Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft
File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json)
Hash identifier: wqBIoxFkIbBGwN7f/FVDrwvMmCIDlUXY4xaNEraK0QI=
Subject key identifier: 4E:FC:6C:3D:DE:C3:17:2B:E1:19:AC:17:2B:E2:B1:5F:35:95:DF:06
Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5
Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft
Manifest number: 0149
Signing time: Sat 29 Mar 2025 03:44:12 +0000
Manifest this update: Sat 29 Mar 2025 03:44:12 +0000
Manifest next update: Sat 05 Apr 2025 03:44:12 +0000
Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: bZVVrqw/fjNTVnI0C6wnR/0fndYL8KgohfGnb7xNP4w=)
2: AFF53F96556211EE9C34E435C4F9AE02.roa (hash: LM315PXaZ9khTUzGflBEPkGQjhCerawkLIiZZc3Qylg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CB7D
Validity
Not Before: Mar 29 03:44:12 2025 GMT
Not After : Apr 5 03:44:12 2025 GMT
Subject: CN=67e76c8c-241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:33:ac:f4:2c:93:cc:64:9e:bc:33:13:58:
c8:14:eb:1b:5a:32:66:c0:73:31:67:9c:c4:c7:33:
6c:3b:28:44:8a:46:e0:6b:14:49:ff:a7:6d:72:11:
81:d2:d4:41:25:6b:c2:b8:1f:3c:69:7a:db:ec:e0:
7b:7a:34:bd:bf:62:0b:80:65:99:8d:f1:f1:2f:40:
9a:39:5c:24:be:de:c4:01:3b:cd:93:cc:9c:f8:34:
a8:ac:2d:66:90:58:a1:06:bc:f2:6c:fd:21:08:2f:
3f:e8:c9:86:c8:19:fa:c6:00:a9:78:f2:5f:32:5f:
b8:8b:06:57:c6:63:b2:ab:98:58:9d:ae:fc:15:f6:
32:9e:6c:f8:9d:e8:80:e5:d5:43:56:45:e4:10:64:
af:75:af:bd:42:21:22:0a:df:25:5c:30:f0:44:c8:
66:17:83:e6:9c:09:c9:40:13:54:e6:b8:25:68:93:
89:01:5c:8e:08:ed:3a:41:84:0e:70:6b:c1:f2:26:
25:16:0a:ef:48:ae:00:a9:15:b4:88:44:38:21:24:
09:22:18:d8:e4:27:81:aa:0d:0b:85:67:be:71:41:
46:f6:01:60:73:db:90:03:9d:d9:75:7b:a6:ca:c2:
93:48:41:ca:52:9a:46:c2:f7:e2:96:50:52:12:59:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FC:6C:3D:DE:C3:17:2B:E1:19:AC:17:2B:E2:B1:5F:35:95:DF:06
X509v3 Authority Key Identifier:
keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:f9:cb:ac:27:7c:d0:a2:3b:c5:44:ae:48:ca:ae:82:1b:61:
2b:ee:29:89:09:bd:86:2f:b9:b2:92:ba:18:ff:ae:94:fd:f5:
7e:ba:fd:16:ba:d6:38:0a:c9:5c:04:0f:59:60:c3:da:26:13:
5f:00:a8:de:99:82:bb:9f:ca:44:2e:cd:f3:9f:41:f1:38:0c:
3f:06:c9:87:f9:db:95:cb:a9:cb:b3:b6:e3:99:06:dc:27:c9:
b7:92:ea:11:8c:f1:4f:8d:b3:c4:0e:52:e0:08:6a:cf:5f:d8:
9e:60:0b:b1:93:f8:cf:c5:51:e4:ae:3a:d6:70:52:13:12:b2:
8c:6e:64:82:21:5c:2f:73:c7:f5:e3:01:8d:70:15:b9:fc:08:
f1:0e:94:2f:cd:80:4b:b2:9c:92:e3:90:17:e6:b4:42:db:11:
ab:33:a4:7b:09:04:67:f5:32:eb:b8:a8:e6:7b:d2:c8:ba:1b:
21:4b:76:e3:ca:26:fc:de:75:97:4d:ff:26:4e:cc:db:7b:1f:
30:67:26:2c:81:c8:8a:a2:31:24:78:a8:c8:9d:c5:c4:69:27:
6f:1c:2e:25:0e:17:8a:97:73:5a:ec:05:01:6c:1c:e9:70:fb:
44:c7:d6:01:d0:9b:0a:e9:0f:91:63:56:63:39:a9:af:5d:f0:
89:dc:a4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:44:22 2025 by rpki-client