Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json)
Hash identifier: I8/RsA9Uif+szIs/BUAtEMOgRTwBaPquLoe1tENhjPU=
Subject key identifier: CC:F1:D7:B7:A1:99:4B:CC:B8:B4:FC:EE:72:65:E7:23:8F:29:7E:E6
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial: 08CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
Manifest number: 11F3
Signing time: Thu 30 Jan 2025 20:16:26 +0000
Manifest this update: Thu 30 Jan 2025 20:16:25 +0000
Manifest next update: Thu 06 Feb 2025 20:16:25 +0000
Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: wGP9arlcJaZjzwbPH9sUXVnn07y1wSwYqJ+GAWXpvJY=)
2: DF3399ECB84E11EF97E62969C4F9AE02.roa (hash: YfcH7MvFPCntwU0TJ5xtKSk7jb14lrma7x8uy/kPuIU=)
3: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: zfbAmczU0TvDg++Ahlw3nwgh74bmLp4RT834l0v2hLY=)
4: 2944DC90B57E11EFB31B630FC4F9AE02.roa (hash: LIT5TNu9i//v3laD/Jx0lP/RjQSe9WAE0qoyMHUVSVc=)
5: F585B320A4ED11EFBA65C13CC4F9AE02.roa (hash: svSsv7iDDsESPj4djUfhOIqdOSSzOy7GY2n53ZHUYRM=)
6: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: yTR181mMOhFtz0/zNI7qM2KlctQHTJXyuSeldVEFcuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Validity
Not Before: Jan 30 20:16:25 2025 GMT
Not After : Feb 6 20:16:25 2025 GMT
Subject: CN=679bde1a-98c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:c3:63:c8:18:4b:2c:82:ef:7a:17:3d:d3:
6b:07:e5:73:8e:a5:d6:18:a3:bf:c3:08:d2:60:bf:
52:83:28:4d:3b:ec:0c:f7:61:94:ef:e8:63:da:c4:
c9:8d:d3:9b:e9:31:c7:fe:7c:4c:e9:3f:e2:0a:c1:
cd:3d:fc:29:9e:e3:43:dd:1e:bf:f2:2f:41:24:3e:
a6:d3:25:7d:45:02:a4:13:f0:00:62:81:8b:93:7c:
10:b1:bd:fb:52:3a:94:6b:6d:ae:57:28:f1:ab:a9:
d5:51:85:f9:91:24:11:2a:8a:6e:c3:8e:1a:3b:42:
7f:e1:dc:b1:bf:e9:60:a0:94:84:3e:82:17:7c:61:
60:b3:fa:85:db:f3:50:ae:e7:f8:4a:6c:9d:2e:1d:
b7:71:25:4c:f0:11:fb:85:0c:43:cd:1a:b8:86:0e:
74:56:ac:0c:c5:2e:54:a8:52:ee:c4:29:1e:d6:5b:
6e:4b:c9:c6:10:f4:a2:82:40:7e:3d:8e:44:f8:f5:
4b:7b:c8:d0:7f:49:81:44:eb:95:78:1a:05:f9:7a:
b9:c9:6f:c5:5a:07:be:9c:30:98:65:12:36:8e:2f:
b2:a1:76:98:8f:91:0c:6a:66:cd:b1:f9:34:f5:ae:
2c:0e:2f:3f:e7:9c:1a:b0:ec:62:b5:e1:09:45:6f:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F1:D7:B7:A1:99:4B:CC:B8:B4:FC:EE:72:65:E7:23:8F:29:7E:E6
X509v3 Authority Key Identifier:
keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1d:1c:45:e6:87:e6:97:b7:f6:1b:fd:9e:84:ce:23:3a:98:
55:c1:38:1e:a4:c3:17:7f:32:ea:2c:63:b5:dd:de:6b:17:d3:
4e:7b:3b:5c:11:d4:80:bd:32:aa:60:46:55:04:ea:85:97:61:
5f:4b:bc:d4:96:57:2e:63:ac:3a:5a:bd:35:55:6d:15:c5:52:
a1:07:dd:b9:ce:25:cc:72:c8:77:fe:ad:84:95:ca:ce:88:5b:
c4:49:e4:d9:54:5b:18:d9:3b:40:d7:8f:6b:4a:df:67:b5:87:
94:2d:59:2d:0d:c7:72:bd:80:45:00:79:9c:4c:78:c6:98:f4:
86:34:55:3c:8b:f3:f8:58:29:c8:c1:b9:ef:fe:b3:87:eb:54:
a7:b7:7c:50:17:47:36:05:73:21:20:69:0b:00:f1:28:54:7e:
f0:9b:01:d1:cd:75:b9:4f:a3:5a:f4:64:32:a1:7e:81:99:ba:
14:e3:07:3c:0a:1c:85:5d:65:52:09:90:df:42:dc:47:3f:e3:
8b:bd:5f:d5:63:de:f3:5c:e3:c5:93:94:b1:f8:07:d7:10:be:
61:0e:4d:10:ad:87:7b:2c:0d:8d:4d:c6:f0:95:89:5b:95:29:
72:76:86:bd:0e:bc:4f:a4:1a:0d:b4:10:26:81:69:3a:77:4a:
27:59:d7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:47 2025 by rpki-client