Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json)
Hash identifier: AsoqSBgC98GEUXXuJS6ZBUWQ/KTQkC2s7/7m/g6V2Lc=
Subject key identifier: 29:BE:15:D2:7C:59:ED:5F:50:54:8B:7A:C5:F6:6C:6E:70:69:A1:9C
Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Certificate serial: 0A15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
Manifest number: 0A0F
Signing time: Thu 30 Jan 2025 19:55:45 +0000
Manifest this update: Thu 30 Jan 2025 19:55:45 +0000
Manifest next update: Thu 06 Feb 2025 19:55:45 +0000
Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: fI7WXBxqY/xUJDA8QwP+UcPAw18WQFEDlI703L9fsuY=)
2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: BfaBbqdTeXcprKlCZnPR/VFXV6AoP9YV7kqFZXcvXOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2581 (0xa15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Validity
Not Before: Jan 30 19:55:45 2025 GMT
Not After : Feb 6 19:55:45 2025 GMT
Subject: CN=679bd941-c42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:cb:be:7f:70:20:bc:01:8c:69:1a:c6:fd:
9d:ce:a2:5c:ef:45:81:85:28:24:29:d1:7d:79:76:
81:b4:97:d4:c3:d1:59:71:e4:e7:d0:77:74:3e:41:
41:04:cc:30:a3:f8:e8:58:8c:f1:f2:d3:e4:d7:4a:
c8:34:84:3c:12:03:cb:53:16:de:50:42:ac:47:79:
e5:76:6d:fd:1b:9a:40:7a:46:d2:2c:25:76:6a:3d:
30:36:5d:07:84:72:17:61:ab:a1:51:e8:48:d4:99:
9a:2c:09:fb:07:87:bc:5e:90:67:e0:ee:dc:c9:8b:
b3:56:92:83:e3:f4:72:26:89:ec:e1:4e:97:83:30:
16:67:3c:44:7c:ba:10:8c:b0:35:21:a3:4b:ef:d0:
95:cd:e3:2e:86:72:02:4d:db:71:4b:b3:22:d8:0a:
4e:81:72:a3:e6:72:36:9b:4a:e9:0f:48:09:1f:5c:
7f:68:8a:13:4b:3b:77:2d:41:97:59:7e:f1:40:2b:
6c:40:2e:d5:9f:8d:1e:b0:38:79:ca:9c:cb:11:db:
dd:17:ff:db:8f:59:5e:9d:02:30:69:64:a2:db:f0:
8e:9a:60:d4:d0:52:bd:ba:83:88:65:f7:0e:e9:40:
0f:a2:8a:23:97:fe:a7:6f:b6:ab:c7:17:bf:21:e2:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BE:15:D2:7C:59:ED:5F:50:54:8B:7A:C5:F6:6C:6E:70:69:A1:9C
X509v3 Authority Key Identifier:
keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:07:5c:d2:9e:6d:be:c7:a7:d8:fa:80:ef:9a:21:9a:c0:6b:
69:54:8c:e8:b9:42:12:5b:94:cd:27:10:5b:93:cd:36:58:77:
df:b1:92:9c:f5:3a:dd:6b:bc:ae:8d:90:57:49:c6:f4:72:55:
ee:05:4f:01:20:e3:13:e5:60:5c:3b:98:43:3f:9e:e4:ce:98:
a4:c2:17:bf:fd:47:14:12:4e:38:36:b5:2e:53:26:54:00:75:
0f:67:31:b7:59:43:c1:e8:bc:50:49:86:36:52:1a:f5:19:70:
6a:b8:70:d6:fa:72:54:0d:5c:51:de:dd:e1:d7:a0:51:b4:b7:
bb:63:e3:cd:14:99:1e:fa:83:37:c8:b5:ae:46:29:01:13:03:
11:b8:48:11:c0:9e:db:fc:59:e7:71:7c:42:43:41:94:be:ae:
d9:79:75:b5:7d:a5:2c:34:68:3b:75:b3:b4:0a:77:ed:e4:c1:
1d:d2:d6:a1:22:28:dc:68:c1:24:84:e1:f1:b6:86:0c:d0:3d:
ec:dd:31:99:80:32:4f:d0:a8:69:5e:2e:7c:81:d7:26:40:5a:
4d:72:da:ce:8f:89:38:59:ab:65:08:73:37:7e:ef:6b:85:e3:
ff:3a:1b:62:d0:9a:12:a9:04:7e:bb:da:b2:cc:7f:e2:32:ef:
cf:8c:ea:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:58:02 2025 by rpki-client