Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File: nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier: rPewr4CFg6ZunVEHnqsHTtQS/rOEy8oEMrobaWtyryM=
Subject key identifier: C2:EF:34:28:3B:BA:9B:7F:F8:82:32:F3:08:FB:0F:5B:59:98:24:F3
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer: /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number: 0A
Signing time: Fri 31 Jan 2025 07:12:37 +0000
Manifest this update: Fri 31 Jan 2025 07:12:37 +0000
Manifest next update: Fri 07 Feb 2025 07:12:37 +0000
Files and hashes: 1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: KR/aFKkw1cJLgnDWliIyd1U22Rip+QCOmQ9luDBWQjA=)
2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: 4wQj2D8FHVqXjukwrv/CmROQ+WtAW+LZQBCb8jHb8l4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Validity
Not Before: Jan 31 07:12:37 2025 GMT
Not After : Feb 7 07:12:37 2025 GMT
Subject: CN=679c77e5-9abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:76:2e:94:02:70:bd:eb:53:19:6e:b7:c5:
3e:2c:14:fd:41:e2:c2:2f:16:36:83:42:34:1a:33:
2c:b7:5b:aa:2d:51:cb:9e:85:5b:4d:dd:0b:ed:50:
08:d4:e5:68:fe:87:a3:16:b8:ad:ca:e5:cd:95:84:
7e:72:a6:02:19:b2:f5:7a:e2:81:85:3e:3a:04:11:
df:b9:24:1c:17:97:74:0a:52:42:16:46:19:7c:68:
e0:c2:18:4a:bb:d3:86:c8:86:ce:11:b6:92:8b:a9:
ae:a1:47:50:b7:0d:4e:e1:7e:ae:f7:54:8f:65:63:
ea:1b:ee:e3:c7:0e:4e:f5:6d:35:0d:63:a8:04:29:
45:6a:ee:48:d7:1b:29:f2:8d:71:7a:60:35:51:40:
ad:59:89:80:7a:33:08:c6:50:e6:a9:df:b9:00:d8:
44:b6:cb:91:be:38:d0:25:f4:61:35:bf:b3:9d:97:
03:d9:a3:7f:93:7e:0c:76:1b:a9:98:2d:b2:b8:8d:
31:3c:8b:f5:22:79:af:b8:70:70:b8:7e:3e:58:e5:
bd:af:95:79:78:c6:02:d0:55:80:ef:81:77:16:b9:
a3:85:de:aa:1a:d9:f4:0d:9f:89:8c:83:e1:9d:11:
6e:0c:74:04:f0:de:33:e9:6e:cb:25:3e:d0:bd:a7:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:34:28:3B:BA:9B:7F:F8:82:32:F3:08:FB:0F:5B:59:98:24:F3
X509v3 Authority Key Identifier:
keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:3c:97:f4:ea:18:fb:81:73:8e:de:b5:b9:93:0b:21:f5:c2:
a7:c4:49:e3:10:92:79:0d:20:80:b1:49:ee:bb:91:6c:01:4b:
d2:19:7c:29:d3:ed:c0:b4:0b:75:66:43:03:68:9c:6f:21:ef:
86:52:70:28:31:7e:10:3d:07:6a:f2:49:fc:0a:21:e6:e1:9f:
6d:7b:19:6a:1d:36:25:05:8f:a4:e0:2b:9b:91:35:7e:c1:d8:
7e:51:b6:45:64:e8:91:09:32:58:45:d0:45:b6:c1:47:b4:01:
a8:53:94:4a:c6:72:32:4e:bf:46:bc:4b:55:7a:d4:06:38:84:
b5:04:2d:ad:92:6c:c5:85:6c:c1:d7:40:90:16:91:bd:27:a6:
a8:59:15:54:77:80:2e:e8:70:4c:f5:ed:c9:0e:19:ba:77:c5:
d6:7b:80:eb:8a:5b:d9:55:73:c1:e9:26:f4:55:d5:3e:56:5b:
43:c8:1a:b6:9c:b1:17:b8:00:81:61:cf:19:41:4d:07:64:95:
25:55:96:ff:ff:62:55:86:54:33:14:ef:42:4d:a9:31:58:07:
43:e2:e1:b7:b7:7c:1a:21:2d:ac:59:7f:f9:29:52:8e:cc:c2:
4a:c8:e9:34:71:23:f7:1d:b8:2a:e0:bd:f4:94:f1:4d:3a:24:
f0:d8:28:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:34:16 2025 by rpki-client