Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier: Ds+eAUYdLL1mkzpCLCiH+0XEEVdsd8AjHWu5tctaoBw=
Subject key identifier: DB:E1:90:99:7D:7C:96:2C:6B:33:5F:BA:13:18:0D:A3:E6:D8:70:10
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number: 11
Signing time: Fri 31 Jan 2025 07:07:30 +0000
Manifest this update: Fri 31 Jan 2025 07:07:30 +0000
Manifest next update: Fri 07 Feb 2025 07:07:30 +0000
Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: f+FG1PcHK+2NUYjkf/CKmmZ6uI3RyU3no+bILRincs0=)
2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: KQyWlLwg95xKEA7eXDtYxt189xq6hS1CzXkzk6a37uA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Validity
Not Before: Jan 31 07:07:30 2025 GMT
Not After : Feb 7 07:07:30 2025 GMT
Subject: CN=679c76b2-45f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:b7:1b:7d:21:a7:40:28:28:ed:da:83:dd:
ca:52:e2:cd:85:11:5b:57:c3:e3:66:c7:64:4b:1c:
a7:37:3d:44:66:87:b5:d5:48:7b:69:96:19:e7:f8:
bf:74:47:65:d0:12:99:3a:0f:72:f9:97:8c:ed:a9:
1c:b8:ac:0c:72:f5:4c:e8:66:a7:8a:21:d7:07:a9:
c2:06:87:77:1b:0b:8e:7f:72:73:20:9c:82:d8:a2:
fe:ee:33:47:9f:23:9b:d6:7c:f9:d9:4f:1e:6e:a6:
4d:b6:cc:57:8d:17:a0:75:2a:f9:f3:3e:69:56:9c:
65:46:71:0f:25:b7:bd:d4:24:e6:a0:12:d7:49:df:
ff:f3:d6:0d:c9:ab:fb:74:93:10:6d:59:8a:01:69:
c6:e0:aa:e5:a2:75:e0:18:6f:24:ee:e0:fc:09:0b:
d7:f8:e2:d5:88:e9:1a:ce:8a:8c:1a:06:f2:44:8d:
cf:86:dd:25:61:88:41:1f:dc:1f:70:61:b7:45:b7:
a1:3e:8c:41:5f:9d:14:cd:2e:57:ee:66:80:44:2a:
2c:e8:a4:e9:9b:ac:35:7e:ab:e3:d7:be:ba:ca:c8:
ac:73:91:48:e9:1e:31:03:7b:b9:73:2b:0e:10:c7:
e1:34:02:62:ea:18:0e:c5:bf:15:29:e8:89:6d:3a:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:90:99:7D:7C:96:2C:6B:33:5F:BA:13:18:0D:A3:E6:D8:70:10
X509v3 Authority Key Identifier:
keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:09:e1:65:e2:8d:bb:cd:aa:8e:2c:8b:d8:e0:2d:a9:fc:1f:
8e:45:02:a4:98:dc:01:5a:b3:28:6c:4a:b3:74:a4:48:d0:47:
2a:d0:46:e8:59:5a:2a:81:ac:7a:5c:2a:42:3d:04:e5:f7:3f:
83:2e:84:d7:99:ee:e1:e5:9e:39:cf:7a:7a:86:40:4a:20:92:
41:40:d6:42:3d:14:00:d3:0b:f9:a7:96:19:c4:37:01:a4:1c:
cd:66:11:22:55:36:9c:cf:db:90:d6:60:87:b5:2c:78:fb:72:
0d:5a:e8:45:2b:13:24:24:73:e4:fc:73:2f:92:9b:35:2b:11:
10:6f:ee:db:19:71:01:d0:a8:54:b7:9b:b7:84:a5:cc:43:9b:
04:b4:78:77:25:40:22:05:05:89:06:4e:9b:a9:f1:2f:c4:80:
65:83:2f:c2:6a:44:46:bc:16:cc:c9:41:29:e3:d9:89:ca:4d:
52:e6:60:17:7a:f5:52:d5:c5:e1:87:b4:f6:c7:ac:27:01:5f:
95:0a:ab:ce:e9:fb:d0:93:ac:49:42:5e:4c:0f:15:58:a5:3d:
b0:c0:67:6d:d2:a0:d1:eb:97:c3:c5:f4:2a:e8:50:fd:4f:a9:
31:ee:e8:4d:76:e6:3c:d4:f7:3e:09:04:e2:89:a5:53:24:56:
84:02:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:44:53 2025 by rpki-client