Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json)
Hash identifier: 90cjD667nft3QixIzCSK3VNr9WdGBnnQsR06Ngj/ePQ=
Subject key identifier: 34:3D:8C:18:CD:B2:8D:E2:4F:E1:17:A2:69:DC:93:91:71:1E:40:2E
Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D
Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
Certificate serial: 27E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
Manifest number: 27DF
Signing time: Fri 31 Jan 2025 15:38:23 +0000
Manifest this update: Fri 31 Jan 2025 15:38:22 +0000
Manifest next update: Fri 07 Feb 2025 15:38:22 +0000
Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: bUfUsAyMEW4yNsK5571lca2pfpFtmSiMfsZJvUyqXoY=)
2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: +GMl4Xu8VPkNDBOVR1baOfDzoyBidluum1AgF508r2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10212 (0x27e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
Validity
Not Before: Jan 31 15:38:22 2025 GMT
Not After : Feb 7 15:38:22 2025 GMT
Subject: CN=679cee6f-5c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:e3:20:a8:eb:e3:08:fd:ff:cf:b5:11:e7:
dc:4d:9f:c2:67:09:72:b1:47:d9:9f:a8:23:84:6b:
f3:6b:8d:c6:19:6e:1e:b9:20:7b:eb:67:aa:de:db:
63:8f:64:b0:19:bb:1e:82:c1:54:c2:2b:a1:fd:5d:
d8:ba:73:20:3f:33:b0:90:8b:ab:51:c4:25:c6:46:
bb:2d:1e:9c:63:17:c2:bb:d8:93:9f:ed:62:77:aa:
e2:1b:1b:f9:50:c4:ee:fd:e2:0e:3d:7d:30:40:98:
06:3e:df:fd:fe:12:c7:fd:53:39:40:5e:e9:89:55:
45:cb:3e:2e:12:57:68:81:5a:fb:c5:7a:f9:02:fc:
e5:65:fe:1d:ff:72:3f:50:ac:54:f6:42:eb:80:49:
78:a1:82:93:27:d4:69:4b:76:d8:e9:7a:c1:03:01:
ea:c4:02:a5:03:9d:6f:a8:56:e2:6d:42:0e:5a:1e:
bf:c9:08:b4:d8:5b:d7:bc:8b:76:e7:a6:3b:88:e3:
e8:38:13:7e:ed:37:6d:d4:e4:11:0e:a9:be:79:b0:
6b:40:31:17:6f:ba:a1:e2:92:e9:c1:77:28:19:a6:
0b:eb:08:73:e9:dd:a1:e0:14:42:03:e7:30:9c:3f:
c2:5c:bf:fd:19:03:5e:6c:92:b8:7c:d0:6f:9a:08:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:8C:18:CD:B2:8D:E2:4F:E1:17:A2:69:DC:93:91:71:1E:40:2E
X509v3 Authority Key Identifier:
keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ca:57:63:f7:07:4c:86:60:2b:1a:e7:ea:3e:1d:72:9b:ca:
fb:8f:e6:cc:1c:db:fe:ca:c8:38:d0:82:61:4f:b7:7f:50:02:
ad:cf:56:78:26:c3:5d:22:2f:bc:30:70:a5:83:68:5d:48:06:
62:ca:0d:0a:dd:68:37:8e:ad:0d:4e:a5:d5:02:42:47:e7:27:
cf:a3:ee:9b:65:1f:9e:99:01:1b:a9:3b:e0:c6:3f:96:04:ab:
45:e2:a5:4e:1c:63:67:0b:8c:5a:e8:07:39:ae:58:15:19:7a:
01:71:58:33:66:e4:64:30:b8:4a:06:e4:4c:4f:66:b7:19:dd:
3b:1a:ad:50:c2:b6:78:b4:17:8e:87:e9:21:f3:2b:5d:b4:68:
e5:23:64:42:ca:4c:60:3c:ee:ee:76:68:be:9b:d4:63:9a:37:
f4:78:21:28:c6:75:a3:ee:81:89:bb:3e:91:4b:0d:85:ab:72:
98:c7:8d:0e:5b:24:d3:b0:d9:2a:a8:7a:14:ed:f4:2b:3f:64:
3f:b8:98:f2:98:ff:2a:d2:2b:99:76:4f:e2:0b:43:84:de:7f:
d8:8b:72:ba:dc:75:5b:96:d2:99:5a:ff:7a:b1:82:05:bc:dd:
73:45:d0:83:7e:e0:2f:d3:1c:a5:ea:44:7e:7a:c7:4f:9e:12:
a5:0f:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:37 2025 by rpki-client