Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
File: L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json)
Hash identifier: 9eRESh4P6QnFMaucohU1soXeArEPMSj9muoDFOdypPU=
Subject key identifier: 37:35:77:B3:39:9E:8C:3B:08:2C:6A:81:8B:39:32:C1:CF:78:C8:89
Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5
Certificate issuer: /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
Manifest number: A8
Signing time: Fri 31 Jan 2025 05:15:16 +0000
Manifest this update: Fri 31 Jan 2025 05:15:15 +0000
Manifest next update: Fri 07 Feb 2025 05:15:15 +0000
Files and hashes: 1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: NghXF2UWk8AlnE1orVrkCy69AMNhX1ySpoW5yb57oEo=)
2: AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa (hash: xVEJPm+31bLznblOWhCpwIQYSTvCz1YQ0x0L0sMQxuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
Validity
Not Before: Jan 31 05:15:15 2025 GMT
Not After : Feb 7 05:15:15 2025 GMT
Subject: CN=679c5c63-f59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:ef:36:3f:90:39:62:31:3d:d0:4b:0e:c5:
b5:06:5c:9a:36:09:ab:f8:63:05:9e:45:71:29:0c:
d2:8b:9d:67:7f:0e:fc:a6:e6:5e:de:7d:e2:f2:77:
1d:14:16:76:25:01:c2:46:49:0e:12:0d:a9:ba:93:
ad:d5:80:71:cf:a7:a8:ab:70:e8:86:ff:79:35:bd:
ad:2a:75:63:47:29:42:07:82:6b:d0:a8:bc:85:2d:
00:7b:3c:53:10:47:45:72:93:4a:87:26:49:3d:e9:
e3:2a:e2:7c:33:e0:d7:c1:34:fa:72:f2:99:df:02:
34:52:3e:26:10:75:4d:f4:e6:fa:a4:9b:16:d5:65:
64:47:3e:03:e1:a1:a0:c6:07:24:a2:94:50:d7:c7:
5c:65:e1:28:6c:6f:27:c4:50:d9:f0:5f:ba:34:6a:
e8:bf:b6:e1:24:00:b8:88:23:5b:53:c1:59:7d:7c:
a4:55:88:4a:c4:59:8c:87:3e:69:57:d1:2c:35:d5:
b1:6d:74:75:96:f8:50:58:95:25:b2:e8:e6:63:38:
5c:11:2f:2d:b6:ef:0a:a8:77:19:64:9d:e6:2d:b9:
1b:57:27:46:11:77:39:10:87:d7:dc:99:8a:fa:ee:
06:1d:1b:b0:15:6a:c5:7a:f6:a8:bd:0b:d6:57:29:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:35:77:B3:39:9E:8C:3B:08:2C:6A:81:8B:39:32:C1:CF:78:C8:89
X509v3 Authority Key Identifier:
keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:5d:d9:97:a8:e8:db:eb:49:78:5d:ee:b3:ed:38:f1:13:40:
7e:94:5d:2c:d3:74:84:12:17:05:31:14:01:0d:4f:ac:a9:fc:
d9:00:da:1c:08:da:5e:72:cd:ea:e5:0d:82:09:75:46:34:cf:
3d:a5:ed:e3:c7:2c:32:a1:e5:bd:ba:7e:fe:bd:46:bd:56:19:
e2:64:99:3b:89:71:d9:2e:9a:a0:75:31:92:47:98:cf:80:06:
10:54:69:3b:98:3b:c2:a3:e0:6d:2d:f2:50:43:ad:69:70:65:
12:76:5d:b8:9a:0e:50:24:34:b2:ce:d7:b8:bd:38:ff:c0:01:
70:be:14:31:0e:04:63:38:39:a3:5d:85:03:8d:81:30:e2:e3:
81:4b:ae:0d:79:82:7e:7b:aa:88:bd:b7:a4:5d:49:2c:91:b5:
28:51:10:bc:92:26:05:0a:d8:85:d3:bf:90:8b:ae:2c:a0:27:
e9:5f:d9:35:3f:7c:2e:da:fa:92:bd:3c:14:6c:96:94:b6:52:
a2:e4:f6:08:33:46:ba:bf:89:8d:e8:f2:0b:b2:a5:a3:b4:05:
5d:9d:94:9e:86:b8:50:29:c2:41:46:a0:29:d6:fc:33:17:ed:
3c:8e:38:c5:b3:93:08:68:41:35:0a:74:38:2a:d2:20:49:4b:
3d:b0:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:45 2025 by rpki-client