Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier: xGAdFgdDs9W6QjuTnosQTtIu2Za96ve28y3RTkuo/DU=
Subject key identifier: DF:3E:D7:99:B4:93:6F:CC:1D:AB:FD:3C:55:04:F9:4E:46:F0:5F:7D
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 06:46:55 +0000
Manifest this update: Fri 31 Jan 2025 06:46:55 +0000
Manifest next update: Fri 07 Feb 2025 06:46:55 +0000
Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: P7SsHyvVjTnzm1tbDSb9jL7Rrr3L6VpJdHtEZQWF2RU=)
2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: 03/IZSSaWCkjD0t5R6IQf4NgtsFNdSzPU+q4DaqUlgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Validity
Not Before: Jan 31 06:46:55 2025 GMT
Not After : Feb 7 06:46:55 2025 GMT
Subject: CN=679c71df-1d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:b7:a9:ce:2a:af:8a:2f:5c:13:be:20:ec:
dd:2c:7a:9f:69:40:02:c0:97:a1:cf:44:f4:d6:dd:
5f:29:e7:58:ee:db:95:61:8f:1e:47:be:21:dc:49:
ad:05:0e:c2:98:5b:23:75:6a:5e:14:a8:cb:d2:ea:
22:94:7b:b8:f2:72:97:6d:f6:53:32:f1:38:e8:e8:
d6:44:6d:bc:df:91:25:b0:b5:bf:b3:bc:42:8b:f1:
21:c0:8e:28:82:75:a0:ac:e5:9f:09:f2:43:57:1b:
0d:dc:8c:3c:ef:93:af:e4:a0:3f:bf:0a:f5:c8:a5:
0f:78:4c:d1:f6:8e:91:22:56:d2:06:87:6f:d2:f7:
d8:33:b1:2d:14:ea:6b:fa:46:89:27:e1:0d:0c:64:
02:5d:65:4b:33:f5:32:4e:2d:a2:74:8e:98:85:b8:
d3:ee:c9:20:42:85:46:50:d4:7d:ca:dd:14:e0:0e:
61:eb:3c:dc:c1:1d:30:e0:83:38:95:5c:fb:80:33:
c5:1d:10:e7:76:17:17:bb:e3:45:18:06:10:8e:72:
41:55:68:25:02:73:41:aa:d5:4c:c2:fe:09:47:37:
ca:e4:0e:74:45:74:20:30:23:78:8d:f7:32:a9:bf:
a7:2b:af:97:53:af:5b:c2:d9:e4:92:ed:db:55:e2:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:D7:99:B4:93:6F:CC:1D:AB:FD:3C:55:04:F9:4E:46:F0:5F:7D
X509v3 Authority Key Identifier:
keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:98:29:a3:ae:bd:14:b9:f9:b4:33:15:a7:fa:36:7c:32:b6:
fa:1d:7f:b8:62:18:6d:56:49:13:94:8f:c8:9c:e0:53:e6:10:
67:e5:cf:7e:56:6e:82:fd:bf:91:ea:fb:40:ec:06:dc:9f:1f:
bc:07:01:ce:1e:55:90:00:44:c7:79:c0:77:b6:91:86:af:8d:
74:41:94:7b:51:dc:cf:7d:38:5e:bd:7f:98:ee:65:6d:1e:d7:
1a:f8:11:9f:5c:f1:49:8c:d0:9d:8a:eb:ce:47:09:84:d1:58:
04:84:8b:c1:6f:0d:45:3f:a3:2b:64:41:1e:57:27:da:aa:60:
0c:9f:4e:05:65:51:07:c5:f9:54:87:02:dd:83:5b:8d:4f:0e:
df:e4:5f:99:88:c8:5c:5c:65:69:1c:b5:b0:63:a4:27:e0:34:
8a:95:02:ee:eb:28:f7:b4:ca:8d:92:de:ae:13:08:c0:de:d3:
63:6a:02:64:04:d8:9e:9f:94:5a:86:c5:9e:aa:9e:41:0a:de:
7c:c7:58:76:9a:03:3c:b3:0b:50:3a:13:7c:b5:ac:75:71:57:
cc:2c:0a:fa:2a:b6:c3:d3:3e:2e:c3:c6:0b:48:50:55:ec:1a:
0d:51:72:c8:77:ac:94:20:e0:27:75:e2:84:04:b4:8f:e9:74:
a2:3b:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:25 2025 by rpki-client