Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft
File: lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft (raw, json)
Hash identifier: u85To+j6fh+eZicsAv50Y7Npv3Joa5kLVhJdZFg34IA=
Subject key identifier: 1E:8E:B3:29:86:54:04:D1:39:79:67:B6:CC:C4:02:0F:B4:14:88:03
Authority key identifier: 94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD
Certificate issuer: /CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft
Manifest number: 020D
Signing time: Tue 17 Dec 2024 01:29:26 +0000
Manifest this update: Tue 17 Dec 2024 01:29:25 +0000
Manifest next update: Tue 24 Dec 2024 01:29:25 +0000
Files and hashes: 1: lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl (hash: JEWsOwPlipklbU+UUwJpFl+nkAlvg213xDPMPBNFmTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164A50
Validity
Not Before: Dec 17 01:29:25 2024 GMT
Not After : Dec 24 01:29:25 2024 GMT
Subject: CN=6760d3f6-4338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:d8:49:48:0f:da:b0:dd:fd:1f:45:21:b2:
c7:9a:56:0e:7b:01:47:75:a0:e5:66:35:65:6d:e9:
6d:62:a5:7c:26:ca:ba:46:e3:d8:33:cb:68:a2:90:
9e:2c:c0:72:30:20:2b:55:05:6c:9c:5f:55:09:05:
ca:66:64:6a:a4:60:cd:e1:2d:ba:3f:46:80:6e:2f:
bc:b2:89:b3:77:34:ca:c7:a5:fe:99:3b:28:99:6f:
ab:f0:63:21:a2:7b:29:ed:77:ec:a6:73:3c:35:f4:
64:23:87:d1:2b:f1:8d:0f:5e:12:0b:39:e8:c6:49:
63:dd:66:f9:8f:7c:fe:f3:f0:1a:de:9b:62:1b:eb:
fa:21:ec:6c:9d:ed:01:6e:d2:b4:14:84:16:c7:e4:
02:d3:51:de:5a:28:c7:f8:56:39:f0:0d:03:ce:15:
0b:39:dd:c4:ac:58:a9:6b:5d:c7:ec:3e:3b:40:9c:
4a:1f:0a:0b:70:6f:cd:d0:f0:0f:d6:cd:2d:dd:4b:
28:15:db:a4:4c:15:9b:d0:00:12:02:8f:13:fc:68:
df:a8:1d:8b:3c:01:3f:0e:3e:2d:fd:3a:28:ec:ea:
87:88:49:11:aa:75:e9:1f:ce:a4:ba:19:57:d9:39:
8e:5c:82:6d:57:72:32:80:c2:d8:24:e6:b7:1b:b9:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8E:B3:29:86:54:04:D1:39:79:67:B6:CC:C4:02:0F:B4:14:88:03
X509v3 Authority Key Identifier:
keyid:94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:3c:8d:9e:5f:7a:8a:15:ad:0a:61:c3:e2:b5:50:be:5f:f8:
ee:33:78:01:81:ff:15:f2:77:45:0e:bb:f1:94:73:96:da:8d:
85:ed:28:fe:5d:04:64:b6:98:87:41:65:6e:42:bf:be:9f:d6:
63:bd:94:e1:b7:cc:10:0f:e7:72:c3:c5:03:65:9d:b7:74:54:
dd:01:b0:37:b6:f4:24:6d:a8:0d:8a:2f:81:9a:21:4d:09:d2:
a8:cf:70:fe:d5:52:cb:78:fa:54:02:88:80:e6:97:98:a5:2e:
6f:02:29:a5:1f:b1:33:4d:ca:c9:ba:58:87:d1:4d:1b:03:83:
67:d5:2d:01:05:cf:36:e9:a2:c2:92:06:ba:7b:c5:21:c3:a8:
d7:85:d1:ac:91:1e:d1:db:24:b3:84:fd:6e:cc:30:ee:ed:16:
d4:da:ed:d5:34:1d:43:a0:db:50:b5:82:5c:fb:e3:86:9e:3e:
5c:ba:7e:81:31:71:0d:26:8d:de:61:e8:0a:9b:0a:e1:3e:d3:
60:5a:de:dc:ca:62:94:62:4c:33:15:c9:7e:d8:5e:af:25:bf:
dd:d6:54:ed:65:29:22:99:1c:bf:70:12:fa:6b:57:c7:84:2a:
38:bc:b8:50:b1:c8:16:c4:ee:ca:e9:ef:9d:89:95:82:44:6b:
0b:ee:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:50:38 2025 by rpki-client