Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json)
Hash identifier: 6BiLnPXe+lrGeiyyDP8dfpnKZfO1FgwUOn+VKGiG3Fc=
Subject key identifier: 31:EB:09:AF:1F:BF:9C:44:37:E7:29:90:E7:E5:91:4D:38:C0:5B:27
Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Certificate serial: 0A02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
Manifest number: 09EE
Signing time: Thu 30 Jan 2025 19:59:41 +0000
Manifest this update: Thu 30 Jan 2025 19:59:41 +0000
Manifest next update: Thu 06 Feb 2025 19:59:41 +0000
Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: mArZTND5j7FWsmra8yQltyYdRurIt/qHi/AFHgGgGJ0=)
2: 57C25DB2E42811EA881AB667C4F9AE02.roa (hash: ciI39fi2c3oXroOIDaWusfSq44fRwlz++9AgtGTTQ/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2562 (0xa02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Validity
Not Before: Jan 30 19:59:41 2025 GMT
Not After : Feb 6 19:59:41 2025 GMT
Subject: CN=679bda2d-c137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:7d:ba:25:30:40:80:0d:f4:53:70:55:8f:
00:36:11:64:32:ba:bf:04:75:4e:55:15:b2:b7:8f:
19:85:7f:0c:d1:0b:69:ab:2f:aa:fc:ad:18:74:a3:
54:8f:30:18:ef:7e:f9:14:2f:b8:47:e3:a5:e4:e4:
7c:81:1a:5a:b9:ad:89:c6:89:dd:fb:9f:83:46:ba:
cd:26:28:3c:cd:8e:6a:5e:9a:74:a5:6c:19:56:b7:
71:44:90:b4:3c:e1:98:b5:f8:fb:3d:62:db:42:d3:
30:dd:7b:93:1b:c2:15:28:e3:12:b8:22:31:41:19:
af:93:a4:1d:36:95:16:a9:5b:95:dc:9f:d0:ed:be:
b3:d4:93:be:2e:29:10:1e:e5:cc:8b:22:d5:ac:38:
89:21:36:60:d9:1e:16:40:de:b2:4b:a4:80:ea:63:
54:df:9c:ed:40:d2:fc:22:0d:36:0a:83:87:ac:9d:
a8:87:e4:17:d9:a1:f5:d0:81:31:fe:ef:c5:69:78:
b5:f9:66:3f:65:bd:c0:5a:97:d3:d7:96:30:a9:97:
c5:15:c4:e6:a1:e5:28:40:ce:31:a2:5e:7f:cd:5d:
5e:25:ba:bf:c7:4b:51:4b:1f:0b:ec:08:80:ad:98:
e1:4a:c5:2c:2f:53:f2:f6:45:a2:4c:d2:89:08:0e:
8c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EB:09:AF:1F:BF:9C:44:37:E7:29:90:E7:E5:91:4D:38:C0:5B:27
X509v3 Authority Key Identifier:
keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:01:3f:65:c1:fe:0d:6b:5e:ff:d4:0a:69:4a:06:e8:7f:6b:
2f:17:74:d0:21:5d:19:7e:a2:d4:c4:ca:c1:01:09:f2:cf:25:
81:a0:5d:78:1c:19:3b:bc:54:22:e0:d3:3b:37:bf:bc:e2:aa:
d9:d1:43:66:f8:ab:0a:52:17:85:49:24:6d:62:76:e0:93:ac:
75:30:31:a1:43:96:3c:bf:d7:bf:24:bc:59:f4:ee:63:c7:f4:
59:3b:5e:dc:5e:a7:a3:b4:0e:2f:c5:68:4c:d8:ab:c9:cf:6c:
d2:8d:6f:e8:09:d2:bf:67:22:5e:57:b7:f7:ca:1f:cc:96:ff:
4e:36:76:4d:01:b2:54:de:79:c0:5d:4f:d3:4a:89:41:e0:6b:
cf:8b:50:73:d7:8f:ac:cd:b9:48:a1:79:f3:b3:80:70:c7:d7:
98:52:bb:f0:5d:ba:9d:eb:7c:f3:61:2d:1c:3d:ce:34:d6:61:
db:cc:96:1b:ba:75:f5:a7:cf:37:eb:cb:27:f0:d1:c1:3e:0a:
f4:73:34:c9:68:f5:24:51:12:4c:d1:02:8b:c8:48:bd:f4:71:
23:b6:0c:91:58:70:80:bb:34:9c:33:7d:21:4b:be:58:7f:61:
c8:96:8b:1a:05:38:22:68:89:31:88:96:25:10:9a:13:d2:0f:
50:1d:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:17 2025 by rpki-client