Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json)
Hash identifier: 9yqUEVZCJPys2+sh9Fb0AbuhCcW5xo3jasATX9Orkhs=
Subject key identifier: CF:D0:7F:6E:30:B1:1D:7E:51:01:67:6B:E3:3D:98:9E:46:06:CB:80
Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B
Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
Manifest number: A5
Signing time: Fri 31 Jan 2025 05:16:54 +0000
Manifest this update: Fri 31 Jan 2025 05:16:53 +0000
Manifest next update: Fri 07 Feb 2025 05:16:53 +0000
Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: uYCLCYLX02wZ7H3L08jNgdxkIeHwulCe6ncv2pIAF28=)
2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: CQEL5kj4k2y2pQ/JT3F7+awUDx+X++2oXAreZHP5rt4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
Validity
Not Before: Jan 31 05:16:53 2025 GMT
Not After : Feb 7 05:16:53 2025 GMT
Subject: CN=679c5cc5-7f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:b4:be:56:ac:73:ab:58:72:58:07:b4:50:
a8:fc:44:48:5a:ee:8b:18:81:cd:b8:17:c4:5a:6f:
99:38:24:3d:75:c4:d5:a3:d2:23:4d:23:82:0d:d0:
53:b7:d2:61:47:2e:4f:d6:73:a1:90:50:ad:d5:e5:
46:08:c7:7d:f5:96:a9:50:70:05:0c:46:c7:98:77:
1e:42:89:9b:8d:9c:f9:8a:24:44:7a:2e:93:0f:ac:
2b:67:fe:33:03:06:f7:87:27:47:49:e5:a3:61:88:
53:79:87:88:e8:f7:74:a3:8b:4c:e5:4c:7b:44:7d:
a0:1e:5d:dc:78:68:2b:2d:33:5b:82:d8:fe:3f:b8:
45:c9:6d:08:ba:97:e1:b7:5e:10:7a:7e:35:2b:d6:
be:e9:e5:62:00:65:df:45:41:aa:29:e0:c5:7e:b4:
f5:e0:d2:55:0d:66:de:af:4d:0e:cd:10:f2:c4:7b:
45:c8:0a:8f:92:fb:d3:37:a0:22:8b:2b:f1:5e:d4:
75:ac:09:5a:dd:b6:13:90:b5:5c:ee:a8:72:79:07:
74:a2:ec:2c:de:98:bd:5d:a2:a5:5e:48:50:2e:c5:
3d:d1:f9:fa:82:38:c9:d5:c6:fe:e6:c4:c8:91:b2:
d8:e6:27:92:0a:66:ab:92:bf:b8:70:fb:f8:3f:0a:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:7F:6E:30:B1:1D:7E:51:01:67:6B:E3:3D:98:9E:46:06:CB:80
X509v3 Authority Key Identifier:
keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:ef:47:18:f9:c8:c5:e0:a8:7c:e4:84:d3:56:81:a6:2f:c7:
e4:90:de:ba:d5:2f:d9:35:d5:c6:64:1d:04:1d:83:cf:c7:9a:
b2:58:9b:3b:1c:db:52:3f:8d:c8:c9:cd:ab:12:0d:e1:9a:98:
3f:3a:ed:24:62:e2:d5:9e:91:a1:1d:cb:92:f5:1a:e2:23:c2:
5c:f0:93:73:0a:66:70:23:9f:a9:85:cc:fc:5c:bd:3d:0b:a6:
dc:98:4d:fe:ca:ec:55:3a:49:57:b9:78:5b:1c:c5:7b:8f:c8:
22:6c:b1:d8:72:6f:94:24:14:36:6b:b1:68:75:38:53:1e:4d:
81:e4:cd:23:2e:d3:9f:cb:f3:10:4e:e3:84:e1:dd:56:4f:ce:
5b:0f:00:29:5e:e5:fd:2f:22:1b:91:84:d6:ce:03:8c:ab:6e:
3b:9c:fd:cf:16:26:9e:9b:59:d3:29:90:a8:12:fb:29:e9:bc:
25:bf:65:67:8b:2b:5c:63:2a:ab:db:e3:51:77:9b:ee:f9:21:
c3:48:ae:ee:ae:15:bb:4e:0a:2f:a6:4c:a7:bb:67:75:b5:36:
2d:c3:fa:7d:1b:5f:9e:22:58:26:d0:cb:58:5b:d6:38:9a:6f:
8c:2c:3a:7d:a7:16:09:a7:e7:66:28:c7:e9:9f:f3:7c:f6:de:
30:04:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:30:50 2025 by rpki-client