Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
File: -NaTomlkzTxaGZ0sJu0iZHog534.mft (raw, json)
Hash identifier: 4vVl5GSAYKEPndWB3vW13zRlWnQiNkvfs4woSmUygOI=
Subject key identifier: 7C:CF:8F:2A:33:36:62:EE:E8:B4:B4:B7:54:0B:BC:05:79:43:DC:8A
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
Manifest number: 01C6
Signing time: Fri 31 Jan 2025 02:24:55 +0000
Manifest this update: Fri 31 Jan 2025 02:24:54 +0000
Manifest next update: Fri 07 Feb 2025 02:24:54 +0000
Files and hashes: 1: -NaTomlkzTxaGZ0sJu0iZHog534.crl (hash: vCmxsbWQX74qjFhaqz+ini+YN38XCyS7KD5pheHxADg=)
2: 256273EE355011EEBCB7D945C4F9AE02.roa (hash: lqcM6RjOOpcHbcMSpsAk23mqpVkVNUDVGMmcyhyBg8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Validity
Not Before: Jan 31 02:24:54 2025 GMT
Not After : Feb 7 02:24:54 2025 GMT
Subject: CN=679c3477-a1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:d0:a1:8d:ea:6d:18:35:c4:3f:a6:e0:13:
03:6e:35:cb:7a:b0:5a:97:04:eb:bb:32:ee:d8:70:
70:01:52:8a:c1:69:54:e7:d8:74:33:b7:ae:1d:1b:
13:8b:7a:a8:26:ab:04:eb:eb:a3:a0:4b:16:cc:ad:
6d:fc:17:4a:6b:29:34:fc:28:b8:df:42:ef:24:a6:
79:11:e8:dc:6a:46:a5:b4:16:fb:7b:75:43:96:2e:
23:42:df:2f:57:ab:a9:63:f5:78:29:10:06:47:39:
54:e5:55:e5:6f:03:f5:11:24:72:0c:33:47:1b:4d:
dd:26:a9:99:bd:ee:d7:75:d1:af:79:4c:ef:6d:a0:
ab:51:f6:20:a5:38:cc:fe:bb:44:14:eb:21:5f:bf:
d1:fe:fd:0b:f5:51:bf:cc:97:34:1c:5e:3b:c0:43:
4e:75:8f:e4:d3:c3:a2:e5:ca:3e:b6:02:08:79:b1:
55:1d:76:5c:04:ba:68:96:75:9d:0b:e9:f4:51:14:
d8:38:65:eb:bb:1e:bb:8c:00:27:c3:6a:8c:1b:b8:
b3:b6:5a:5b:ca:13:cf:04:b9:fe:41:d7:84:50:3c:
cd:d6:06:35:7b:9b:2b:04:2a:62:1c:e1:e1:a5:83:
3f:fb:d3:d6:35:bb:30:2b:5f:64:bc:a1:9a:88:d3:
51:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CF:8F:2A:33:36:62:EE:E8:B4:B4:B7:54:0B:BC:05:79:43:DC:8A
X509v3 Authority Key Identifier:
keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:63:ab:fc:a1:fb:1b:43:77:a3:11:81:ec:20:5b:18:de:42:
2f:b4:32:03:9a:82:71:a2:96:29:37:b5:94:50:94:b6:59:a5:
5c:d6:ee:fa:c7:64:4f:57:fa:92:d4:d9:53:25:9b:75:40:17:
12:0c:87:72:29:57:df:c2:fd:ea:13:2a:33:d8:d1:b5:97:b2:
72:6b:28:6d:06:9c:25:a6:7f:08:36:fd:b7:f4:c9:89:b4:cd:
38:9f:73:6b:82:cf:96:ee:45:ae:4d:be:4d:66:77:69:8c:d7:
0a:26:5a:7d:38:40:f1:6b:e9:95:df:31:ca:4e:24:ae:13:c8:
6e:02:63:a9:ee:48:ca:ab:92:5c:ff:2b:08:0d:6f:3c:82:8c:
0f:a7:32:cd:a9:62:8f:f1:90:4d:f8:34:28:58:7e:7c:71:dc:
b8:23:cb:6f:2c:13:bd:6a:aa:4c:2d:0b:39:7b:ef:a0:4e:7a:
a3:5c:0a:bc:e5:b3:47:a2:45:bf:42:38:a6:b9:6c:14:92:6e:
88:ff:13:43:90:81:ce:a7:c8:ac:88:b0:95:10:82:9c:0b:94:
d5:28:bd:48:ab:c6:b8:db:7c:07:0d:79:df:84:47:cc:3d:73:
48:14:80:2c:27:42:12:2b:85:06:79:5f:26:c4:cb:5a:3a:e1:
92:00:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:50:48 2025 by rpki-client