Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json)
Hash identifier: UYVbbaOJHqwZFYEa0Rwrgpt9hjwa3AI8wqT8sxP8C4Q=
Subject key identifier: 33:21:3D:E8:81:66:C2:AA:12:48:51:7B:38:B2:24:BF:30:DD:85:0E
Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Certificate serial: 0457
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
Manifest number: 044E
Signing time: Fri 31 Jan 2025 00:17:44 +0000
Manifest this update: Fri 31 Jan 2025 00:17:43 +0000
Manifest next update: Fri 07 Feb 2025 00:17:43 +0000
Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: ZV3X+SP066lBS24vL0HVRlKR/4dYj8XS2PHg9Ei+4vE=)
2: 3DDAFD5EA2B811ED8FED0B6EC4F9AE02.roa (hash: njD1iNph4a79Pk80u6vCYjOqwamg0LYQyJ5AqgrkM20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1111 (0x457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Validity
Not Before: Jan 31 00:17:43 2025 GMT
Not After : Feb 7 00:17:43 2025 GMT
Subject: CN=679c16a7-8e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:56:d7:b5:dd:e4:bd:5a:7e:4d:c5:50:f3:
8f:bc:73:38:78:bc:87:56:d4:9d:12:11:71:49:95:
84:50:1c:05:72:1e:e4:5a:b1:fd:57:1f:41:a9:1e:
db:28:d1:d2:96:f7:32:fb:75:8a:fd:38:ad:6c:53:
d0:4e:3a:34:2f:ee:69:05:55:f7:76:7b:14:3b:a2:
38:28:dd:9b:8b:21:d5:fb:d5:9b:8b:a0:de:cf:04:
96:0f:a2:8f:ea:00:99:e4:2f:84:04:2b:d9:f6:59:
04:5d:d9:af:1a:89:cc:f6:ff:07:cb:12:09:44:b8:
4f:86:18:2f:4e:88:82:a4:52:66:21:bc:11:0b:91:
b5:1f:29:38:29:64:b9:73:df:ff:ae:64:40:51:1a:
2c:55:87:b3:e7:98:b0:d1:f5:ad:47:58:93:7a:30:
0f:01:d0:d6:7f:5e:e8:06:88:8e:e9:c0:bb:f9:da:
25:14:19:08:68:90:fc:ed:f4:c5:43:91:13:f1:f8:
70:5f:da:fe:f3:7f:80:c9:3d:c0:50:4f:e5:c9:17:
10:1f:61:48:d6:4e:d0:ce:68:0e:8d:16:fb:ce:0a:
ff:42:fb:ce:43:1b:2c:3f:13:af:4f:5e:23:56:92:
25:81:30:d6:55:6a:5d:d0:f8:1f:9e:f4:56:2f:fe:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:3D:E8:81:66:C2:AA:12:48:51:7B:38:B2:24:BF:30:DD:85:0E
X509v3 Authority Key Identifier:
keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:34:82:ba:d8:3c:89:a8:5b:41:95:18:79:75:3d:3c:53:0b:
20:04:c4:7e:55:c2:ab:0a:3d:27:29:5d:78:21:71:a9:d8:c3:
b5:6a:a3:41:f6:44:9d:a6:11:bb:e2:11:46:41:fe:83:2b:eb:
9d:99:5e:c9:84:f3:30:08:d4:d2:a3:eb:f1:37:1a:4d:ed:74:
44:26:3a:63:d9:3b:79:85:76:9d:39:b3:73:76:1c:45:e7:3d:
e8:12:13:9b:fe:98:51:b2:72:da:79:ea:17:00:af:88:d9:66:
fc:2a:62:10:b3:cf:f9:20:da:6d:53:73:3d:91:8c:d9:60:d0:
4b:4e:cc:5b:9d:61:c7:2b:45:85:2b:b1:60:fb:4c:98:27:91:
f3:99:90:bd:79:d9:92:4b:74:2b:e9:bf:12:7d:47:1c:14:3b:
99:ec:31:ab:53:c8:25:1c:81:11:41:48:73:2b:cd:3e:36:47:
1f:00:16:af:d4:00:36:4e:87:23:eb:11:c8:2d:34:6c:8c:00:
dd:31:c7:50:cb:3f:fd:e2:a7:01:f1:88:38:dc:fa:38:5a:80:
99:88:4a:e7:46:4d:ff:12:73:b8:25:66:0c:4c:5b:b2:3c:01:
bc:99:0d:cc:eb:a4:43:26:28:6a:ad:2c:a2:4a:84:0a:9f:8d:
f8:fd:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:50 2025 by rpki-client