Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json)
Hash identifier: /Vcod/1AXR1/pjLYqzt5qvukyjlFSHqfgnj+fqrK1qA=
Subject key identifier: D7:6C:2F:C5:11:14:A1:C8:F3:50:14:DA:BC:BE:F6:3F:82:35:15:95
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial: 0433
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
Manifest number: 0425
Signing time: Fri 31 Jan 2025 00:25:20 +0000
Manifest this update: Fri 31 Jan 2025 00:25:19 +0000
Manifest next update: Fri 07 Feb 2025 00:25:19 +0000
Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: MtUGI3KSpRn71Ax60doj1CjWJxOQ95PSyY05nRmYOJQ=)
2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: My/AnfHzuVQXYQgSRRC6SAXx84s6nLjdhtAzMmqyjDg=)
3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE=)
4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: D+FMpyZsISfccSz7KiOlQqTZgWE7m1EZKNLzF9fgEyY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1075 (0x433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Validity
Not Before: Jan 31 00:25:19 2025 GMT
Not After : Feb 7 00:25:19 2025 GMT
Subject: CN=679c1870-e2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:c2:bb:4d:58:45:ac:a5:e5:8a:6a:35:43:
e0:b5:cd:97:d8:a8:d1:8e:ee:43:af:12:bb:f1:85:
9f:3d:2e:e5:cb:61:bd:4e:87:e0:66:ab:c9:fe:5d:
6c:02:7b:dc:97:ca:fa:b9:92:85:4a:35:21:96:3d:
a0:ba:2c:aa:8a:10:77:45:fc:a5:8a:cd:d7:ac:db:
6f:c1:e4:c1:bc:39:55:f5:c7:36:c8:11:bb:70:eb:
f8:34:ea:6f:10:0e:37:c5:2a:2c:0b:e0:dd:ee:90:
33:59:6d:ae:84:7c:81:ce:e1:6f:41:6a:ae:36:db:
82:6a:92:05:e7:4f:72:aa:df:e9:51:17:5a:1f:27:
ba:c4:cf:63:98:ec:38:ad:03:a4:e9:d9:9f:89:74:
48:41:88:74:e5:ba:b6:3c:87:cd:b0:05:26:57:cd:
6c:22:a1:e1:38:bc:dc:7c:b0:c3:e0:75:39:38:cb:
d4:3a:6d:40:78:ac:0b:f6:0f:02:a6:83:72:63:d1:
d5:ea:b9:ec:ad:99:7f:d0:70:e4:5f:af:a2:ad:9d:
2f:5c:f7:83:10:76:f0:19:4c:7f:c5:ad:ef:e4:f0:
cd:65:b9:b6:31:9e:a1:15:f1:34:c1:d1:5b:aa:8d:
79:83:e6:4e:69:1b:35:8f:fc:40:d2:79:fa:2e:8a:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:2F:C5:11:14:A1:C8:F3:50:14:DA:BC:BE:F6:3F:82:35:15:95
X509v3 Authority Key Identifier:
keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:32:50:eb:fa:42:1c:09:92:14:64:a7:dd:8e:bf:ee:23:15:
03:fe:7e:9d:61:f5:9d:fe:ab:35:74:d0:83:86:b0:04:ad:68:
1c:b2:62:10:03:33:3e:c6:43:1f:57:2d:cb:dd:83:15:3a:f0:
12:79:d9:3c:c5:68:2b:2d:30:aa:e4:1c:f3:aa:ce:f3:73:cf:
ad:19:6f:0e:1f:fe:03:8c:24:d3:0c:bd:4e:15:7e:39:04:48:
e8:f1:1b:22:95:3c:b2:9a:1f:c8:c3:bb:cc:5d:c8:55:2a:98:
c5:19:c7:a2:25:a4:7e:1e:66:7c:80:37:90:83:1b:76:4e:3e:
3a:0c:82:f4:ff:33:10:ee:4b:e5:b5:13:b5:9d:f5:a1:de:24:
5a:94:14:1c:64:a6:0d:76:8d:45:c0:9d:0b:54:c7:6a:3f:fb:
95:50:59:1a:ce:91:cd:ba:8d:d3:d4:37:0b:27:41:9e:6b:49:
1f:cb:36:78:8d:b7:7d:19:ec:90:70:51:8a:2a:e0:84:2c:a2:
80:91:6b:75:0c:4e:2c:38:d6:b9:e3:d0:56:78:e4:a3:98:e8:
ae:72:15:56:16:cf:d0:2c:fa:c0:29:d1:07:bb:12:b1:ec:58:
67:8d:b1:d8:fb:52:c3:47:15:29:72:d4:c4:1e:67:22:8e:65:
bd:ee:27:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:55 2025 by rpki-client