21:
af:a3:e3:d1:57:fb:83:a2:d7:4f:59:cc:2d:a7:8d:16:8c:11:
28:bf:84:fd:a8:ec:16:41:bd:ef:cc:e0:71:65:6a:d2:65:7c:
83:b0:e7:74:8b:a2:e8:84:a4:4c:1d:4a:11:23:7d:7c:6a:a7:
d7:b1:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:51:13 2025 by rpki-client