Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json)
Hash identifier: GPDMaJjJ1LFWjBn4G4V+DIQUpPnpMMGvTl48cACvCso=
Subject key identifier: 4A:4B:6A:32:1F:3A:C6:0A:5D:8A:B4:AA:7C:80:41:1F:0F:C0:AD:C7
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial: 05DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
Manifest number: 05D8
Signing time: Thu 30 Jan 2025 23:01:23 +0000
Manifest this update: Thu 30 Jan 2025 23:01:23 +0000
Manifest next update: Thu 06 Feb 2025 23:01:23 +0000
Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: TW9P6kyz3MCyKu+2OFE+7Y4EF0kkHAZL4MAkaLA/CWQ=)
2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: gD2pdRxoUHqWRJCmsWGE/SoCkIZoZVizTbKUYmffLCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501 (0x5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Validity
Not Before: Jan 30 23:01:23 2025 GMT
Not After : Feb 6 23:01:23 2025 GMT
Subject: CN=679c04c3-898b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:c5:67:5b:0d:8d:f9:f5:46:3b:49:16:4e:
eb:c5:0f:23:2c:2c:fc:62:e2:b1:5c:4c:66:1e:23:
93:71:2f:64:a0:ad:33:eb:7d:e6:27:d4:c8:d5:5b:
47:b1:05:d2:73:3f:53:83:a8:11:57:1a:82:c7:ad:
6d:d7:6e:12:51:ef:8b:74:05:6a:4c:2e:30:08:e2:
71:ef:0a:38:b0:9b:af:ca:d6:8d:e1:c5:0d:b3:db:
50:ed:d2:38:a1:95:8b:08:c5:62:a8:98:ba:02:64:
34:4c:5c:16:c4:bf:86:4f:28:8e:b9:cf:9f:fe:90:
d9:99:2e:a8:ae:16:5a:ae:57:78:3c:1f:46:a1:48:
10:a2:99:16:fb:7e:4e:de:de:55:70:0e:dc:a0:93:
c6:d7:79:c9:8b:b6:06:ec:ae:6b:3f:79:18:f3:64:
52:e7:22:1f:a4:c1:06:99:26:40:42:db:06:f5:fb:
2f:31:be:d7:68:1d:9f:08:a8:f6:c7:b5:e7:13:28:
e7:0d:bf:e1:d1:ce:49:58:ac:3f:37:26:34:2b:26:
9e:58:6d:5b:c5:7f:35:4c:34:73:f9:bf:a7:9f:57:
67:39:b5:d1:79:37:68:85:89:4c:47:44:ab:ef:6b:
7a:5d:37:f6:3e:c0:a8:e7:e4:1d:52:5b:b3:64:47:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4B:6A:32:1F:3A:C6:0A:5D:8A:B4:AA:7C:80:41:1F:0F:C0:AD:C7
X509v3 Authority Key Identifier:
keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:5b:d1:ac:78:84:d3:e8:51:98:db:d1:80:a0:63:6a:ea:c5:
6e:c5:c8:73:d9:cc:bb:e6:56:fa:fc:4a:2b:d4:cd:e9:35:3f:
6d:ff:a0:bc:a2:0f:13:92:90:be:17:55:a8:ff:0a:47:a3:6b:
af:9c:f6:11:b3:7e:64:37:af:01:c9:27:61:0c:eb:bd:9a:76:
b7:1d:98:3b:38:42:15:ef:c3:52:02:de:29:f4:1c:af:1a:5f:
a6:1b:08:9c:5e:21:4d:2a:98:af:39:ea:b5:64:57:bb:19:99:
96:7e:51:cc:8b:13:37:73:5c:3e:70:e1:9a:93:35:92:21:a9:
15:5a:a4:f0:95:31:1c:7b:f8:10:34:dd:39:f1:0c:14:22:ac:
2f:e1:2c:6a:0e:a7:0b:db:a7:34:89:d6:af:41:5a:c3:52:2b:
ab:a5:35:ff:2a:09:c7:8d:15:dc:1c:71:3a:f5:f0:60:e7:2e:
fd:94:75:12:c9:de:28:94:14:ad:2d:39:01:cf:37:96:ff:94:
b9:41:32:ed:cd:49:6d:bc:50:8e:5f:ee:ed:23:61:93:6b:90:
d3:02:41:d2:93:61:9e:ce:13:74:af:6c:5d:39:27:58:af:d4:
af:7d:dd:4c:75:d1:11:78:5d:7a:39:96:a6:02:ed:7b:f8:be:
b2:ae:bc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:55:31 2025 by rpki-client