Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json)
Hash identifier: GwuYFYj87K9NMDf7J4tn9s3hZ2TM683N5t5UeFzMrQE=
Subject key identifier: C4:0B:5C:C3:D8:04:63:CB:0A:78:46:23:A3:6D:DB:24:43:37:D0:8B
Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96
Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
Certificate serial: 1672
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
Manifest number: 166A
Signing time: Fri 31 Jan 2025 16:41:53 +0000
Manifest this update: Fri 31 Jan 2025 16:41:53 +0000
Manifest next update: Fri 07 Feb 2025 16:41:53 +0000
Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: 2AV3HqCWbPaU4Dhk2/WU11aIUE22plKE2ZMRPXfI7do=)
2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: u8ortcT9MVFR9wLoP95O/siQb9jiYn8AeoW1F/za0m4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5746 (0x1672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
Validity
Not Before: Jan 31 16:41:53 2025 GMT
Not After : Feb 7 16:41:53 2025 GMT
Subject: CN=679cfd51-2d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:19:ad:40:1b:ee:c3:37:7f:a3:34:f3:0e:
f2:90:fd:1f:e6:51:6e:f0:cd:09:ea:ae:59:f3:1a:
19:76:3f:8c:70:eb:64:c5:00:0d:d0:0a:a7:f0:46:
1c:08:e3:5c:5f:99:a8:53:1c:a3:b3:91:7d:e6:31:
38:d2:c1:70:3d:48:ec:06:7f:22:83:f3:5a:8a:1b:
41:c6:2d:d2:47:e9:f4:13:57:15:ae:ad:66:d3:e3:
d6:73:4a:24:36:4e:73:9c:00:e1:42:80:66:e8:e3:
ad:6c:67:71:b2:f3:09:5b:79:cb:a8:98:04:d1:6c:
70:80:3e:5f:37:74:dd:64:b6:2d:c4:32:ef:41:33:
78:2e:cc:32:25:e9:fb:41:3b:f3:ae:28:3f:f8:28:
55:55:da:84:0e:fa:16:1a:6d:66:02:05:a7:e5:a9:
ea:6a:46:69:7d:f6:fd:a0:56:af:2c:50:0c:20:67:
cb:4b:29:3b:de:b6:ab:e5:5e:ad:d6:18:78:91:65:
30:c6:ba:f1:82:5b:ee:18:d9:38:23:9b:11:b9:12:
6b:5c:35:5c:93:17:30:0e:e0:51:ae:48:ce:cb:47:
55:7f:94:b2:49:a1:4e:eb:c9:3c:13:03:b2:2d:2d:
dd:0c:2d:b8:d5:d4:e2:18:03:a7:20:db:db:88:79:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0B:5C:C3:D8:04:63:CB:0A:78:46:23:A3:6D:DB:24:43:37:D0:8B
X509v3 Authority Key Identifier:
keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:44:3c:a4:2d:f8:6c:c4:4f:fc:19:44:56:ba:66:73:d8:d6:
de:d2:e2:05:d8:52:61:26:79:33:24:58:d4:d4:3c:bb:84:ca:
d1:46:ca:a6:4a:1f:99:05:64:82:04:80:77:cf:f2:ad:d5:ac:
73:4f:73:fb:8a:bc:0f:d8:5c:b2:d3:40:ea:71:59:44:97:0f:
e6:f4:c6:13:0e:ec:48:72:c3:b6:2f:12:42:d3:75:f8:cb:e2:
16:65:32:53:d1:fd:61:c0:fe:52:bd:0e:50:ba:88:32:6f:22:
30:01:67:b3:73:f6:79:d3:0a:e3:c7:2f:b2:53:23:65:c1:f5:
1e:54:19:17:20:ed:e8:1a:53:9f:0c:46:d9:46:69:08:76:52:
e1:80:d1:fd:f5:37:d7:a8:b9:0d:b2:be:56:32:8c:20:56:42:
75:56:9d:8f:08:fc:1a:4e:00:a4:09:33:98:99:f5:d7:3b:80:
30:8c:52:52:81:81:8c:15:71:42:5c:cf:75:8d:3d:dc:cd:30:
9f:c4:2b:06:87:d6:dc:cc:d0:1c:79:d0:d8:a3:eb:99:3b:63:
e9:56:a6:5c:17:ba:08:e8:29:ad:cb:82:e5:84:52:68:e4:0a:
cf:5b:b8:61:66:87:5b:8c:ae:87:b1:77:2a:07:56:e7:af:01:
68:4b:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:33:21 2025 by rpki-client