Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json)
Hash identifier: eyrm7oQ6a4e9EccJFEZa8mp69+v1tyQu0jJqKYzp4kw=
Subject key identifier: 8F:B7:BD:C5:88:6B:0A:38:4A:18:68:E8:D0:8A:D1:FF:2A:4C:5D:88
Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE
Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
Certificate serial: 347D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
Manifest number: 3467
Signing time: Fri 31 Jan 2025 15:16:20 +0000
Manifest this update: Fri 31 Jan 2025 15:16:20 +0000
Manifest next update: Fri 07 Feb 2025 15:16:20 +0000
Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: E+Ypab2vFNcrcydlnPSSh1eD9CO9QQqsPOJndIL88eY=)
2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: HLTePiU4urymQI4+1hTlyJoCh3/oP2VQ7PHFtXnFIXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13437 (0x347d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
Validity
Not Before: Jan 31 15:16:20 2025 GMT
Not After : Feb 7 15:16:20 2025 GMT
Subject: CN=679ce944-cb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:7b:33:85:16:19:e4:a9:89:91:db:e0:c8:
2a:a7:1a:a2:86:3a:d1:25:aa:52:da:c5:2c:8b:2c:
6b:33:5e:9b:79:95:01:40:0e:79:a1:74:67:98:9b:
00:71:38:76:0b:18:9d:8c:ac:5c:cc:ad:4c:82:df:
57:5d:8c:ef:79:3f:00:9c:22:e7:f7:1e:07:84:71:
7d:7d:25:0d:8f:80:31:13:c2:60:28:bf:3b:5c:a0:
8c:ce:95:9e:f2:ab:77:9e:5c:76:0a:2c:5b:e9:f9:
6b:b7:72:33:21:9a:d5:31:13:bf:bc:c8:37:c5:69:
36:ef:cb:6e:aa:75:bf:6a:46:e3:c0:ab:23:69:cb:
a0:9c:17:9a:0b:4b:d1:e3:80:6d:28:c6:31:48:8a:
40:7b:60:7b:1a:12:8b:e7:70:a9:f5:c0:09:b4:fd:
7a:04:2d:c6:7d:6d:84:80:fe:e6:f1:a1:63:f9:c6:
7e:3b:34:34:20:00:cb:4a:a5:10:e1:64:5a:5b:f8:
ea:de:25:c0:af:e1:25:bc:94:27:a0:31:78:8d:99:
19:3a:f2:98:55:d7:af:47:cf:31:65:2c:9f:df:53:
3b:1c:90:26:b4:0a:88:83:f2:ef:d8:93:54:ea:79:
34:c1:59:3c:80:fc:b6:88:44:94:16:45:04:aa:f8:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B7:BD:C5:88:6B:0A:38:4A:18:68:E8:D0:8A:D1:FF:2A:4C:5D:88
X509v3 Authority Key Identifier:
keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:72:4c:e1:69:02:3a:1b:80:f1:da:55:83:9e:ac:bf:50:ad:
7d:b2:e7:8f:f8:b5:96:f6:aa:94:1f:d9:2a:b8:f7:a8:42:7c:
a5:ac:5b:c7:af:b7:59:92:e6:b6:d2:b2:fe:33:7e:9f:90:fa:
a9:93:3d:82:9c:2a:6d:90:bc:5e:dc:76:c9:b0:c7:c0:53:26:
0a:3d:d8:0a:f8:5a:da:4d:ba:94:ab:9d:be:54:28:1e:ac:29:
03:f0:f8:97:04:53:17:c1:0d:1a:ff:a7:da:22:c8:fd:bc:c1:
48:1a:de:1c:9f:09:87:84:03:38:16:0b:3c:b5:c8:81:be:dd:
6b:71:c7:70:8d:e4:9f:77:7d:2b:15:d6:de:ec:f0:2e:0a:da:
88:92:e7:3a:99:5e:f6:08:69:bc:a2:6c:c0:d7:f8:57:90:3c:
c4:37:a9:6f:5e:97:2b:41:3a:20:89:77:16:46:3b:10:fc:69:
87:18:10:cc:b3:4f:3a:6c:5d:a9:c7:ea:0e:7e:78:91:c6:c0:
5f:f4:4d:1a:53:e1:58:8a:f2:31:7a:4a:60:37:c3:bd:44:50:
fc:37:ca:13:73:00:f4:19:49:e6:cd:51:79:2b:c2:79:6c:30:
3d:7c:fb:a0:2d:5f:a4:38:23:46:30:d3:a1:bf:25:a3:47:7f:
6b:97:a5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:45:33 2025 by rpki-client