Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json)
Hash identifier: x8C/57i6PfDil+LqpJi6BOIL5jSR/UGZolW8dEJclm4=
Subject key identifier: A0:43:C0:47:49:B8:FE:EB:4E:A0:49:5A:BB:EE:34:B4:92:F4:64:7D
Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Certificate serial: 01F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
Manifest number: 01EA
Signing time: Fri 31 Jan 2025 02:15:16 +0000
Manifest this update: Fri 31 Jan 2025 02:15:16 +0000
Manifest next update: Fri 07 Feb 2025 02:15:16 +0000
Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: 0e9CKpBpWHQHLxtWwUyljYqWKC/khFBhY6ZCI6Ywacs=)
2: 14C5F2A62F3C11ED84084082C4F9AE02.roa (hash: tIgnOUYL9AaMF3o6uRCl3XbHRWVvM0EG7is36EBsHLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Validity
Not Before: Jan 31 02:15:16 2025 GMT
Not After : Feb 7 02:15:16 2025 GMT
Subject: CN=679c3234-930c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:1e:0a:ae:48:a4:a5:2f:19:45:57:0a:52:
31:03:42:ac:7a:83:c8:87:06:37:c3:df:a8:5c:6f:
d8:f6:da:7a:95:9e:f2:ac:7d:11:07:11:35:75:2a:
9b:da:41:3b:e7:c4:cb:0b:6f:27:24:7e:ba:c3:1d:
f9:9b:a5:6e:10:e0:37:b8:e6:a3:9b:62:df:2d:10:
9d:ac:0b:40:0d:ec:07:1e:7d:ea:24:75:06:33:c5:
dc:c2:05:da:46:45:31:22:9d:f0:95:42:f0:f7:0f:
b3:88:4a:86:31:c2:4e:d6:9c:54:17:a4:e2:1e:0c:
34:85:b0:c7:cf:e4:0b:2f:52:74:8b:1c:8e:62:7f:
54:8a:93:a1:c1:99:9c:49:eb:fa:f1:1b:40:76:69:
41:67:00:87:2c:0f:34:0a:d7:a4:4d:a6:51:f7:8d:
a7:cf:d3:52:4d:e1:be:cb:c8:b0:99:2f:a5:f7:c5:
d3:87:6d:31:29:9f:3c:ef:bc:0a:df:48:cd:64:d4:
9c:5f:b0:16:89:33:ec:90:de:94:fb:56:97:db:bb:
62:ec:06:66:25:1d:a6:af:7c:78:b6:6d:d9:56:fe:
d6:4c:ef:76:33:11:64:54:83:ed:91:64:8c:cd:85:
fc:59:25:80:b1:78:6a:16:38:44:66:5c:9b:25:07:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:43:C0:47:49:B8:FE:EB:4E:A0:49:5A:BB:EE:34:B4:92:F4:64:7D
X509v3 Authority Key Identifier:
keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2c:da:b8:b6:bf:ed:46:0b:8d:b7:be:22:02:1c:08:49:cf:
90:97:ca:0b:45:87:b2:14:21:0e:9f:b4:28:fe:64:01:07:ae:
ae:58:d5:aa:a1:34:e6:43:99:b5:dc:b6:15:5a:25:e0:b6:ce:
84:4c:67:3a:3a:8d:a9:db:44:73:df:d4:60:64:65:e6:18:de:
56:65:91:e4:e6:0e:a3:b1:4c:23:29:dc:07:e8:a8:2e:3f:5b:
d2:ec:40:5f:11:d0:f4:49:5a:15:d6:92:0f:18:8c:27:b8:03:
bc:ee:0c:36:46:6e:37:79:76:a3:5e:13:07:ec:95:e3:52:a2:
c2:d5:0a:8c:5b:0d:a5:99:05:cd:5f:49:49:95:35:bc:19:06:
9b:94:88:91:e6:d5:f7:83:2d:8e:76:e8:22:26:e2:12:1e:95:
cb:0a:6e:07:59:46:fe:e6:cb:12:e6:64:95:89:35:a2:24:c6:
35:46:8c:85:34:4c:c0:a6:0e:0c:16:cc:60:8e:53:c2:85:ee:
1f:f9:6b:d9:62:7d:29:e3:ea:7e:8c:c3:85:0f:f7:01:5e:bd:
bf:86:b8:2c:7c:4a:a3:bc:61:7a:58:73:07:ed:bb:ed:83:67:
50:04:ac:a3:4d:a0:41:8f:c9:2b:49:2b:16:3b:4c:aa:19:be:
2b:c2:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:10 2025 by rpki-client