Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
File: aFCqv5vavya_oJKDAh_pE9aVbjI.mft (raw, json)
Hash identifier: ofZWX//m44sa9GEn8xp2TRkGR1FIbaTxFNP+5Nu0rlM=
Subject key identifier: D6:63:4D:43:1C:20:5D:0D:8F:50:5F:74:72:FA:6D:BA:98:EF:7B:5A
Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
Certificate issuer: /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Certificate serial: 12CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
Manifest number: 12BD
Signing time: Fri 31 Jan 2025 17:04:49 +0000
Manifest this update: Fri 31 Jan 2025 17:04:48 +0000
Manifest next update: Fri 07 Feb 2025 17:04:48 +0000
Files and hashes: 1: aFCqv5vavya_oJKDAh_pE9aVbjI.crl (hash: vrc+Ru5vS3A93rn15X5XONePM/vD9AxJmfLmUN3CGb0=)
2: 583F2920A6E611EF9BD0C728C4F9AE02.roa (hash: QCjfIjSatqEkani4vFyMBR81W4WM4U5LTw8JrcC/R5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4813 (0x12cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Validity
Not Before: Jan 31 17:04:48 2025 GMT
Not After : Feb 7 17:04:48 2025 GMT
Subject: CN=679d02b0-42b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:dc:8b:bb:eb:b6:f2:06:1b:21:7d:42:84:
0f:29:74:45:61:b9:01:b9:d5:a0:2d:17:42:a8:28:
21:ba:28:dc:da:56:0a:60:48:52:0c:04:97:ce:ef:
c0:81:61:1a:a4:5c:e9:53:b5:9e:62:a4:a4:d1:ad:
cb:02:1e:d3:1c:f0:56:f7:13:bb:2e:7e:4a:90:71:
a6:cb:a5:65:93:9a:12:4a:f9:29:ba:27:f8:41:11:
e0:c5:cc:90:58:38:86:22:7f:c6:ed:75:30:2c:37:
be:f8:d4:43:71:f3:56:4f:24:2e:5a:95:69:9d:6c:
9a:3a:7f:0f:86:49:54:42:33:35:b2:80:8c:9d:9c:
6f:d6:e9:ca:e0:d3:5b:41:b9:76:7c:5c:63:67:33:
b9:e3:48:03:66:81:cd:c8:bf:f0:a2:9b:4b:87:36:
f2:c7:5a:b2:7e:8f:ab:f5:84:d5:7d:c3:c2:37:74:
6b:7e:2a:9c:04:7a:f7:59:af:d7:2e:a1:f3:02:8e:
31:db:6e:64:62:74:64:5f:8f:30:3b:1a:3b:9c:f9:
42:f4:76:66:9b:2c:27:e1:8b:a3:f6:44:ad:02:f2:
e4:37:10:50:52:90:8a:aa:42:dd:03:3e:0f:19:98:
38:f4:9c:32:7f:09:09:5e:19:f8:06:8c:06:75:37:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:4D:43:1C:20:5D:0D:8F:50:5F:74:72:FA:6D:BA:98:EF:7B:5A
X509v3 Authority Key Identifier:
keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:2f:03:43:c8:4d:a1:04:16:c5:82:1b:29:66:c5:f3:58:24:
48:c2:1b:ae:44:a0:2f:b6:4e:bd:71:51:9e:ed:a7:cc:ce:8e:
51:de:0c:36:14:8c:8a:4a:e8:c0:4d:28:bb:db:ab:4c:a5:c7:
dd:36:15:1a:fe:64:7e:08:9a:69:f9:cb:c0:02:40:fe:57:15:
f7:57:84:26:04:85:35:48:e4:39:6e:b8:fb:44:4b:a8:11:4a:
8c:83:2e:78:27:a3:8b:22:3d:30:2d:be:c7:77:48:90:6b:3e:
c3:29:57:28:7c:57:f2:d3:52:34:48:4f:a9:9f:e2:e8:d9:8b:
fe:f5:33:8c:ca:e0:ea:8d:28:4a:43:74:80:e5:6a:2f:33:49:
3e:ad:45:38:a5:f7:51:89:31:25:0e:5d:6f:cd:c0:de:67:31:
5a:da:84:f3:06:d2:05:81:d7:41:a1:35:9d:52:f9:0d:e0:dc:
bf:dd:74:83:af:c3:a5:4a:01:5b:a5:14:a0:20:38:dc:68:0c:
0c:67:9e:8a:d1:bd:2b:2f:4c:99:31:a6:74:f1:0f:c6:65:a2:
f2:4f:04:69:f5:8a:2f:7f:4b:f7:fb:14:12:c4:c9:9f:c8:3f:
cb:62:aa:c2:7c:78:7e:c3:4f:e8:95:f3:9f:6d:2f:52:df:05:
eb:50:d0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:32 2025 by rpki-client