Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
File: votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json)
Hash identifier: lwJ88016N3ToWJGrWZC4rXoDdmkUWi+P/Z1jMkDSQqQ=
Subject key identifier: BD:9E:4F:9C:A0:24:8C:35:9C:7F:4D:DC:F0:3B:40:6F:1E:CD:F5:47
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
Manifest number: 11
Signing time: Fri 31 Jan 2025 07:06:10 +0000
Manifest this update: Fri 31 Jan 2025 07:06:10 +0000
Manifest next update: Fri 07 Feb 2025 07:06:10 +0000
Files and hashes: 1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: E71R5MTC032NBgapIBXp4raWBl3KuCldJCRtYin7DYo=)
2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: q3EE6bhQvO1jqMvzi5TnaMDMrsSHuVeWmQU0kCxzZeQ=)
3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: +20O4NUWPTxqKeXepVeDCO/g+GXNSbJwYfdmkDR6B2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Validity
Not Before: Jan 31 07:06:10 2025 GMT
Not After : Feb 7 07:06:10 2025 GMT
Subject: CN=679c7662-814a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:f3:e8:f6:fb:ff:5a:b9:f6:73:c0:9f:69:
d8:78:44:84:24:b2:0a:f1:b5:1f:a5:76:9f:67:7d:
59:1b:ca:e1:7e:92:d9:58:d2:73:97:20:ba:77:b3:
67:4d:56:13:13:89:b0:63:ec:5e:1c:3a:bc:bf:f2:
63:5f:42:90:20:dd:f0:c4:d5:2c:8a:f0:df:ee:51:
51:e1:84:52:60:c2:fa:e3:94:f9:7c:33:23:a6:f9:
b1:c6:fd:16:71:57:74:c3:fe:bb:e3:31:07:8f:ea:
14:2f:45:6c:0d:3d:55:87:e2:68:5e:b0:05:2b:35:
77:c1:40:38:02:25:3d:62:94:a2:91:29:58:f3:03:
45:a5:54:be:3e:d3:39:b5:89:3e:ed:28:b7:56:3b:
88:12:53:c5:67:e6:d9:45:13:6a:f3:e4:3c:f2:91:
36:4c:b0:0d:1d:2e:10:c2:43:8d:ed:80:58:46:88:
a8:f4:0b:cf:b9:ad:cc:40:ad:08:4f:ea:b7:c2:c8:
38:c6:09:e3:9f:4c:f3:a0:91:5b:52:7d:cc:bb:60:
23:a3:0b:3f:1d:e4:c9:c1:f7:90:d1:1c:3b:2f:44:
92:83:8d:25:9e:4c:74:cb:07:38:6b:2d:90:7e:4b:
62:6b:7e:a6:c8:45:cf:f6:83:36:b1:b2:ad:58:ac:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:4F:9C:A0:24:8C:35:9C:7F:4D:DC:F0:3B:40:6F:1E:CD:F5:47
X509v3 Authority Key Identifier:
keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:37:cd:40:96:52:40:66:3d:21:ad:25:36:19:34:99:36:7b:
6c:2f:d2:03:9e:01:84:64:03:18:b6:f0:c4:23:6d:c3:08:9a:
67:fe:84:7e:ea:dc:21:f0:05:74:29:9a:a7:df:50:e4:49:e7:
18:b6:bf:25:2f:c3:79:61:74:2f:a4:1a:23:4c:70:4d:0c:e0:
d3:7e:d0:17:0c:a2:d4:1d:c3:a5:bb:9e:94:68:5e:c3:8c:df:
21:e4:ea:25:06:8d:66:8c:a7:8e:27:86:0c:d8:a7:a1:c7:c1:
30:a6:3c:51:a2:f9:44:c4:33:1a:96:ee:03:78:05:7a:67:2f:
c6:18:23:b7:a8:fc:34:fd:7c:0e:bc:8c:b4:51:c1:5b:25:ab:
a9:dd:28:5d:fa:fd:04:cb:22:87:d5:2d:7b:28:f0:eb:f0:6f:
d6:ba:0a:b3:61:6b:4d:2d:c6:48:e2:78:36:8f:e6:88:64:13:
3e:fe:ac:44:ec:ff:cd:95:a7:06:74:97:44:1e:60:69:49:5e:
b6:25:ff:66:ae:60:06:42:f0:92:3e:af:e6:ab:b2:cd:b0:ce:
0f:5f:0a:ff:65:03:bf:74:b6:a0:ad:71:66:0f:0f:3d:a8:68:
4f:98:4e:58:aa:9c:bb:d2:f3:d1:2e:36:5e:da:4e:ce:af:f6:
cd:1d:73:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:57 2025 by rpki-client