Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier: t2AXVHAgfLIz6OViiFjNtzQbA2DYlzhi8QdVQrIqhbs=
Subject key identifier: 88:70:00:8E:78:D6:58:10:14:10:29:B5:75:2D:11:E7:C6:4C:66:34
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial: 024B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number: 0248
Signing time: Fri 31 Jan 2025 01:55:14 +0000
Manifest this update: Fri 31 Jan 2025 01:55:13 +0000
Manifest next update: Fri 07 Feb 2025 01:55:13 +0000
Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: d8WzvO/6hGXxxoA2a04NB22jLywwm0tfgmb9/pADUNw=)
2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: iDFagkC2Pymx0vGTcmD2EJOCYX1V6KpanyYL5KLSRf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Validity
Not Before: Jan 31 01:55:13 2025 GMT
Not After : Feb 7 01:55:13 2025 GMT
Subject: CN=679c2d81-43d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:6a:2e:f2:3a:6b:bd:77:2e:34:0d:e6:ab:
dd:00:c0:66:17:67:18:68:16:b0:fc:58:41:86:89:
14:8b:18:e0:d1:60:e0:e6:32:62:4c:f7:3c:b3:06:
b4:97:61:ae:4e:b5:7d:9e:f6:f1:65:fd:7c:27:13:
37:e3:82:df:5a:b8:54:cd:c3:f1:ef:67:a8:27:3e:
d9:bc:2b:92:eb:10:8d:ae:33:eb:23:fa:74:8e:18:
24:30:ab:10:d9:29:4a:6e:bb:80:04:dd:76:f2:77:
87:c8:1b:5d:34:c3:ce:e3:4d:58:e5:5b:db:94:a1:
43:28:08:51:b6:ea:e5:4d:80:ac:19:d1:1d:d3:ef:
da:66:02:ee:e7:03:ee:d6:72:47:9f:98:cc:c3:46:
55:9f:64:94:61:33:15:52:e2:86:5f:d1:e7:c8:a0:
d1:df:b6:97:82:7e:58:96:b7:c2:7f:96:1c:04:96:
ff:b8:0c:35:83:c3:4a:b7:22:ac:47:6a:9b:6a:85:
46:25:dc:9c:be:bc:d9:06:ee:65:56:55:ff:6d:7f:
52:a7:64:01:e5:09:b3:cb:39:ac:61:71:a7:55:b5:
94:3d:a3:45:95:9e:30:4e:65:16:a2:ae:76:8c:b7:
bb:c6:4e:aa:ec:7a:2c:88:27:db:cb:af:2f:76:29:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:70:00:8E:78:D6:58:10:14:10:29:B5:75:2D:11:E7:C6:4C:66:34
X509v3 Authority Key Identifier:
keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:01:ec:78:23:6c:41:c6:d4:59:c2:e4:b6:81:9b:69:4d:39:
1c:34:2a:9f:54:cd:90:54:6c:8e:76:ec:25:57:aa:ac:73:50:
38:34:d5:4c:63:8b:6b:a4:4f:62:ec:c9:ec:a3:1a:66:d2:7b:
43:05:42:cb:ce:ce:43:fa:65:37:76:8f:cd:e3:95:22:5d:14:
0e:ee:c7:54:b5:c8:0c:ef:21:c6:ff:ab:50:86:ca:54:55:3a:
73:7c:da:f2:b5:a5:4a:4b:05:ae:67:54:ab:50:c7:e5:22:e6:
a3:45:b8:4f:60:0a:1c:da:06:3e:40:20:09:97:10:dd:a0:ee:
24:28:c1:a5:80:cd:8f:85:bf:0e:53:9b:ad:8b:59:a8:70:26:
24:e7:b2:0b:fe:e0:ce:b8:0a:8c:a2:2f:a9:d7:3c:53:db:09:
ce:96:99:15:74:f7:db:bf:a2:8f:63:89:43:f7:63:24:1a:df:
27:9b:5e:86:e9:a6:0a:4a:6c:a7:80:44:16:8a:e3:f5:f7:80:
f1:05:bb:5d:db:22:1f:14:32:22:b4:4c:a8:d0:56:f6:d5:ac:
69:fc:dd:43:c0:d8:f5:8a:f2:1e:6c:1b:2a:45:79:18:b2:4c:
e3:54:21:b0:e7:c2:63:11:73:57:4b:26:a5:e5:85:29:46:bd:
7c:e4:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:50 2025 by rpki-client