Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
File: RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft (raw, json)
Hash identifier: o33+GN6ENTABxpqONx2cTP9JfN/ylgWyOVAP04ijvIs=
Subject key identifier: BF:0A:D7:E8:5A:91:68:F8:D5:9A:88:B6:F2:D6:9F:B5:51:81:8C:D6
Authority key identifier: 47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
Certificate issuer: /CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
Manifest number: C5
Signing time: Fri 31 Jan 2025 04:59:14 +0000
Manifest this update: Fri 31 Jan 2025 04:59:13 +0000
Manifest next update: Fri 07 Feb 2025 04:59:13 +0000
Files and hashes: 1: RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl (hash: woG4cnU+TlDqJND+au1465r4Mttdz5/g5HW33dVJxl4=)
2: 939790AAB9BD11EEA19BE74DC4F9AE02.roa (hash: usgNeDoGlzZoBDkMS+oNirA/1DpfH4pmT68FwmH4UH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Validity
Not Before: Jan 31 04:59:13 2025 GMT
Not After : Feb 7 04:59:13 2025 GMT
Subject: CN=679c58a1-2bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:77:95:4f:0a:35:5f:5d:06:0c:71:e3:56:
75:d9:e3:fe:d2:d7:a9:da:b9:89:f0:2f:4f:68:f3:
86:9e:62:ed:69:6d:58:5d:aa:25:47:70:33:88:1d:
50:24:e0:0d:58:9e:dd:42:ec:71:75:d2:55:d3:80:
63:f1:d3:01:eb:e9:a3:40:37:ab:e9:b6:62:b9:0b:
55:1f:96:15:77:fe:63:e3:7d:8c:8e:0b:be:48:98:
74:15:56:87:b5:fc:f7:b4:96:41:e4:6d:ae:a4:4a:
3c:a2:4c:56:a3:f0:85:9b:58:23:23:ae:15:8e:b1:
40:b2:08:35:d9:72:84:9b:2e:d7:06:72:02:a1:b3:
78:79:40:88:5d:d6:eb:71:e9:47:f2:f7:6e:c6:72:
75:96:07:5d:dd:85:31:6d:d8:0b:6c:32:3f:c3:41:
8f:81:e8:53:2b:a1:86:42:88:e9:e4:57:52:df:d9:
4e:91:11:d5:09:72:36:f3:f7:84:43:73:78:82:4b:
a8:2a:3d:11:08:1a:bc:36:e4:a2:6b:cb:ff:0a:55:
62:d4:7c:56:bb:ac:b2:51:32:cf:0a:cd:57:db:a6:
44:e5:cd:8a:4c:c0:92:0c:16:42:c6:dd:25:70:e7:
f9:cc:0c:d5:78:00:39:aa:3b:7e:bb:97:b5:c7:7d:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0A:D7:E8:5A:91:68:F8:D5:9A:88:B6:F2:D6:9F:B5:51:81:8C:D6
X509v3 Authority Key Identifier:
keyid:47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:bc:90:a2:66:74:41:2d:b7:76:97:fb:bc:24:65:cd:aa:dc:
31:ef:bf:d0:1b:45:91:fe:c5:c8:36:07:59:17:d1:a8:0a:c9:
16:94:a5:91:c5:7e:5d:97:5b:4a:ad:41:db:5e:2f:c8:30:81:
f9:e8:a3:58:58:5b:2d:cb:2b:7b:73:0d:42:8e:4d:34:8a:1b:
7e:af:1e:48:16:3e:be:df:5c:83:ac:a4:b4:c7:f5:b7:8d:3b:
82:ef:33:27:a9:42:ce:0d:42:f6:6b:aa:2c:3f:7a:6d:0a:d5:
b3:44:1c:50:c1:b2:df:cf:c6:9f:33:e3:41:1b:3f:26:9f:25:
8e:b3:75:ef:1b:ea:e5:fb:d3:2a:97:74:8f:6a:35:2f:fb:76:
60:00:34:18:cb:a0:fa:09:8e:e8:04:cd:4a:d1:dc:0d:cd:f4:
dd:2a:c2:a7:d9:c1:60:ef:83:34:a0:08:91:dc:13:8a:6f:fe:
8c:c3:29:3f:43:5f:bd:89:36:85:bc:02:05:3d:dc:9b:fa:df:
c1:70:e3:6d:68:42:73:8b:43:58:25:8e:97:86:1b:d6:b9:cf:
7e:5a:62:d9:7e:34:1d:8a:21:63:e7:60:92:59:b4:5c:43:9d:
41:cf:79:0c:3d:e5:7f:50:a5:26:a3:49:4b:b7:b8:6e:31:7b:
e0:09:98:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:08 2025 by rpki-client