Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json)
Hash identifier: XP7ZR8w+KT2fwF1aSn5AimkfOE2tdh71Z+B1gRdnl5Q=
Subject key identifier: BD:EF:19:E6:6E:10:8A:2A:99:4E:4A:62:FB:9A:90:EC:94:76:44:5D
Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
Manifest number: 0265
Signing time: Fri 31 Jan 2025 01:47:29 +0000
Manifest this update: Fri 31 Jan 2025 01:47:28 +0000
Manifest next update: Fri 07 Feb 2025 01:47:28 +0000
Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: 4SY492XAW2jbf72chDIaELkkFQYE3iUS6opyL6Yrs60=)
2: D2E9BA7EFD1911EC9E748466C4F9AE02.roa (hash: 3mXWOSXoGGGoIw3Jc45rTgdUlsOtzRtgn3W5YkMOraE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Validity
Not Before: Jan 31 01:47:28 2025 GMT
Not After : Feb 7 01:47:28 2025 GMT
Subject: CN=679c2bb0-3a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:d5:c1:23:16:0b:36:ee:eb:29:97:68:96:
06:1c:56:f8:88:0d:ee:63:dc:b7:c2:8b:27:45:eb:
17:a4:a5:49:da:f0:e6:7d:63:10:7b:4b:1c:d7:d4:
06:9e:a4:01:9f:63:95:e0:42:bb:e1:2c:27:69:55:
a6:fc:52:55:92:11:35:40:00:06:0c:47:93:b9:8f:
13:e7:d5:b3:85:b3:c5:bc:31:a9:05:32:3e:83:a0:
af:0c:23:7e:26:76:e6:cf:02:e2:c4:7f:83:ea:38:
a8:d5:32:ba:8f:b8:f4:33:8e:0c:23:83:a2:ec:6f:
1d:99:5e:34:af:6b:4a:eb:ba:49:61:91:2b:39:c0:
d2:d5:17:6b:a2:ac:2f:e1:68:c9:ae:eb:51:d2:7f:
c0:2b:b4:84:8b:93:08:07:b9:c6:eb:62:b0:56:e1:
3e:35:96:f0:3d:12:6b:81:98:63:d1:03:8d:27:02:
58:37:55:39:96:c6:ea:72:dc:e3:70:bf:03:2c:0a:
3f:58:55:1d:7c:c1:82:53:7b:29:26:6a:75:42:8e:
64:4f:40:33:95:13:95:7f:22:55:b5:4a:fa:8c:da:
5b:de:7e:3a:88:77:ee:8f:ad:6b:cb:a0:58:ab:e4:
dc:16:0f:30:ce:d8:8c:9d:1a:c1:05:73:73:30:41:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EF:19:E6:6E:10:8A:2A:99:4E:4A:62:FB:9A:90:EC:94:76:44:5D
X509v3 Authority Key Identifier:
keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:70:f1:ab:6c:0b:25:25:76:6b:de:a1:33:bb:80:fc:55:d3:
37:f0:eb:99:21:08:34:d4:78:f2:87:e9:3a:c6:0c:c5:6c:fd:
74:42:0c:3a:fb:da:50:a0:28:82:ff:1a:6b:fe:c1:d1:33:3c:
ec:50:19:5f:74:5a:b9:bd:a4:0d:ee:1e:98:cb:99:b4:17:d5:
82:3b:ae:53:21:7f:32:7a:37:1c:40:6f:1a:b5:ae:1c:2f:02:
73:d2:d1:35:f1:e0:59:1a:45:71:c7:45:d9:28:c4:cb:03:44:
78:e1:cf:b2:c6:a1:61:f2:a0:30:47:ef:f5:7f:98:c3:25:91:
0a:3e:d7:36:1b:c4:05:4f:c9:1d:4b:f6:57:27:1e:ba:29:83:
9b:5e:7b:87:b5:85:30:06:4c:62:ef:9b:6f:3d:f3:26:02:65:
70:ae:48:1e:27:87:04:93:fc:37:e0:74:d4:25:0b:28:89:12:
b4:6a:31:a2:7e:bb:1f:49:ea:8c:96:38:34:5f:82:85:c4:b1:
a4:35:0d:94:d9:5b:51:91:f0:97:34:c6:a1:1b:d9:bc:1d:f0:
f5:cf:1d:ba:55:c0:9c:06:ad:0c:bc:0d:c1:5a:3f:ac:70:2e:
2e:b8:ad:4c:97:7a:c5:f6:8e:83:2e:cd:d5:d8:6b:e3:96:f8:
a1:0f:6c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:33:49 2025 by rpki-client