Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json)
Hash identifier: TabLyXftG+fCqAb0Ws57R4xKsEcfxEXEE05y1N4pRqc=
Subject key identifier: EA:A8:81:FA:A4:2E:79:E7:CE:D4:B4:E3:91:F3:AF:E2:78:CF:B3:E8
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 0AE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
Manifest number: 0AD2
Signing time: Thu 30 Jan 2025 19:28:27 +0000
Manifest this update: Thu 30 Jan 2025 19:28:26 +0000
Manifest next update: Thu 06 Feb 2025 19:28:26 +0000
Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: UJoGRcSij9JUGzdLkG9XdSbJxWYJCXdSiL06Jpoi8ho=)
2: 6808E6322F1C11EDA3E29B09C4F9AE02.roa (hash: vqIiC5denoz8Yiz6UodWvD7t0BBX+gY3rEG+abpRC2o=)
3: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: lSOlJAUUKdf/oxORuEf9BSblv8TlMMz6ihd34X0wQsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2787 (0xae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: Jan 30 19:28:26 2025 GMT
Not After : Feb 6 19:28:26 2025 GMT
Subject: CN=679bd2db-ecb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:65:e1:81:e1:4c:9d:9c:5e:07:5d:4c:e3:
80:c4:bc:12:65:67:87:ca:d1:16:1b:8c:65:36:16:
09:d7:8c:aa:e1:8e:30:1f:6c:cd:f7:c8:0c:db:1d:
80:69:89:6a:44:eb:f2:96:7a:2a:03:ed:ce:b5:4b:
14:c2:a8:eb:b3:24:fb:34:c7:3c:54:83:ff:10:89:
9b:a5:f0:27:a1:a5:7c:19:ff:4d:7c:a7:ca:ed:0f:
9f:08:8c:86:0b:db:94:86:33:b1:63:94:e4:5b:f0:
0c:03:86:3f:16:0f:7d:1e:86:d9:3c:b2:b0:55:eb:
fc:f0:d5:46:d5:97:87:db:b5:4d:57:b0:70:dc:cc:
1d:3a:f3:1b:c6:df:bc:18:f4:a3:5b:70:79:c0:63:
8d:86:37:ac:16:e6:77:47:81:e9:79:1a:42:29:61:
5c:59:d4:ac:85:28:6c:6d:78:36:71:56:66:21:03:
12:03:68:8a:b1:b5:54:3f:97:76:09:79:e1:60:41:
54:16:4e:52:89:4f:0e:f3:c4:63:4e:a7:79:0f:6b:
89:36:e9:82:2d:00:cb:5d:f9:62:7a:9b:73:d7:01:
48:48:56:13:ef:b2:8a:2c:2e:15:a3:3d:09:8d:ae:
df:8a:e3:bc:66:e5:df:a6:2c:db:9a:b4:1e:97:3e:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A8:81:FA:A4:2E:79:E7:CE:D4:B4:E3:91:F3:AF:E2:78:CF:B3:E8
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2d:ba:16:40:b5:c8:34:7f:80:9e:b7:c6:d6:6c:aa:f1:50:
a4:c2:47:07:55:f2:28:4b:e8:01:28:2e:cf:8c:62:b1:ed:a3:
12:7b:8c:fa:80:6a:9c:2c:da:ea:18:c2:a2:a9:9e:2d:3a:3f:
ae:c7:24:9c:7e:d5:b2:bb:2f:f0:11:92:ec:2d:b3:58:d8:fd:
21:ad:51:dd:41:35:88:a8:d7:13:73:de:bd:15:e9:1a:2b:d9:
22:94:93:3c:2f:84:44:bf:92:1f:3b:3c:19:0b:4e:a1:9f:2e:
6d:23:6f:7f:7c:f0:43:5a:7a:1f:ad:49:2d:6e:ba:2a:db:76:
c6:b9:e8:5d:a4:2a:4a:39:2e:c6:cd:10:6b:ea:a2:c5:b9:ab:
0b:ea:62:51:9e:3c:13:00:05:17:3b:1d:37:e7:37:85:88:0a:
d5:9d:0b:be:9c:9c:68:32:44:95:08:85:a7:e1:fe:d7:4d:86:
8f:aa:ed:00:4b:06:10:27:81:c7:87:06:21:db:90:36:86:c1:
11:7e:85:28:a4:bf:9d:9a:c9:97:d0:16:cc:1e:bc:dc:67:15:
81:75:da:73:15:b4:7e:ee:4a:66:f9:f7:4a:45:e9:88:09:8c:
01:7d:9a:e6:21:44:29:3a:ab:37:05:b2:98:3b:8e:38:cf:90:
ef:e4:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:30 2025 by rpki-client