Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
File: 4bzIEhAO1GAiFweJMk8cw6-_aq0.mft (raw, json)
Hash identifier: QWxHx2QRe07cXKLDcwYqyRC5G48FWkyvaKfMBzbZ3WQ=
Subject key identifier: 80:BA:B1:89:D3:40:27:9A:D0:77:D5:6C:B4:25:29:06:C1:A4:44:0F
Authority key identifier: E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
Certificate issuer: /CN=A916AAFF/serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
Manifest number: CA
Signing time: Fri 31 Jan 2025 04:59:56 +0000
Manifest this update: Fri 31 Jan 2025 04:59:56 +0000
Manifest next update: Fri 07 Feb 2025 04:59:56 +0000
Files and hashes: 1: 4bzIEhAO1GAiFweJMk8cw6-_aq0.crl (hash: nlRihoMuUDlpxkHE64UEZ/lrfP1HoK4reMl829rZOuE=)
2: 69E8AC12555811EFA88AEA24C4F9AE02.roa (hash: rp2KgXfSmtmZKYQY55JUof6yTTeOYpzuHhK8PCwpS0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AAFF/serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Validity
Not Before: Jan 31 04:59:56 2025 GMT
Not After : Feb 7 04:59:56 2025 GMT
Subject: CN=679c58cc-70ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:9c:e2:4e:8a:60:8c:46:c4:a5:a0:63:5e:
f7:a7:db:92:75:6f:79:3d:ba:9b:ef:f6:46:b2:a9:
cb:c8:1f:16:ef:33:e3:d4:94:36:ad:65:83:6a:97:
8f:f1:79:51:0d:53:96:70:14:5d:2d:6c:7f:f9:1d:
f3:7e:5e:4c:1f:f4:b7:81:0d:bf:7a:bc:35:d5:d0:
8f:cb:5e:40:8e:f8:cf:68:aa:31:4b:09:74:a1:73:
bd:f6:52:24:86:5f:28:0a:66:ef:ea:20:22:38:52:
36:59:96:61:fe:08:a0:4b:1d:cf:70:96:d3:5a:68:
e3:0c:26:83:4c:e0:38:03:8e:64:c8:a0:57:3e:05:
a5:a3:70:82:52:2d:79:fb:4c:c8:d7:e5:a8:e6:d1:
5c:c0:7c:5b:20:b9:64:85:9b:fa:4f:fe:5a:5c:c7:
53:70:de:90:52:62:a1:5f:4c:dc:00:74:76:1c:00:
69:97:10:c5:4b:ce:7e:c4:d0:63:6c:c3:c1:8c:2f:
7a:42:27:89:7f:91:7c:87:b3:69:04:2d:90:f7:6b:
fa:e0:7c:39:6e:0d:33:76:10:5a:af:93:0a:81:eb:
41:55:e5:5a:29:39:eb:4b:5e:36:8f:fd:ba:cf:25:
bd:66:b7:a2:e1:7f:df:56:8b:8d:bf:84:e8:5f:e8:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:B1:89:D3:40:27:9A:D0:77:D5:6C:B4:25:29:06:C1:A4:44:0F
X509v3 Authority Key Identifier:
keyid:E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:14:78:7d:cb:d8:19:00:17:67:b5:ec:fb:6a:75:c7:fa:a7:
7f:1b:f6:10:01:e0:06:03:1b:98:fb:84:71:1e:fd:ef:4a:8e:
26:23:64:b8:bf:29:b6:73:90:b8:f9:53:cd:39:c9:86:44:e2:
97:3a:4b:60:b2:5a:ba:f3:64:9b:7c:f5:66:24:1c:cd:32:03:
83:25:1b:3f:84:08:64:06:eb:f3:f4:31:0e:26:fc:a4:b7:18:
b6:bc:5b:3d:81:79:ea:66:94:78:8e:cf:db:ce:2d:8e:2b:a6:
12:c3:36:c1:16:e9:ae:94:4a:f7:fb:dd:8a:ca:9f:8f:64:04:
b5:98:bf:99:e6:65:e7:28:15:90:5f:0a:e3:4c:12:fa:11:23:
56:90:29:38:3b:8f:2d:8f:77:fd:92:81:c2:5b:0e:51:ac:86:
61:17:78:97:76:26:cf:d6:0a:c1:89:03:d2:43:5e:2e:82:e0:
c3:e7:00:71:00:c6:33:de:7e:d3:4c:d5:67:57:b0:e2:53:9a:
45:3d:52:80:ae:aa:92:dc:d3:4b:4d:a7:55:bc:f1:50:d6:5b:
cc:02:4e:35:62:d9:f6:3e:9c:f7:df:22:74:c6:b7:69:99:86:
b9:a8:6c:2f:30:0f:84:93:b2:fc:73:9d:01:22:e5:0c:57:b8:
3a:c9:3f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:40:57 2025 by rpki-client