Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
File: cXie4rLIt_u60_eFpd3s7xXMFaQ.mft (raw, json)
Hash identifier: RAZxDrdWWZN2O3C+LwME7XhqBOP3UVio5QMJxmUv1ms=
Subject key identifier: 23:AE:6B:1B:D1:D6:FE:C4:83:C9:53:8C:8D:A8:5C:39:B6:E2:06:6E
Authority key identifier: 71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4
Certificate issuer: /CN=A9138171/serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4
Certificate serial: 0741
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
Manifest number: 0736
Signing time: Thu 30 Jan 2025 21:39:49 +0000
Manifest this update: Thu 30 Jan 2025 21:39:48 +0000
Manifest next update: Thu 06 Feb 2025 21:39:48 +0000
Files and hashes: 1: cXie4rLIt_u60_eFpd3s7xXMFaQ.crl (hash: tBja3VyfNIOorOaS2Ys0jgfiQi9ZM1WzNca2T6oF2nk=)
2: 4848EB6E18BF11EBA5E2E946C4F9AE02.roa (hash: 3hCDFMftxdMJaktdcv1bEnM2+B6FOPnkdRrwhP0xHz0=)
3: 47B8C6B018BF11EBA5E2E946C4F9AE02.roa (hash: U/tx3MraILOec7vkpEGffo5QsXSNEbPW1wesnqKSc8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857 (0x741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138171/serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4
Validity
Not Before: Jan 30 21:39:48 2025 GMT
Not After : Feb 6 21:39:48 2025 GMT
Subject: CN=679bf1a4-e754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:e2:1f:72:d8:bd:1a:9f:13:c4:81:db:9d:
af:f8:0e:55:9e:e3:8a:54:32:8c:33:93:58:f2:5d:
1a:e5:9f:47:99:88:9a:95:7f:79:d3:35:f0:fc:f0:
93:be:71:56:a7:f3:1b:20:ce:0e:30:09:2e:18:e7:
e4:ea:ad:5e:90:09:41:55:3d:b1:25:79:7b:e1:68:
52:74:5d:1d:28:65:8f:08:92:ab:fc:0d:20:cd:9b:
e7:be:ba:91:00:00:60:15:23:86:43:82:06:f4:38:
35:29:2c:6d:5a:64:fb:74:f0:a0:d1:14:b2:30:94:
ea:f6:59:ff:e1:41:58:0a:b1:36:b9:10:77:b9:64:
1f:58:0c:67:8f:83:97:17:51:9f:8b:8b:d0:17:4d:
f7:3e:42:29:71:1c:ce:c0:b3:0c:ac:82:ff:8b:7d:
b2:7e:88:4f:f8:95:c2:dc:d7:e7:40:d1:63:c9:09:
7d:93:bd:b1:0b:82:c9:49:b6:51:71:c9:cd:b3:3d:
e6:5e:21:b0:13:e4:94:86:86:9a:5c:9a:71:3f:8e:
72:9b:c8:74:46:52:12:bc:12:dc:cd:ce:34:d5:f3:
7c:e3:90:07:b2:e0:5b:13:52:6a:54:67:7f:f3:7c:
48:5b:ff:b1:73:89:f9:4a:56:5e:f2:40:c3:4d:07:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:6B:1B:D1:D6:FE:C4:83:C9:53:8C:8D:A8:5C:39:B6:E2:06:6E
X509v3 Authority Key Identifier:
keyid:71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:a8:2b:b1:3f:59:0e:cb:57:9e:4d:fa:8e:96:39:15:a2:05:
74:30:1b:79:a3:42:cf:34:59:4b:b3:2a:3f:91:d5:e0:32:f4:
f6:1c:0e:d5:22:d7:c3:25:08:d0:f6:47:0d:06:8d:5c:78:ea:
06:1f:75:0f:10:94:ab:52:93:c1:eb:b1:0a:47:8f:bf:de:28:
92:21:ca:5e:86:e0:27:32:0e:ce:a0:4e:a2:ad:cc:a0:c9:87:
f3:14:3d:27:99:2f:5c:29:bd:bd:b5:67:26:3c:ea:64:4a:b8:
d2:91:da:07:4e:60:88:69:be:fd:68:ab:d5:0d:b6:56:5e:e0:
d8:cb:a3:25:d3:88:be:ed:41:52:ec:2a:e1:a8:ac:5b:d0:87:
5e:50:1f:a9:9c:f0:8a:d0:cc:91:b2:85:2c:9e:96:d4:55:7d:
45:17:57:70:a5:04:df:5a:b3:71:51:52:78:27:86:0b:8c:48:
29:ab:37:2c:18:1d:32:b4:62:d2:62:65:ee:37:0a:8d:3c:bb:
64:00:ea:5c:42:fb:52:ac:0e:e3:4f:fe:0f:51:d2:c9:71:37:
16:18:90:b1:28:4b:e3:fc:69:5c:6f:90:e0:70:b2:66:8b:fb:
3e:72:ef:83:a1:98:8f:27:1d:23:a0:90:32:27:ee:a4:c0:39:
a4:4d:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:46:14 2025 by rpki-client