Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier: QYDOWH5cv3RPgZihPfPVTAl3ImDinB8UIbbljb6bOYU=
Subject key identifier: 72:33:C3:AD:83:03:EC:D7:69:20:29:7B:5A:E1:FF:A1:04:CB:20:D5
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number: DF
Signing time: Fri 31 Jan 2025 04:37:46 +0000
Manifest this update: Fri 31 Jan 2025 04:37:45 +0000
Manifest next update: Fri 07 Feb 2025 04:37:45 +0000
Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: 1CX7SoL5NJ7DHiWo635JEysTFh4rg363v1hEKTCXwKY=)
2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: lfBaqProMut7Uby4sm5sXFCXR+BzVB4lKdYH7qIjDTw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Validity
Not Before: Jan 31 04:37:45 2025 GMT
Not After : Feb 7 04:37:45 2025 GMT
Subject: CN=679c5399-7dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:73:47:b0:82:d4:08:5b:4b:94:2f:7d:1d:
65:7e:57:d6:90:b7:7b:99:86:ee:a7:bd:31:4f:51:
01:bc:d6:06:9f:25:4f:e1:2f:0d:39:53:cc:9c:cb:
af:62:f4:cb:2b:e6:1b:f2:64:0e:72:17:ea:9d:10:
1e:48:e8:12:70:b9:3a:14:0e:3d:48:54:51:5f:06:
2a:0a:e8:87:1c:b7:c2:83:7d:dd:94:d9:e8:03:35:
f0:4e:b8:58:8c:b6:4a:9f:cf:f6:15:5b:9b:70:ee:
38:d2:32:26:a2:6e:3a:aa:b5:13:24:dc:87:1a:c7:
90:49:09:41:23:57:31:87:2e:e0:a9:11:4b:d8:c8:
fe:4e:5f:5b:92:e8:af:26:de:42:f5:bd:fe:e9:e0:
69:37:67:7b:72:b2:6e:c5:a4:34:0f:78:21:8b:59:
f7:18:ba:fa:c7:ad:b8:70:a9:14:aa:15:a9:e3:ad:
8e:50:0b:4b:5a:0f:d2:76:4a:0c:d1:48:f6:23:54:
8e:22:c3:41:85:d7:6c:62:ac:cf:a9:45:d0:d3:ae:
ef:37:c7:40:40:2b:a5:28:24:ca:e0:3b:e7:45:d5:
c8:27:dd:e6:4b:ce:2c:f7:3a:a4:a3:8c:74:93:9c:
b1:4f:1d:4c:67:ab:55:1c:a9:9e:23:79:ba:8f:df:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:33:C3:AD:83:03:EC:D7:69:20:29:7B:5A:E1:FF:A1:04:CB:20:D5
X509v3 Authority Key Identifier:
keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bc:2a:f1:14:60:7b:54:50:e3:52:a2:93:44:25:08:f4:97:
b8:97:a6:dc:35:47:d3:c0:48:0f:17:15:b9:22:bf:26:ee:e5:
1b:3a:d1:56:20:17:bd:3a:ea:4a:4e:2e:c6:5c:3c:9f:45:6d:
47:36:24:f3:d0:1f:99:8d:86:df:2d:a6:b1:fa:45:22:3e:cb:
e3:bd:a2:cc:f5:a6:d2:fb:e8:e6:8b:c9:ba:e9:4a:ed:3d:62:
d1:5e:6a:c8:00:fd:6f:df:bc:24:de:2f:f4:ef:0a:57:9c:3b:
16:c3:ec:ca:2d:5a:03:70:4c:0e:71:f9:31:cd:3b:18:45:4c:
77:7b:62:9d:c6:63:75:b9:87:a5:38:5f:4f:d4:21:9d:5c:8a:
42:b2:54:c5:4e:77:04:b0:f6:e2:d1:10:ee:a2:f5:7b:92:01:
c4:14:5a:45:b3:39:36:82:35:a0:e1:e7:fd:21:f3:67:31:fa:
a5:23:39:47:de:78:56:93:8a:93:c1:7f:d4:23:2f:6f:3e:8b:
e8:87:4a:a1:9a:f5:ea:81:89:42:85:ff:4b:f4:b0:25:c8:ca:
21:01:82:de:06:55:c6:00:85:24:63:c7:8a:44:6c:0f:06:b0:
e6:de:a5:a8:5e:3f:87:fc:22:c4:4a:ce:f1:3d:1c:58:e5:9d:
50:b0:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:01 2025 by rpki-client