Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json)
Hash identifier: Naj+xKKPqZXzEebBqLIDYYOVkcP2U3GtKdKwLta7uRs=
Subject key identifier: D8:42:B2:0B:1F:32:D7:82:67:FF:16:89:B0:FF:5D:07:A9:03:67:AC
Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Certificate serial: 34BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
Manifest number: 3488
Signing time: Fri 31 Jan 2025 14:17:31 +0000
Manifest this update: Fri 31 Jan 2025 14:17:30 +0000
Manifest next update: Fri 07 Feb 2025 14:17:30 +0000
Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: DR1rhX4wwjY46s+OCUpw+qfpJLyywd6tX91zOPlSoNI=)
2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 02bT8CJits/dRAWQSl3SIwLvUODi5bkhKG1y3uNprTg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13498 (0x34ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Validity
Not Before: Jan 31 14:17:30 2025 GMT
Not After : Feb 7 14:17:30 2025 GMT
Subject: CN=679cdb7a-2031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:a0:f9:44:ef:ab:f0:3c:96:cf:eb:99:6b:
ee:f3:00:3a:9b:d6:9e:7c:80:4f:d2:19:37:3d:e6:
6a:db:66:d9:f1:8f:7d:cc:f2:9b:a8:2f:57:04:e6:
13:db:ca:fc:31:35:91:81:ff:55:31:2a:fd:8d:9b:
02:24:b9:85:2b:6a:0f:80:46:8d:48:30:ca:f1:6f:
02:8b:33:7f:f9:39:39:b6:1b:e8:f5:e6:4f:3b:30:
7a:0d:10:33:81:f1:3f:47:1c:e6:bd:b7:a5:f8:7c:
4e:77:ce:a4:70:21:9e:e5:48:fc:54:63:19:c9:94:
21:89:2f:49:f4:cf:b4:c8:01:1f:cd:64:84:59:7e:
11:9b:45:32:43:69:e9:1f:8e:f3:84:56:96:38:79:
ee:0f:1b:51:cf:f4:c9:7b:cc:f9:f1:e5:10:39:61:
9f:9f:70:f2:97:b5:87:5a:eb:d5:7e:14:7c:b9:af:
94:21:a8:19:2c:b8:34:6a:3d:36:99:41:f8:c7:51:
74:cc:57:cc:09:2c:1a:52:44:1e:99:66:fb:a5:d5:
36:69:6d:80:78:86:ac:d6:8d:19:e0:50:a5:2c:8e:
6d:d5:7a:e0:5f:25:1e:b7:c1:26:01:84:b0:d4:4c:
9f:81:66:fd:cc:13:cd:13:d7:37:03:aa:ad:8a:e9:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:42:B2:0B:1F:32:D7:82:67:FF:16:89:B0:FF:5D:07:A9:03:67:AC
X509v3 Authority Key Identifier:
keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:27:17:44:ef:ac:b9:d3:c7:5f:fc:20:0c:fa:48:47:f8:57:
a9:45:2b:40:66:4d:58:40:39:93:5d:9a:6b:8e:6c:72:5f:83:
62:a0:be:b0:eb:f2:24:6a:5f:50:31:5d:a2:01:2d:db:39:fe:
cb:18:4d:70:7e:bc:ca:77:e4:02:1f:a9:0c:ff:a9:a0:7f:ec:
ab:b2:87:87:b9:aa:8c:f1:0f:fd:f4:e5:03:ff:35:6f:6c:35:
37:98:af:5d:a3:d5:0b:f1:57:d7:b5:fc:6c:63:56:2d:9e:67:
90:8a:ef:f7:7c:22:b6:33:6b:80:4f:b8:06:39:b0:23:5d:5e:
70:3c:07:08:82:c7:8d:f7:a9:3d:5d:b3:c3:03:b5:46:68:11:
c6:2b:14:5b:ae:23:1e:95:ea:d1:ca:4e:7f:f9:d1:1a:a1:88:
76:82:cf:73:e7:c1:2d:bc:41:6a:99:73:cd:f8:c2:0d:bb:5a:
49:22:fe:56:43:bf:6c:5d:a2:95:7b:9a:6b:7f:bb:70:6b:07:
e4:c9:17:05:64:3b:ef:3d:e8:cf:37:b9:72:a0:78:87:1b:5b:
ac:22:2b:c0:78:37:97:3f:df:00:a9:c6:81:2a:9f:5c:88:af:
fa:39:81:3f:cc:28:ab:11:3f:fb:35:04:67:e4:57:3f:eb:78:
37:dc:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:28 2025 by rpki-client