Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json)
Hash identifier: u+EgqkH9dFK+rw73Gnavg0xaJB98mk4faIvhoIoUdeM=
Subject key identifier: 16:D6:80:5E:38:06:A9:E0:14:E7:9C:FA:4D:30:D9:56:0C:21:7E:69
Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Certificate serial: 09A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
Manifest number: 0986
Signing time: Thu 30 Jan 2025 20:14:23 +0000
Manifest this update: Thu 30 Jan 2025 20:14:23 +0000
Manifest next update: Thu 06 Feb 2025 20:14:23 +0000
Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: bwM5SBy4MBzrUXova0w63tVHX76yhQeImuCQPIDPYzM=)
2: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: cv1XOQDllKYXcpEWN6EDo+84rWYyoCQRLW84g8KQ5ZA=)
3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: 19peW13UIPklgma9IsoYtyIgEi8rvSKuXv+9ezxIut4=)
4: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: VqWzdPFCvuqUEShaf6/toPwLspmfOG4EJ7lP9CUoJW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2472 (0x9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Validity
Not Before: Jan 30 20:14:23 2025 GMT
Not After : Feb 6 20:14:23 2025 GMT
Subject: CN=679bdd9f-4376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:bb:23:75:e4:ed:1a:3f:e1:1f:0e:bc:33:
42:53:d6:da:84:90:1e:42:cb:29:b4:1d:32:5e:b2:
5f:87:32:df:41:b4:05:3b:88:b7:89:d2:68:eb:9e:
f2:bb:11:94:65:39:3c:2e:db:4e:3e:e0:bc:30:00:
98:a3:98:92:d2:5a:31:47:16:25:77:36:9b:b1:17:
7f:b8:f7:04:1d:d0:dd:49:f3:0a:e6:6b:3b:f0:e7:
55:88:ec:09:61:70:79:17:2c:5e:6f:b0:d0:b6:61:
34:47:fd:91:f2:d7:11:28:54:a2:84:70:2b:ef:e9:
d9:d9:3d:cb:f1:a6:a9:b9:c2:91:3d:ca:17:b1:02:
ac:46:f2:8c:10:39:59:4d:38:18:8f:8d:0c:a9:89:
91:26:1e:2d:07:cd:d7:c1:fd:91:6c:42:3b:27:86:
46:d5:04:02:ab:f5:88:14:5a:a8:32:50:1e:df:c6:
b8:0e:3e:42:04:0e:5c:4f:7a:5c:1a:0e:5c:72:b9:
99:53:0a:ec:f9:72:38:90:f4:e2:5f:d9:47:b1:61:
7f:49:ab:b6:e1:db:11:55:b2:01:86:06:d5:01:05:
7d:0e:a2:a6:69:9e:25:b0:c5:cd:02:30:b1:f9:a6:
80:dc:c4:7c:83:ee:67:18:01:57:c0:a7:80:2e:b0:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D6:80:5E:38:06:A9:E0:14:E7:9C:FA:4D:30:D9:56:0C:21:7E:69
X509v3 Authority Key Identifier:
keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:d8:13:99:9a:06:4e:78:38:d8:1a:5f:42:04:a5:8d:c9:f2:
2f:ad:0e:31:36:41:d2:25:5c:b3:0a:b0:be:15:79:a5:c8:d1:
02:99:12:ea:83:d6:10:4f:b0:4d:cd:b2:a9:24:5e:53:4d:a9:
97:13:c2:51:e0:5d:7a:37:be:11:31:4a:99:f0:25:62:95:cd:
db:63:9d:65:f0:61:57:57:9d:e8:4f:32:2a:fd:cd:19:dc:2a:
aa:e2:87:a5:30:6f:8d:bb:9a:fd:e7:7f:a0:d0:1e:2a:a7:1c:
9e:42:48:c7:73:03:96:4c:b2:70:be:3d:59:0d:5e:23:ef:a5:
4e:44:e2:06:72:3b:ef:4c:4c:5d:f4:36:a9:83:d1:f7:2c:dc:
ea:a7:fb:aa:bf:63:d2:cd:07:35:bd:2e:4d:58:fa:c9:88:28:
c1:67:2f:af:dc:f2:0e:aa:57:19:5b:c4:2e:e0:be:30:bc:dd:
de:ea:59:45:11:0c:00:83:87:f9:6a:18:d7:06:0a:26:4c:45:
74:5f:d1:76:ee:25:30:51:b1:cc:0b:14:4f:76:fb:ce:04:f1:
49:c6:23:48:36:a3:1c:94:28:ec:0e:0b:f2:ce:c2:d3:f1:1c:
90:af:a2:d3:39:d4:1b:db:9e:03:17:40:24:ea:67:8e:e2:52:
87:3f:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:53:35 2025 by rpki-client