Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft
File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json)
Hash identifier: Kk/ovJ2ZwKuySbORB644TQwrtGuMXCdpD+EKSM5AFKo=
Subject key identifier: DD:F4:97:A4:1D:E7:19:C8:94:7B:0A:FB:2B:A1:2F:09:C9:66:AD:F7
Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4
Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft
Manifest number: F8
Signing time: Fri 31 Jan 2025 04:19:30 +0000
Manifest this update: Fri 31 Jan 2025 04:19:30 +0000
Manifest next update: Fri 07 Feb 2025 04:19:30 +0000
Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: TgWeh12/FUodiiCB/4+QgBQjEjf+mtmchqNAtVDn/cM=)
2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: TbBCV9YqWUCY2Wq1gBoigXibaMg8V4tyOlNdcsB7waU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4
Validity
Not Before: Jan 31 04:19:30 2025 GMT
Not After : Feb 7 04:19:30 2025 GMT
Subject: CN=679c4f52-0572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:8e:d0:68:b4:db:8c:fc:83:54:6e:9d:98:
24:2b:4e:6f:fa:15:64:6d:74:e9:0c:9a:b9:af:86:
76:69:25:bc:dc:28:94:a4:c0:06:78:b7:8c:92:8f:
ad:76:1c:84:42:5d:1d:d0:55:6a:81:62:be:8e:60:
3f:cf:8b:2c:46:e2:f4:dd:9b:6f:a6:9f:8b:6c:1a:
de:3d:f5:bf:37:ee:20:a6:91:d9:3f:6f:54:eb:7a:
4c:be:81:00:92:31:6c:80:d8:72:cd:55:af:08:d8:
f1:9e:5a:d2:63:96:a2:53:ac:08:92:8e:dd:5e:31:
6d:85:e6:b3:56:66:e4:5c:9f:6b:ba:1d:78:49:a9:
8b:da:a0:e3:70:3d:09:78:fa:8b:21:86:a7:80:91:
64:cc:7c:15:43:b2:9e:2d:f0:61:c5:12:40:60:4c:
ed:f6:c1:5a:5a:8c:c1:fe:50:df:8a:f4:27:9f:d5:
60:c6:7f:bc:f3:9f:7f:33:c0:7a:1c:d5:3f:71:30:
81:b1:ab:4c:ad:9f:18:2a:d5:fe:64:67:2d:c8:8c:
9b:ea:6c:3c:8c:66:57:47:e4:b5:f6:4a:70:06:49:
f2:c0:ca:73:33:eb:40:66:de:27:b2:42:11:3a:4f:
36:98:3e:f5:ea:af:22:03:6d:6c:ca:bf:51:37:01:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:97:A4:1D:E7:19:C8:94:7B:0A:FB:2B:A1:2F:09:C9:66:AD:F7
X509v3 Authority Key Identifier:
keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:7d:2e:27:58:1c:3e:9e:97:68:10:3b:b0:5d:7d:7d:b8:5a:
1f:69:83:47:8a:9f:e6:e8:f1:54:60:77:2c:c7:de:38:34:1a:
58:46:62:9c:33:32:c7:4e:8b:d8:c9:98:1e:2a:fb:27:58:d7:
79:37:6b:05:26:a3:29:b0:71:4c:ed:96:c0:43:67:3e:23:ec:
a7:12:0b:69:d4:79:57:73:14:fa:9c:01:73:3a:62:94:c5:5b:
15:2e:ce:d9:8d:61:0b:e2:14:46:af:90:a9:aa:0c:31:93:83:
b2:96:87:53:30:ea:d3:1f:b8:b7:21:f4:5f:ee:ea:7f:59:26:
12:3e:39:9f:14:61:d8:49:1e:60:5a:02:3b:21:72:76:d5:cc:
01:d5:e7:ef:35:c7:c5:78:e9:0c:85:73:8c:0d:60:62:97:6b:
80:be:f0:50:83:9c:3e:ee:58:13:30:d8:56:52:f9:06:2f:c0:
8e:58:c9:2d:33:b6:99:98:79:1c:dd:a5:8c:03:45:f7:d9:f2:
50:ac:fb:78:2b:92:9d:81:68:55:47:2a:b7:69:dd:33:39:50:
ee:d7:00:4b:be:09:2f:d9:48:ad:37:b5:d4:ed:08:b4:9a:f1:
02:66:fd:c9:f9:1e:60:fc:bb:ee:dc:23:cc:e3:0f:ec:8d:27:
80:48:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:52 2025 by rpki-client