Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
File: sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json)
Hash identifier: ZvwJR3LVzbFRpzQBygH69DQqbjWIrjs7xGWyhkFA+aY=
Subject key identifier: 8D:F4:F0:CD:A2:68:02:52:84:2F:50:62:82:6E:A4:E4:15:28:5A:0D
Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40
Certificate issuer: /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
Certificate serial: 344A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
Manifest number: 3448
Signing time: Fri 31 Jan 2025 15:09:38 +0000
Manifest this update: Fri 31 Jan 2025 15:09:38 +0000
Manifest next update: Fri 07 Feb 2025 15:09:38 +0000
Files and hashes: 1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: w2gTqf9JiIr7NvelgzdypxsW1Dh+vinkg/2+PlgpND4=)
2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: t0r89bYo/YLfBIznDm5VJcksHUIZupXS77KseDePVYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13386 (0x344a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
Validity
Not Before: Jan 31 15:09:38 2025 GMT
Not After : Feb 7 15:09:38 2025 GMT
Subject: CN=679ce7b2-a3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:5b:a5:e4:34:78:08:f4:a2:58:70:37:7c:
51:51:39:80:7a:37:54:79:d5:1b:4c:54:95:94:38:
73:ae:b6:e9:c1:e8:f9:77:cf:ef:48:54:53:8e:bc:
51:69:73:5b:e1:be:46:d2:cc:f8:ac:72:b3:9f:63:
09:2f:57:a6:a9:ff:d5:e1:2f:ea:73:ca:40:0e:ea:
3f:6e:f2:77:b8:93:30:3f:6a:a7:9b:42:8f:18:07:
e9:ba:d0:c4:ef:e8:a2:c9:0e:ca:1e:cc:f8:6b:e7:
de:96:5b:68:29:70:10:be:05:c7:00:52:ec:06:86:
75:ae:63:3a:35:d9:d6:48:d3:6f:33:08:3e:f9:f8:
0a:39:a2:25:40:0c:cf:c4:aa:b3:1b:2a:fc:d5:85:
74:d4:d6:c4:f0:ff:4c:ce:78:3b:65:50:6d:6e:41:
59:6b:33:b0:27:d5:6e:c2:c0:c7:54:8e:68:03:13:
7d:39:90:83:dd:92:9d:6e:08:4c:dd:94:82:fb:a6:
c9:12:8b:5f:c9:d8:c0:f6:ee:80:6d:20:de:36:8d:
f0:ea:80:a7:d8:50:7d:c1:e8:06:e3:19:cd:95:ba:
47:82:fe:ad:89:15:b4:78:44:e4:1d:60:74:88:b2:
59:9b:88:7a:fe:ca:ff:f4:a8:2b:d3:2a:45:57:68:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:F0:CD:A2:68:02:52:84:2F:50:62:82:6E:A4:E4:15:28:5A:0D
X509v3 Authority Key Identifier:
keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f7:aa:92:79:72:8b:01:d2:44:8b:cc:35:4a:14:cd:b4:54:
5c:1d:35:0e:51:11:8b:e5:5a:6a:2f:03:77:01:7a:23:09:05:
e0:6b:8f:5f:d7:fc:1c:14:bc:06:43:b1:fe:da:0f:a1:d6:31:
a4:84:13:83:a1:27:14:67:7b:b6:67:67:71:ed:b9:b6:bc:24:
f7:27:83:08:d3:b9:19:40:0c:62:24:21:de:66:d5:4a:80:e8:
de:ec:09:20:5c:10:c9:31:c5:e6:7c:e1:25:55:8e:ee:c8:ea:
41:56:79:e9:91:1d:d5:18:be:ab:88:ca:ee:88:ea:0c:8e:74:
5b:ff:9e:51:80:c6:f5:31:e1:cc:02:7a:0e:d2:c7:a8:09:01:
16:80:98:d6:93:84:58:30:cf:06:8b:49:ca:b4:46:87:2c:69:
df:54:aa:8f:87:b1:3c:80:70:86:f2:23:d6:c1:24:26:76:df:
65:34:00:9e:a1:b3:2a:74:29:e6:2d:cd:a3:98:5b:80:87:39:
0c:7b:dc:c5:4a:d1:20:e9:2f:a9:42:c5:0f:bd:17:57:32:45:
3a:9a:a8:5f:6d:ab:5d:23:b8:38:c3:9b:85:be:ff:b1:1e:cb:
19:03:07:9f:fa:85:ca:63:4b:05:b1:29:86:02:36:cc:67:c5:
92:5f:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:51:58 2025 by rpki-client