Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json)
Hash identifier: zoC3PfaZQPqCZwDSY538G90GhaWrTuKd5ldOcplqbg4=
Subject key identifier: 37:32:6D:94:5A:8E:ED:47:D9:39:CC:31:AB:91:63:8C:6E:B4:CC:BA
Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Certificate serial: 029E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
Manifest number: 0285
Signing time: Sat 29 Mar 2025 01:55:18 +0000
Manifest this update: Sat 29 Mar 2025 01:55:18 +0000
Manifest next update: Sat 05 Apr 2025 01:55:18 +0000
Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: BE3L/uBUN309Se+Zj4d0/GJy3Nt9IB61egiE9VUslls=)
2: 1D2D34A03D9E11EF8CA60559C4F9AE02.roa (hash: NU5LbORnx7f2Q1maR6ODrFVmph2D4UbzDhdnsftyg5c=)
3: 8D156CDE391A11EF880FB82FC4F9AE02.roa (hash: /zNjWEjih0QCdQAIcUzfklwUex/YSgMs6L4oVfON+H0=)
4: 5D4068C0E82411EE92612D7DC4F9AE02.roa (hash: p3i6Ay+o3E2OVSQm1vW2MA6Ty+h/wAo4/YH27AwdgTs=)
5: A0C8CD303D0111EFA1017A43C4F9AE02.roa (hash: T9cWjjXPf/7UTUA6GipY/lTKthM0vFudXpLlQMiPiqg=)
6: 9E760A10B83B11EFB3BA160AC4F9AE02.roa (hash: +FhjATmcLMZKl9Iq67ZOqZNWkcnSddFmOwPj8XYYbcA=)
7: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: LovrQr0mUjcthPu/WYoue9gVRApOki+SAMOADrfZtvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172999
Validity
Not Before: Mar 29 01:55:18 2025 GMT
Not After : Apr 5 01:55:18 2025 GMT
Subject: CN=67e75306-34b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:19:39:62:ad:30:aa:5d:c3:12:f1:fb:86:
a8:3f:e0:7b:33:ab:59:5d:51:66:e9:7b:c7:91:e4:
20:1d:97:05:d6:e0:d5:56:39:ce:ea:0d:1e:e8:8b:
74:05:b5:5c:ef:10:37:a1:99:04:b6:a3:57:6a:83:
45:d5:93:fe:7b:34:2f:3b:8b:b9:33:bc:30:43:ee:
05:5f:89:af:22:22:d9:dc:28:9e:f2:31:1f:6a:8c:
d5:56:f2:36:1c:5c:fb:46:f4:3c:c8:20:97:11:14:
4b:81:75:8f:72:8e:ec:09:80:00:ad:8a:b2:1e:de:
c4:8a:c7:b0:c2:45:5e:ff:07:03:d6:a5:63:98:eb:
ec:35:29:5c:a6:0b:bc:56:48:80:aa:4f:c1:f8:f0:
9e:10:9e:db:c0:7d:59:dd:ac:3f:a2:ad:91:07:8d:
e6:ae:21:ab:97:00:52:8e:da:1d:d4:52:c4:ac:cc:
76:3d:92:f1:91:87:2d:90:fe:f9:2d:2c:89:bd:3a:
54:f8:0e:52:90:02:6c:19:f3:85:78:8b:57:3f:30:
ab:48:61:1f:30:f2:2b:c4:f4:fd:fc:74:df:61:0b:
57:bc:3c:ea:f8:a2:77:1d:71:ff:14:cb:b0:2f:d3:
70:9e:62:0b:26:eb:56:65:4f:a8:d4:ef:64:d0:4c:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:32:6D:94:5A:8E:ED:47:D9:39:CC:31:AB:91:63:8C:6E:B4:CC:BA
X509v3 Authority Key Identifier:
keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:45:76:92:c0:68:a7:9f:57:b2:e1:c8:9d:be:eb:18:3a:fa:
aa:a4:01:80:45:84:e0:c3:e5:5c:98:9b:c2:a4:cd:2d:be:1f:
aa:65:cf:9e:58:5e:e4:6d:ef:71:15:33:74:6e:f9:70:14:92:
6a:da:fa:3a:a3:db:39:dc:6a:1d:74:c3:43:aa:3e:ee:5c:60:
af:73:31:8c:e8:2d:5a:d9:14:b3:56:cc:65:3c:9a:71:49:ee:
83:05:a2:b2:5a:75:1c:86:f7:d0:a3:9d:4e:ba:1c:dd:77:b9:
63:2b:2d:64:f0:bd:78:d0:95:38:2a:ab:fa:33:71:f4:ec:96:
40:db:5b:94:ac:94:45:0f:c2:e4:47:7c:30:a9:72:f5:b8:7b:
b4:bd:4c:b0:3b:91:e2:4e:1f:2a:f5:dd:cb:9a:10:8e:24:32:
07:d2:fa:32:26:d3:91:de:40:23:6d:07:24:9d:d3:ae:e0:d5:
ed:71:4d:0d:ac:13:23:ef:3d:bf:e6:8b:ca:eb:3b:ba:25:b6:
05:5c:58:44:da:82:e6:71:72:6d:cc:17:92:e5:f1:73:19:2c:
55:d9:ae:ce:98:ae:3e:75:7e:7b:c4:4e:18:08:29:94:79:ac:
0f:0e:a3:56:e9:e6:f6:36:a5:9d:2a:e8:29:32:a7:87:b6:f1:
91:d7:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:37 2025 by rpki-client