Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json)
Hash identifier: Z9vJuG0kNHlrTrgBPcDLEveRsuOwKHWmF2aT0iQQIuk=
Subject key identifier: 97:4E:53:13:B2:2D:D5:1D:5F:7B:EA:C4:E1:BE:79:5F:86:CC:FE:0B
Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Certificate serial: 03B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
Manifest number: 03AF
Signing time: Fri 31 Jan 2025 00:45:15 +0000
Manifest this update: Fri 31 Jan 2025 00:45:15 +0000
Manifest next update: Fri 07 Feb 2025 00:45:15 +0000
Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: EQlDVf3XS6q9/Vy8Wn+88locDe9PBwROc4GXnfIQkbI=)
2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948 (0x3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Validity
Not Before: Jan 31 00:45:15 2025 GMT
Not After : Feb 7 00:45:15 2025 GMT
Subject: CN=679c1d1b-b2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:12:4c:08:53:13:d4:02:9d:8e:f7:6c:ed:
f9:6e:fd:46:1a:25:fc:3e:3d:02:8c:f7:26:e0:0c:
23:72:84:c9:9f:1c:08:cb:79:cb:15:28:31:27:32:
3d:9a:c6:8a:7e:9d:8c:13:38:00:e1:b6:75:ff:37:
fe:51:ed:94:3b:59:77:13:f2:d0:14:b9:19:d5:f6:
74:aa:05:7e:2b:9c:89:40:35:cd:0e:ec:ea:55:d7:
8d:c0:5c:af:6c:7d:a3:ad:cc:61:5e:55:32:6e:c7:
31:4b:a3:f2:2a:2d:13:00:3b:31:16:8a:94:69:d7:
93:5d:d1:d5:ff:25:65:d7:21:4e:07:e0:de:0c:79:
81:16:2d:a5:6f:ba:46:30:7a:39:5a:72:bd:9f:d5:
b7:fc:92:94:f0:e8:d3:6a:ea:cb:35:35:fb:b5:ea:
ce:d6:8d:b5:7d:34:65:a1:9c:67:e0:dd:fc:68:04:
14:3e:c4:ea:8a:26:5f:b7:f7:57:5f:06:89:93:22:
dc:fb:13:8b:e9:cb:09:d1:29:57:e5:19:c1:22:0f:
3a:4e:36:cc:ff:5f:95:04:2c:60:4b:ae:5d:48:91:
6d:eb:8e:24:49:b0:ec:51:89:b7:31:7f:93:09:f0:
7c:38:25:fd:b8:8b:3b:22:2d:ac:80:c3:23:2e:08:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:53:13:B2:2D:D5:1D:5F:7B:EA:C4:E1:BE:79:5F:86:CC:FE:0B
X509v3 Authority Key Identifier:
keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:49:1e:0f:94:b8:0e:9b:61:00:d0:a1:67:6a:28:f7:81:16:
4b:7d:1d:e3:b7:a4:52:1e:77:3e:2c:41:77:da:7f:04:c7:71:
63:b4:21:87:1f:3d:56:cc:a8:6a:fe:6c:8f:cc:92:e8:16:08:
7f:f2:82:1a:4d:08:55:97:97:7f:ee:de:8b:70:29:77:b1:94:
46:5f:e8:37:84:1c:34:ca:db:c8:63:7c:12:4f:49:cb:46:6f:
52:4f:45:ff:ab:83:94:c6:e0:4d:dd:c0:b0:c5:a9:b9:d7:56:
44:b1:4c:0b:75:86:ff:3f:00:4a:8e:94:4b:77:dd:1d:39:0a:
b2:50:11:61:13:b9:39:ed:38:d7:0b:ae:53:59:ff:85:0e:69:
97:4c:73:0d:8f:52:79:c5:2c:ab:11:04:9f:69:3e:62:4c:25:
e1:11:5c:23:d3:a8:99:09:5c:67:12:ee:ab:11:f3:13:44:dc:
b5:77:8c:2d:f7:d9:e9:10:f7:c9:a4:26:12:01:f4:c9:99:87:
ee:1b:1b:8c:8e:89:f9:8f:a5:6b:0b:26:0f:d0:f6:8c:0e:a2:
3c:b8:40:d9:aa:92:68:b3:44:44:e3:e1:79:aa:ee:d3:a3:f3:
60:a2:b0:ff:a4:db:d7:92:43:78:ca:11:b2:e9:9d:5a:2b:d3:
0a:9e:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:33 2025 by rpki-client