Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft
File: C0io-y5r59-P7QejyRmyPKQL3so.mft (raw, json)
Hash identifier: 2tT+VDuIVgymIfv1U3rzUiYa0GoJuk1HNKphAil9r+0=
Subject key identifier: DB:63:AF:1E:77:ED:62:AE:64:66:67:FC:67:56:85:FD:02:B4:3E:D4
Authority key identifier: 0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA
Certificate issuer: /CN=A91442B0/serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA
Certificate serial: 0A89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft
Manifest number: 0A79
Signing time: Thu 30 Jan 2025 19:46:55 +0000
Manifest this update: Thu 30 Jan 2025 19:46:55 +0000
Manifest next update: Thu 06 Feb 2025 19:46:55 +0000
Files and hashes: 1: C0io-y5r59-P7QejyRmyPKQL3so.crl (hash: H6WWbYVAy5tVBIOxWVyBKAM+fkGebys3KXDFLAfAnr8=)
2: E16EB924B1A011ECBB574850C4F9AE02.roa (hash: /SpHw3LM2dxp+spwUPCplCVFduq4SfbpnO6I3ALmLPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2697 (0xa89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91442B0/serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA
Validity
Not Before: Jan 30 19:46:55 2025 GMT
Not After : Feb 6 19:46:55 2025 GMT
Subject: CN=679bd72f-d1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:42:3f:f3:92:6f:8b:d8:af:ae:d2:4f:1e:
12:ca:65:80:31:8b:53:1d:63:b4:e8:f5:83:bc:ec:
ef:c3:f1:f1:49:ab:54:ab:e6:5b:bc:ba:20:a7:ca:
f6:aa:37:de:7f:fa:83:2e:38:9f:d5:4f:e1:6c:c3:
a6:85:0d:4b:c1:52:28:41:24:aa:4c:77:ae:a5:e4:
ae:c4:c8:20:0d:5e:49:73:d8:c7:65:61:25:2f:98:
d8:3f:af:c2:15:eb:95:6f:49:0c:66:9b:42:e4:29:
d8:64:92:d4:64:ef:d7:0a:c5:2e:9a:66:ad:7b:90:
93:8b:6c:12:b9:10:06:83:94:3c:3c:84:3b:d0:2c:
20:05:f8:d0:f6:73:0d:1f:ea:c1:0d:3b:2d:da:ef:
cc:7e:e9:b7:e3:26:e1:63:fc:d7:fd:74:81:16:61:
14:86:db:85:fd:5a:fd:bd:94:1d:d4:8b:c3:5e:dd:
dd:0f:07:40:5d:1a:ae:61:4f:49:88:9b:db:49:94:
d2:fc:b7:80:43:15:7a:e4:34:13:d2:16:9f:6b:35:
fd:75:83:db:32:2f:3e:9f:dd:83:7b:ef:ed:db:ad:
c7:77:8c:9e:cf:b7:a0:3f:01:b5:09:70:ea:77:46:
5d:dc:f4:0c:bd:48:3b:c5:bc:a9:64:45:5a:02:e2:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:63:AF:1E:77:ED:62:AE:64:66:67:FC:67:56:85:FD:02:B4:3E:D4
X509v3 Authority Key Identifier:
keyid:0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ca:c9:9d:30:5d:f2:9c:c1:b4:12:cc:0d:47:9b:0a:c7:c8:
f3:5c:5b:6a:cf:77:43:01:f1:50:5a:5a:f4:65:b7:6d:ca:aa:
b7:b3:1b:6f:10:47:36:7e:8a:94:48:78:b9:38:04:ca:5a:60:
52:01:70:12:28:f6:3b:eb:bc:18:34:3d:39:3d:b1:90:da:08:
2a:0e:aa:7c:c3:51:64:df:c3:e7:8d:6e:49:bc:b4:6a:a2:a8:
d9:fd:8a:d4:78:ac:72:7d:90:d0:34:bb:74:b9:db:8a:ce:f2:
5e:d0:41:8f:6e:76:6e:0e:af:06:e9:ec:12:a0:fe:0b:5b:27:
e1:a3:cf:af:76:d8:dc:db:a1:0c:3e:8e:a3:6e:da:54:b9:ee:
3f:05:db:2a:b0:41:8c:87:7b:37:8e:9a:b1:b5:c8:05:33:78:
83:4d:91:7a:0b:d4:3c:01:e1:82:ed:79:1e:b5:08:1f:1d:4c:
bb:bb:a4:1a:a7:7a:25:8c:d8:0d:84:1d:24:0d:ab:dd:21:f7:
d2:9a:3c:71:85:c2:13:7c:c8:f5:d2:90:0b:ff:86:0f:6b:c6:
a4:b0:6a:8b:1b:2c:1a:d4:eb:6e:90:35:37:cb:df:b3:24:f1:
91:d1:5f:7a:14:5f:93:fb:2b:1e:cb:19:ff:98:86:d2:52:ca:
ff:e8:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:40 2025 by rpki-client