Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier: tdZtrc/ksupQ97nXbocKme3Xq0ylpnHjFLNig57HhIU=
Subject key identifier: CC:05:86:1E:5B:FC:F5:8B:0F:D3:41:64:F9:DD:F5:EE:25:75:C1:37
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number: 2D
Signing time: Fri 31 Jan 2025 06:45:54 +0000
Manifest this update: Fri 31 Jan 2025 06:45:54 +0000
Manifest next update: Fri 07 Feb 2025 06:45:54 +0000
Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: uMt5Pky9ruFDxAdJFKIEr3DsofoiO94iUD13F2wjzJs=)
2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Validity
Not Before: Jan 31 06:45:54 2025 GMT
Not After : Feb 7 06:45:54 2025 GMT
Subject: CN=679c71a2-282c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:32:29:ca:52:e0:ec:4e:2f:e7:31:dc:ea:
e8:33:2f:4d:bf:6a:54:df:e7:5c:11:ba:67:9f:1d:
98:13:e2:6b:7a:b0:aa:e4:6e:3e:b5:04:21:33:ff:
63:95:e5:47:cc:18:66:40:dd:a8:08:db:6b:a1:3f:
04:58:d4:ea:f2:f6:bd:dc:97:81:52:03:ef:a6:7f:
00:85:f2:c0:14:07:c6:2d:37:f6:6e:68:3a:be:f4:
08:17:73:58:7c:f8:65:0a:c2:03:8d:9d:55:36:c5:
0e:ed:fd:ab:2a:e1:24:da:23:a5:73:85:d7:6e:0d:
d8:b6:d8:d9:43:6f:d0:51:1c:ec:a3:d3:7e:61:44:
38:db:6e:f8:77:0e:27:84:a0:ad:a7:f1:4d:28:32:
37:51:7e:93:ab:cb:3d:fa:4d:f6:ae:d7:dc:c9:2b:
7d:52:e3:b3:36:87:6c:69:7b:3d:6a:98:aa:0e:3a:
9d:0b:02:7d:ce:48:08:ae:d3:b9:85:1f:49:a1:38:
dc:df:21:7e:bb:92:6a:c0:58:69:89:67:5d:2b:88:
2f:9a:86:9d:be:85:1f:54:2a:d7:d0:c0:2d:50:f1:
db:b5:64:54:af:12:a3:1c:a3:f6:e8:86:db:5b:cb:
c8:ce:db:1b:2c:d2:34:88:fc:c5:6f:4c:43:4d:6c:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:05:86:1E:5B:FC:F5:8B:0F:D3:41:64:F9:DD:F5:EE:25:75:C1:37
X509v3 Authority Key Identifier:
keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6f:63:15:25:23:08:d7:aa:a5:f7:4b:18:0b:b5:8d:ef:2a:
55:d7:69:35:54:7b:de:6e:48:f6:ac:5c:5f:ac:9d:50:36:c6:
fb:fb:b8:4c:5b:5b:be:4d:d1:9c:92:35:54:83:80:2c:10:c8:
24:b1:78:e9:9d:99:d7:84:d9:b5:e0:ea:9c:d9:cd:68:40:48:
45:a0:48:e2:d8:dc:19:d0:b6:09:c5:3c:aa:fe:64:f5:c8:a7:
bb:1c:46:c0:c1:36:37:b5:2d:43:9f:7b:4a:93:83:dd:fb:2d:
0b:7e:a5:2c:da:a3:ab:d3:6d:66:3f:e7:fd:27:4c:da:7c:2c:
c2:51:2f:3a:7d:55:32:3b:5e:b2:76:08:8e:59:85:31:ae:f2:
32:3d:9a:18:db:17:2b:32:ab:b9:fd:26:d5:e2:cd:f4:95:4f:
ce:f6:ea:ff:0e:de:23:e1:7a:cb:de:ba:4d:9e:52:dc:05:68:
b2:4c:8d:d6:bc:f1:01:56:df:5c:10:56:7a:39:37:87:9f:4f:
88:97:0d:b2:d3:34:1d:37:4f:18:f8:d2:1c:f9:32:f1:27:5c:
da:96:bb:40:4b:60:a0:8d:4a:36:0b:fc:e0:05:93:07:fd:ad:
60:d0:b2:9c:0d:ef:e3:6b:08:d2:96:82:35:e4:9e:98:0d:06:
9c:ba:fe:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:46 2025 by rpki-client