Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
File: 2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json)
Hash identifier: fnKRNct/1JzYVm4egOGDzkUrMVT7gE+9sOOsRPUYzuA=
Subject key identifier: 7E:5D:A8:1D:8D:85:33:BD:8B:50:D7:1A:23:DC:44:47:5A:70:50:32
Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00
Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
Certificate serial: 0482
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
Manifest number: 047A
Signing time: Fri 31 Jan 2025 00:06:04 +0000
Manifest this update: Fri 31 Jan 2025 00:06:04 +0000
Manifest next update: Fri 07 Feb 2025 00:06:04 +0000
Files and hashes: 1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: YRwA5vKCOhn8HCtOKMZB+S8pPXT9OnAwy6CDml4Ydw8=)
2: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: Pxv8dePi1EpNPNL4ZdJ0nYxVU1Z8dZuP+ncTQy+eHOw=)
3: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: Qsapn7T7BSoVN2a752N9muKYuA54q3bOkNtfwyaphBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
Validity
Not Before: Jan 31 00:06:04 2025 GMT
Not After : Feb 7 00:06:04 2025 GMT
Subject: CN=679c13ec-86a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:cb:f2:91:b7:9c:f3:d6:c4:73:46:d2:a6:
4d:dd:01:d9:7f:cc:ff:95:58:04:00:11:aa:53:cb:
ea:c2:2d:7d:f5:6e:22:83:27:b2:a4:f1:b9:ef:cd:
1a:95:73:f6:d0:fc:97:d5:63:b5:b7:64:7d:d9:3c:
e5:80:0d:ff:62:53:0a:43:f7:09:db:95:88:94:f9:
58:d9:6f:bb:ec:18:1d:44:36:66:c6:20:84:20:e3:
72:10:d0:33:e1:d8:70:72:f2:3a:08:3e:25:e2:9f:
2a:20:ea:65:c6:6f:ef:24:c4:a9:a4:73:1f:75:f1:
e8:96:9b:f0:ae:70:81:a7:59:13:92:7d:aa:35:9d:
a9:f4:87:5b:04:4a:23:1a:e5:be:e2:9a:6d:ff:bb:
91:23:b7:f2:a7:8b:31:8a:82:62:af:ef:af:40:0f:
46:f3:b7:fa:f8:84:70:83:85:68:8c:af:b1:d0:42:
b9:b4:e3:92:6e:9b:a0:d6:6a:26:41:c5:8f:25:42:
cd:00:a5:60:de:01:38:c7:7e:6c:4e:25:47:12:18:
5b:a7:69:75:68:e9:45:59:5a:99:85:ae:bc:36:3c:
6e:96:2e:29:3e:5c:24:90:56:23:45:3c:3a:6c:14:
45:49:9f:8a:91:52:fc:e7:af:b6:6f:f2:04:ef:cf:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5D:A8:1D:8D:85:33:BD:8B:50:D7:1A:23:DC:44:47:5A:70:50:32
X509v3 Authority Key Identifier:
keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:2f:d1:e2:5a:4c:5d:67:11:89:26:89:f6:7b:6f:1c:8b:05:
f7:1a:74:50:00:92:ed:ec:3c:84:5f:ef:40:4d:93:77:87:0d:
ea:4e:cc:f4:36:84:9f:88:03:fa:9f:48:fe:cc:2c:29:df:d4:
58:6f:0a:b9:ef:4b:1c:b2:36:fa:9a:43:e5:2b:4d:43:f4:ce:
9a:4e:b0:9d:45:e9:7a:f8:34:44:0f:1e:6a:e7:97:a1:c8:2f:
89:ab:55:46:b0:fc:d8:00:4b:21:f2:b4:03:8e:d6:57:50:61:
5e:f1:39:89:e3:ce:2d:75:c4:a6:c5:2b:1d:7d:b2:32:05:90:
16:2e:52:98:c4:72:45:a9:05:b1:ba:a1:16:d8:6f:92:dd:50:
9a:97:80:38:c7:fc:55:5d:a8:e4:ef:68:ff:e4:93:d2:a8:f4:
ce:37:40:de:39:49:2c:fa:fc:81:5a:4c:af:a7:70:e2:96:8a:
66:f9:04:71:68:a7:1a:1f:7b:e7:25:0d:21:c9:37:95:78:85:
3e:a0:78:86:c2:71:26:7d:d1:1f:94:df:64:ee:21:8b:87:9b:
8d:ea:e1:15:e3:ab:85:13:26:e5:3e:da:da:5e:d4:63:8c:87:
4b:a5:3b:f8:05:34:5e:96:ba:66:f9:7c:22:ee:17:a9:5c:b9:
e5:10:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:38:48 2025 by rpki-client