Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier: OdmMYmfiuwcX2YmUxSffwVjbBMp8ObdVhosE3mEH2Ao=
Subject key identifier: EB:2E:0C:92:95:DF:44:CF:48:5C:38:34:E5:C8:06:B3:91:D3:AD:D0
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number: B5
Signing time: Fri 31 Jan 2025 03:27:36 +0000
Manifest this update: Fri 31 Jan 2025 03:27:35 +0000
Manifest next update: Fri 07 Feb 2025 03:27:35 +0000
Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: gwPqMmnaqV4ZvWOnN4zSyx8XKZjz/wggj1GdCq8DwQU=)
2: 21212316C5FF11EF8E8D5A6AC4F9AE02.roa (hash: DxgiZd6nbMHN4rkZj8tOgLIGMrVl7gt/knulj2GC6BU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Validity
Not Before: Jan 31 03:27:35 2025 GMT
Not After : Feb 7 03:27:35 2025 GMT
Subject: CN=679c4328-22d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:d5:a9:8a:da:53:4b:49:67:e7:67:92:17:
23:14:7b:78:8a:9c:ec:08:45:2f:d6:e9:8b:60:4d:
dc:33:80:ed:3b:3b:b7:a1:13:9b:c8:f0:7d:7d:d1:
52:46:8a:2b:7d:2d:47:26:ee:bb:d2:d9:9d:22:61:
d1:91:aa:2f:92:33:2f:c3:bd:46:b9:b5:1f:ea:1d:
22:38:85:f0:3a:d7:80:36:f9:52:cd:d0:29:ca:a3:
5f:9e:e5:5f:07:3b:40:f9:9f:60:85:5e:05:f1:b5:
a6:48:09:2f:56:1c:83:a6:da:d1:18:de:87:7e:4d:
f7:37:a5:ce:87:4c:17:82:bd:0b:92:58:f4:72:77:
2a:4b:e4:71:dc:e0:ae:69:99:d1:c9:e2:e0:bb:2d:
d1:aa:37:11:d9:be:db:be:dd:4e:4c:7e:15:3b:a3:
12:a1:a4:64:4f:5d:86:6f:4a:96:29:59:fb:7d:fe:
8d:4b:4d:c1:68:6e:2e:89:34:60:f4:3d:8a:00:3b:
94:80:e3:b6:d8:ed:a5:ce:00:40:be:88:7b:71:82:
b3:1c:c6:ad:47:38:f8:91:26:8b:21:cb:d4:b3:5e:
d8:d3:82:90:53:de:65:04:e3:a4:05:40:79:9b:ff:
f8:73:72:2e:ed:b9:15:fb:f1:58:3e:7c:e4:d3:c7:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:0C:92:95:DF:44:CF:48:5C:38:34:E5:C8:06:B3:91:D3:AD:D0
X509v3 Authority Key Identifier:
keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:bb:ea:3a:4e:ab:f5:88:4b:18:2c:b0:7c:e2:fc:67:ba:9c:
6c:79:7c:38:88:4e:24:e2:46:b6:ad:a1:91:00:92:16:8b:95:
84:19:9e:fc:d3:05:18:3d:6f:e4:ae:13:3e:9f:c2:f9:3e:db:
4e:3a:f8:40:20:e0:8f:a0:e7:b4:a0:18:2a:77:8a:77:34:6e:
53:89:c3:7b:b9:92:dd:14:33:da:0e:a1:45:1e:a3:86:91:83:
a1:35:99:81:03:00:68:d2:c0:90:fd:b5:90:b4:1d:59:5f:c1:
e1:57:8b:19:08:e1:a1:a0:32:29:f1:86:f7:5c:70:a3:cc:90:
65:b6:b2:98:45:3f:56:67:78:77:5b:3a:c2:b9:b4:15:10:f0:
0c:c2:bc:f3:b4:54:e9:a1:fd:95:eb:23:ca:39:03:5a:67:40:
d4:d5:4c:76:01:19:69:48:c6:8f:cb:41:91:f0:a6:29:00:7f:
f0:24:af:52:37:9a:ee:38:4d:06:61:f8:a3:b1:0d:18:39:64:
07:39:54:9b:3f:4a:87:1c:36:da:a6:ed:1e:22:6c:c0:29:a0:
18:1b:bc:dd:2f:db:f4:7c:42:44:68:ab:37:d2:cc:f7:67:7d:
cd:2d:e6:4e:da:1e:52:5f:6c:60:10:bc:1b:3a:32:8c:f6:6d:
62:34:54:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE
MjRCQ0JBMTQwHhcNMjUwMTMxMDMyNzM1WhcNMjUwMjA3MDMyNzM1WjAYMRYwFAYD
VQQDEw02NzljNDMyOC0yMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArdXVqYraU0tJZ+dnkhcjFHt4ipzsCEUv1umLYE3cM4DtOzu3oRObyPB9fdFS
RoorfS1HJu670tmdImHRkaovkjMvw71GubUf6h0iOIXwOteANvlSzdApyqNfnuVf
BztA+Z9ghV4F8bWmSAkvVhyDptrRGN6Hfk33N6XOh0wXgr0Lklj0cncqS+Rx3OCu
aZnRyeLguy3RqjcR2b7bvt1OTH4VO6MSoaRkT12Gb0qWKVn7ff6NS03BaG4uiTRg
9D2KADuUgOO22O2lzgBAvoh7cYKzHMatRzj4kSaLIcvUs17Y04KQU95lBOOkBUB5
m//4c3Iu7bkV+/FYPnzk08dsZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsuDJKV
30TPSFw4NOXIBrOR063QMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1
RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N
NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUu+o6Tqv1iEsYLLB84vxnupxseXw4iE4k4ka2raGRAJIWi5WEGZ78
0wUYPW/krhM+n8L5PttOOvhAIOCPoOe0oBgqd4p3NG5TicN7uZLdFDPaDqFFHqOG
kYOhNZmBAwBo0sCQ/bWQtB1ZX8HhV4sZCOGhoDIp8Yb3XHCjzJBltrKYRT9WZ3h3
WzrCubQVEPAMwrzztFTpof2V6yPKOQNaZ0DU1Ux2ARlpSMaPy0GR8KYpAH/wJK9S
N5ruOE0GYfijsQ0YOWQHOVSbP0qHHDbapu0eImzAKaAYG7zdL9v0fEJEaKs30sz3
Z33NLeZO2h5SX2xgELwbOjKM9m1iNFTH
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:48 2025 by rpki-client