Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json)
Hash identifier: OJNT4Jm73fTZmOCL4QEs5KyO+eg2xx445d1XtBiLwC0=
Subject key identifier: 9F:A8:2A:DB:84:49:8F:9D:2B:76:41:C3:7E:F4:49:69:C4:FB:2D:F6
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial: 02D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
Manifest number: 02CB
Signing time: Fri 31 Jan 2025 01:30:11 +0000
Manifest this update: Fri 31 Jan 2025 01:30:10 +0000
Manifest next update: Fri 07 Feb 2025 01:30:10 +0000
Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: Q6J3tKEVe0M/pROlhmKF9r5qD83Sm7JW3xKSBXBGoUo=)
2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: P0qEB44hIqjtgoxJbWTuafMgiRenfg8d6UvJuS/K3BM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Validity
Not Before: Jan 31 01:30:10 2025 GMT
Not After : Feb 7 01:30:10 2025 GMT
Subject: CN=679c27a2-b17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:36:00:39:5d:ce:12:f8:be:65:d0:fe:1b:23:
86:de:5a:37:47:07:a9:ea:2b:c0:79:ee:42:92:34:
c4:f0:59:e0:5a:23:4b:5b:7f:9a:2e:71:00:e1:5a:
59:cb:fc:2d:07:fd:9a:41:d1:f8:eb:82:a3:a3:0b:
a0:bc:04:10:57:08:4d:ff:ad:77:24:53:07:3d:64:
b5:49:f9:df:50:31:7c:5f:23:f4:ec:c1:1f:2a:68:
c6:b4:eb:80:08:76:6b:8a:cb:a2:2f:7e:05:72:d2:
15:96:a8:77:24:6e:e8:cc:2d:d8:01:86:38:7e:9d:
a9:d5:69:c8:c3:54:69:dd:f4:80:dd:48:d4:ec:48:
9a:ce:68:38:42:ee:46:e6:7b:cf:11:84:68:ac:61:
48:2f:f8:92:b0:5c:ce:01:95:3d:2a:38:b3:a4:d6:
ab:2e:db:f3:71:a9:bd:4a:91:3e:63:67:d0:f1:53:
12:47:48:2e:bd:ad:06:69:64:2a:c9:9f:2a:2e:98:
8e:cb:43:44:03:8f:b6:e0:5c:8a:90:5f:72:da:d5:
87:cf:44:5c:0d:7b:d3:67:ec:c6:79:83:71:21:ee:
a8:b7:f7:80:b5:d1:bb:11:7a:31:5a:6b:1c:77:f4:
4a:b6:7c:91:10:7b:fb:a5:eb:2b:c5:7c:e9:d5:7b:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A8:2A:DB:84:49:8F:9D:2B:76:41:C3:7E:F4:49:69:C4:FB:2D:F6
X509v3 Authority Key Identifier:
keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:c4:44:51:e3:6f:3e:6c:8b:15:2e:33:a9:b0:55:10:04:fa:
8a:1a:0a:56:37:90:cf:90:77:de:a6:18:d9:88:d5:22:04:b4:
90:61:3f:cf:2a:35:cf:06:ff:7f:25:2d:05:06:ae:63:18:01:
c3:31:ac:ae:7a:7c:3e:d2:05:5c:36:da:8e:d5:80:50:e7:f9:
16:26:40:fd:92:61:69:76:51:81:13:2d:5d:e7:41:eb:39:38:
17:c8:5c:29:ef:64:ab:24:23:a3:48:73:8b:f5:d7:1e:4b:2c:
1d:63:ab:b0:2e:9d:1c:e6:90:f3:e7:48:15:12:0d:cc:bb:40:
9c:ce:a4:10:bc:56:86:5d:76:47:52:22:57:03:70:c7:32:e8:
11:2d:ac:a1:8a:57:d4:48:f6:23:16:89:f4:87:6c:90:27:a1:
b1:29:0f:c9:2a:68:6c:3f:87:2d:a2:15:ce:40:57:9f:e0:a3:
50:a3:a0:fc:51:e3:42:ff:85:e1:f5:c6:d8:c5:a1:e0:f9:0f:
b3:1c:6f:bf:9c:18:de:52:e3:95:d5:37:2b:31:d1:ce:6c:12:
84:36:31:99:58:f8:03:e0:a5:db:12:63:e5:ff:c1:4e:8b:9c:
39:d2:ad:ab:13:c3:4d:f2:df:e6:e7:05:e4:2f:73:74:3c:95:
cc:5d:93:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:55 2025 by rpki-client