Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier: xG6kvjWeUV5G5zPjANzPIqJLO5VW54TA5UnGIjFo724=
Subject key identifier: FF:DB:05:5C:34:4A:28:F1:1F:E7:07:39:1E:37:AE:23:96:D3:FF:20
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number: 015A
Signing time: Fri 31 Jan 2025 03:30:14 +0000
Manifest this update: Fri 31 Jan 2025 03:30:14 +0000
Manifest next update: Fri 07 Feb 2025 03:30:14 +0000
Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: Qc2gF01jY5j1qs1FzNPtsYHZX8oVzQ/iNax/U9YGQgo=)
2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: H7tL4KJE0pVl8ulAcyEMhzXfQVRbRczv7arveo6DHyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Validity
Not Before: Jan 31 03:30:14 2025 GMT
Not After : Feb 7 03:30:14 2025 GMT
Subject: CN=679c43c6-5039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:23:9d:b5:ef:e5:8f:31:4d:a3:6f:85:e0:
ec:88:9f:85:d5:cc:cc:67:68:a9:4c:05:2b:6b:0a:
b8:ac:68:5a:39:ec:e7:c9:0b:1d:a0:2e:fb:a8:97:
5f:99:87:0f:66:76:a0:96:fb:28:2e:ee:88:3e:91:
ae:4c:08:ee:e5:13:9a:2a:88:86:c9:94:09:fb:ae:
c1:e6:0e:55:83:56:d8:10:f0:30:d6:4b:92:5b:7c:
14:72:5a:cd:4e:a5:04:84:bb:7e:d5:fe:5c:65:79:
a1:4e:1c:03:a5:fb:16:53:61:d0:f5:d4:cc:55:96:
a7:38:53:46:10:a9:0b:47:f3:78:00:d3:32:5e:e5:
38:1b:59:e5:da:c3:9d:5c:ae:a2:f0:3f:b3:03:9b:
3a:d5:3c:49:3f:58:de:80:10:65:f6:6b:93:d2:cb:
c3:06:e6:4b:ba:a9:6e:88:da:63:79:be:bf:3d:87:
ef:d5:82:56:b8:c2:c7:2c:07:f5:fd:49:6b:74:4d:
b7:68:80:46:97:d4:7a:d6:1e:f9:72:ff:bf:19:d7:
59:f2:23:55:4d:c9:f7:24:97:1e:d2:54:35:5f:15:
83:7e:f4:ab:62:da:b5:4a:fc:50:22:52:47:1c:6c:
ce:45:c1:6a:23:3f:e0:29:27:af:15:3b:b0:88:ce:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DB:05:5C:34:4A:28:F1:1F:E7:07:39:1E:37:AE:23:96:D3:FF:20
X509v3 Authority Key Identifier:
keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:58:e5:b0:56:53:d3:75:a9:05:9e:89:46:e6:d5:2c:4b:5d:
31:08:77:58:c2:73:07:d8:0a:ec:70:1d:3a:df:54:a7:49:83:
5b:2a:70:84:64:f5:e8:ac:6a:d0:04:f3:88:8f:49:a7:7c:6a:
e1:e5:50:a0:fb:d1:34:12:77:89:45:ce:f0:8b:44:80:46:8b:
e1:b8:cb:2e:50:47:34:89:b4:a5:d8:02:7a:4c:db:10:4b:49:
ec:2d:46:06:da:65:c3:91:1f:3c:ae:f2:be:74:22:41:7a:01:
1c:0d:3f:34:34:72:f0:83:6c:07:4b:54:8b:f5:2f:51:1b:88:
fd:c4:d3:03:db:85:9d:05:c5:7a:aa:08:ef:55:15:38:b3:1c:
0f:d8:ac:a7:a5:67:1e:7e:38:3f:c2:e3:18:89:c1:1a:d6:24:
3e:50:22:5a:e0:ee:b3:a0:2d:0e:12:ac:b3:ed:27:55:66:26:
04:15:7d:4a:0b:54:33:0c:bb:d0:21:b2:f9:f0:63:71:9c:d9:
ce:f1:2d:ed:74:4e:9a:3d:9b:f0:64:25:fa:98:a7:d8:b5:ee:
bf:82:8e:77:5f:b7:4e:3b:c0:57:eb:8c:be:b4:54:7d:d0:b4:
2c:5e:22:e2:7b:5f:a9:66:5f:54:6c:d9:ee:d4:64:f9:ea:f0:
f8:06:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:49 2025 by rpki-client