Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft
File: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft (raw, json)
Hash identifier: qZe6qVN47iePO3iM9tg7sAczn82SfdQLO8p4QWMrmV0=
Subject key identifier: E6:57:5C:5C:DB:EA:6F:B2:D9:FC:C7:19:01:A6:37:25:F2:77:0A:EF
Authority key identifier: DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED
Certificate issuer: /CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED
Certificate serial: 139C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft
Manifest number: 137F
Signing time: Fri 31 Jan 2025 15:28:35 +0000
Manifest this update: Fri 31 Jan 2025 15:28:34 +0000
Manifest next update: Fri 07 Feb 2025 15:28:34 +0000
Files and hashes: 1: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl (hash: mi0kIo39fqjvktdaBJAFlU9lVV3o9Jcp83R2eLClU6g=)
2: 76C6BCF6B72811ECAEFC180DC4F9AE02.roa (hash: V/gOKs9LECUvwP7f76II+OxQFAc41Q7rou6YKiKk5l8=)
3: B969D2D0BA4A11EC90B53115C4F9AE02.roa (hash: kCVXgcVyC3mGVdPkmV42EUSht4RHcewllIn6s7mcD00=)
4: 49678FBCB72B11EC8C8E3017C4F9AE02.roa (hash: 6y2+7m6fZBqF1vnJPBAlEhf0LTJdURa/vtEhojNLyMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5020 (0x139c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED
Validity
Not Before: Jan 31 15:28:34 2025 GMT
Not After : Feb 7 15:28:34 2025 GMT
Subject: CN=679cec22-a62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:67:82:eb:a7:fb:16:74:f5:ea:31:b9:b3:4d:
c0:d0:8f:1f:1b:83:76:25:6c:5a:d3:99:fa:58:42:
4f:c9:49:22:bb:0d:53:9d:33:13:3c:36:43:4b:0a:
b1:26:5d:31:db:fc:61:9e:4b:8d:a3:78:8e:1d:39:
6e:eb:53:3a:aa:c9:4e:7d:15:38:0c:77:fd:5a:b1:
bd:17:f3:a3:50:da:73:12:50:9b:85:27:07:2b:af:
58:0e:14:32:05:28:1f:b8:01:c5:ac:d9:bd:f8:61:
27:cb:5e:64:08:e0:ad:05:84:8e:df:ed:1c:ce:66:
2e:97:de:2f:64:00:5c:bd:d5:ab:22:7c:ec:29:9e:
18:5a:29:31:51:42:84:77:c8:a2:dc:0e:fb:70:f8:
30:67:eb:d1:99:48:ff:29:69:19:50:ed:96:7a:a5:
6d:05:2e:43:b4:b7:f2:fe:a4:38:1d:aa:8c:e4:db:
bb:6f:63:9d:5e:56:97:e3:26:f6:e3:af:c6:de:bb:
87:e5:c1:23:7a:60:11:3e:07:85:2d:a2:cb:aa:c8:
c7:c8:02:25:2f:ba:30:d3:ed:af:94:a5:ec:66:ba:
16:3a:4d:97:65:6b:26:b8:bd:57:ba:88:28:76:8a:
70:63:6e:b6:8b:44:93:12:9b:11:d1:22:0f:50:0c:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:5C:5C:DB:EA:6F:B2:D9:FC:C7:19:01:A6:37:25:F2:77:0A:EF
X509v3 Authority Key Identifier:
keyid:DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5f:e1:3f:a8:4c:01:1c:10:49:75:91:79:df:56:73:c0:47:
16:f1:79:b0:cf:b8:aa:2e:d7:3c:f3:61:b9:82:a4:cc:b0:72:
4e:d0:9e:82:be:43:ce:8d:89:72:44:74:e1:fd:03:92:44:27:
5f:97:cf:ea:94:ab:0f:ea:0b:bc:84:e0:ce:79:d0:f9:d6:7f:
18:eb:ab:c8:a5:cc:de:be:f1:b4:8a:78:b0:30:b1:9a:48:b2:
e5:6b:b8:36:d9:87:b5:aa:f3:1c:b8:c3:4b:be:1e:5b:da:75:
57:f5:6a:0a:b7:de:d2:36:16:65:73:0a:ac:49:46:63:a5:bb:
d4:b2:db:58:1b:af:b6:7e:0c:25:1c:4f:f6:ea:a4:5a:12:20:
dc:b8:0a:f6:f9:0c:a6:b7:c9:d9:31:6f:18:43:35:bf:b2:52:
15:f5:c2:e9:00:3d:69:da:30:7f:c3:14:ee:28:76:c8:03:c3:
56:18:64:2d:f3:5e:ec:90:00:c1:fb:8d:14:c0:dc:f2:6c:59:
73:2c:5e:69:d3:f6:be:00:af:c7:5c:ec:48:73:5c:fd:ed:ad:
65:d5:8c:64:52:72:01:5f:44:9c:23:c7:46:b5:15:5e:f2:b6:
2a:62:8e:35:ee:09:b1:a5:92:30:87:54:5c:3d:8c:d0:7c:18:
93:a3:bf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:13 2025 by rpki-client