
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json)
Hash identifier: BUiHNhl0Hyn/HbX7gsOpjFvKp9vA1H0czPgpo+A4d2M=
Subject key identifier: 9B:70:75:EB:24:76:EE:76:27:7B:9F:32:82:1E:D6:87:41:3A:13:92
Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C
Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 03:34:12 +0000
Manifest this update: Fri 31 Jan 2025 03:34:11 +0000
Manifest next update: Fri 07 Feb 2025 03:34:11 +0000
Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: a/KOmRK7Fx2E72YYXPJanVEHEsuanBjhcW9155+Xpr8=)
2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: jsmEuKgoeYiJY/PhkO97a7NHRngriTFFOmRBgoLfjbw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C
Validity
Not Before: Jan 31 03:34:11 2025 GMT
Not After : Feb 7 03:34:11 2025 GMT
Subject: CN=679c44b3-8f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:40:a7:69:57:4e:16:b9:82:a6:65:e2:b9:
e9:8a:e7:78:4e:d4:b8:85:a3:ae:81:08:99:7f:41:
fa:94:e8:66:42:50:c2:42:f9:fa:dc:66:71:60:77:
8f:33:7d:61:b0:f0:18:85:5c:fc:66:b3:20:fb:98:
07:c7:32:d6:f4:49:9d:40:ea:be:68:84:77:39:a4:
8f:2d:6e:5c:8a:90:04:c2:1d:c5:20:44:20:2d:84:
3e:28:13:10:4d:b6:fe:4a:df:86:06:15:22:eb:f9:
82:81:01:52:33:85:e9:0e:9f:a2:c0:bc:77:ad:05:
69:6a:09:7c:93:b9:cf:09:b4:99:6c:a0:39:94:3d:
87:a1:a4:0e:d3:ac:1b:65:0e:4f:31:ad:2e:8e:16:
b6:20:5a:1f:f2:5e:03:de:c8:5c:0a:e2:3f:3f:e0:
c8:22:b9:64:e3:95:8e:45:56:36:61:16:e3:ff:20:
f8:33:5c:85:f8:8a:e0:4f:43:be:13:18:fa:a2:bf:
1b:f7:38:71:92:a3:2d:5c:71:94:9c:31:fa:93:84:
48:ad:fb:2f:bd:4f:e7:ed:b7:1b:18:c8:97:ef:47:
5a:2e:de:b6:6c:bf:ad:34:8d:42:88:e8:c3:b6:76:
37:d7:64:67:3e:37:41:ac:b2:54:b5:c4:31:74:f2:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:70:75:EB:24:76:EE:76:27:7B:9F:32:82:1E:D6:87:41:3A:13:92
X509v3 Authority Key Identifier:
keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f6:15:63:6f:08:35:61:47:01:db:31:4c:42:e3:8b:34:a0:
a6:b1:af:20:69:38:bd:a0:b3:90:76:80:82:d3:ea:19:a3:2b:
e7:93:bf:fe:cb:7f:cd:82:82:aa:5c:21:c1:6c:55:db:31:ed:
b7:69:0d:d2:d8:ab:89:90:fc:2e:ed:18:c9:ea:7a:80:23:b5:
66:e0:47:b2:26:f4:7b:7d:61:d5:a1:e0:7f:94:06:d3:21:61:
2c:63:0a:c2:7e:df:35:84:3a:d5:63:42:2c:a9:ad:72:b7:68:
dd:dd:df:bb:20:b7:c9:4f:ad:4c:9e:c4:71:95:e5:a2:8b:36:
fd:8d:1b:c6:fa:f9:ef:cc:e3:cd:ab:9a:da:11:47:3b:40:6f:
3c:9e:b3:9a:f6:45:c5:b6:8b:f1:45:32:a8:37:a0:0e:83:e0:
ef:32:e6:59:87:ad:c0:5a:56:20:3e:e9:e1:e0:62:78:c7:50:
00:7b:c1:23:a2:88:38:6b:c2:76:cd:61:44:54:8b:a9:f4:28:
79:31:8a:89:03:d4:aa:ce:15:3e:c0:b7:f4:a7:d9:89:ee:ee:
47:99:33:4f:ef:93:3c:70:65:91:b3:ae:a4:20:0d:99:0a:65:
65:51:95:1a:53:80:a1:58:23:2a:9b:3e:29:f3:6a:2a:51:dd:
44:17:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:10:37 2025 by rpki-client