Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json)
Hash identifier: d8kvoIyDJdg1PpUHwDJOVJhKwa0O51nWKt9Qiax2VJg=
Subject key identifier: 64:6B:A9:45:D0:E6:83:C6:DA:D2:05:E1:B6:B7:2C:A3:4F:69:62:E3
Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
Manifest number: F8
Signing time: Fri 31 Jan 2025 04:20:44 +0000
Manifest this update: Fri 31 Jan 2025 04:20:43 +0000
Manifest next update: Fri 07 Feb 2025 04:20:43 +0000
Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: rlqMa9/j5A5/eC24CQw/LZahomsD5SXAfCBf4weoMoQ=)
2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: UDY5XZZpboPOe4PuKIjoZcv8Z+maPhsL8V3N8OWNJu4=)
3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: QxDb9utS5i/B8urK72tRRFJFcT0cVUwBUSamNqzNfT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Validity
Not Before: Jan 31 04:20:43 2025 GMT
Not After : Feb 7 04:20:43 2025 GMT
Subject: CN=679c4f9c-d639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:5c:c0:18:dd:ec:35:9a:e4:8e:64:07:45:
d2:16:15:54:15:a3:84:a3:23:b1:a1:ca:12:1f:dc:
86:26:32:9c:c0:66:29:18:d9:62:b4:28:2e:4e:4d:
23:a8:26:f4:91:af:a0:bd:a3:f1:51:b5:05:f4:ae:
8a:58:91:79:a4:f5:f3:bf:37:2f:36:f2:77:52:a6:
7e:85:b7:d3:43:51:e8:5f:8c:7a:b7:ed:b7:96:5c:
49:88:82:65:37:2c:8f:35:65:d1:86:ff:eb:23:ec:
e2:02:64:32:25:3c:cf:73:2f:e2:df:fa:e3:73:dd:
d4:77:88:72:43:82:e8:04:6d:8d:85:04:18:2e:0b:
03:57:ff:f0:59:6c:00:ae:ce:4d:90:e0:1c:d6:93:
f9:54:1b:ad:49:41:a9:de:46:6f:7f:c5:4c:7e:77:
37:90:42:75:3a:fd:4a:59:0b:d7:f4:8f:02:94:40:
03:26:30:62:04:89:e2:ea:f7:52:c5:64:1f:76:bc:
eb:47:fa:a3:4a:48:b0:5f:5b:b6:18:ac:bd:ab:f8:
30:52:6f:da:ac:2b:31:a8:10:32:73:6c:42:02:bf:
58:f2:70:3d:d6:0f:96:db:4f:42:c7:a2:f5:8a:db:
00:e6:1d:b8:95:d7:e0:b3:e9:ff:3e:f3:7e:86:79:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6B:A9:45:D0:E6:83:C6:DA:D2:05:E1:B6:B7:2C:A3:4F:69:62:E3
X509v3 Authority Key Identifier:
keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:23:90:64:fb:17:b5:a6:f7:3b:f3:c9:0c:c6:4f:7d:98:c0:
e2:90:71:8f:db:e8:ec:1a:73:4a:c6:13:90:3d:97:5d:44:fe:
db:de:0f:f2:b2:30:38:43:3b:7a:a7:cb:cc:f3:52:2f:e3:fc:
be:38:09:df:31:ce:b3:0c:dd:8d:a7:29:fe:dc:2f:82:e0:5a:
97:dd:b2:45:f2:df:5d:88:ab:8a:1c:f3:8b:f3:47:b1:fa:a9:
ea:9b:dc:ac:9b:f6:ac:a2:3d:e5:d8:13:b5:c9:c0:3d:2d:92:
45:83:9a:7a:99:b6:82:af:e7:d3:d7:ba:82:25:a1:71:47:7d:
79:91:30:af:34:fb:98:d7:96:54:3c:56:4b:b1:ae:69:ce:7a:
19:ae:14:29:e9:31:b2:0b:59:14:25:67:c2:44:63:35:ef:6b:
10:ed:80:fb:c5:7f:ea:97:84:52:01:07:f7:f7:9c:91:4b:f9:
d7:15:59:02:6c:52:82:a4:92:6a:e3:06:ef:db:1f:ca:75:8d:
6e:35:69:73:8f:5a:ca:94:6d:8a:e5:43:6a:96:95:8b:8e:53:
f6:54:03:12:4b:e6:14:93:c4:fe:8b:9b:98:fc:15:1a:16:7c:
36:a4:2c:ed:fb:65:1f:89:50:66:03:d2:db:44:ac:3f:3e:a0:
4a:90:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:36 2025 by rpki-client