Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
File: C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft (raw, json)
Hash identifier: JkgCGYzX1iu3xNkw0V9We882oilV/KnGaqS9pdxqeQo=
Subject key identifier: A5:D5:7C:1D:8D:EC:DD:25:CB:79:96:F5:9A:B8:E7:96:A7:68:3C:72
Authority key identifier: 0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86
Certificate issuer: /CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
Manifest number: 0145
Signing time: Fri 31 Jan 2025 09:07:30 +0000
Manifest this update: Fri 31 Jan 2025 09:07:28 +0000
Manifest next update: Fri 07 Feb 2025 09:07:28 +0000
Files and hashes: 1: C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl (hash: 0Pc7+5pBXdaH2LyGnsQaYp3VGVnFS9DUuEWApr2ywLg=)
2: 582836EAF0BF11ED9EC0094AC4F9AE02.roa (hash: fvGSvwl2b5ftjOFJBu6Gt72gA4pH6W8XEcJpr4qW3e8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86
Validity
Not Before: Jan 31 09:07:28 2025 GMT
Not After : Feb 7 09:07:28 2025 GMT
Subject: CN=679c92d1-c57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:d3:aa:16:6d:e7:f8:ca:8e:34:44:64:bd:
0a:97:d3:97:fe:e3:3f:1b:3f:48:67:92:5e:d1:25:
ef:d8:38:6d:41:6c:ba:6a:d7:40:f9:f5:25:9c:49:
12:14:31:ab:ff:bc:5f:ee:a6:c7:4f:e2:87:e8:11:
57:a8:a7:bd:a0:a7:5e:eb:7f:9d:bf:30:8e:6b:0c:
0d:bc:c1:2c:06:54:cf:b5:26:fb:79:1c:5b:b7:c6:
4f:48:f7:46:17:7c:3c:eb:8a:2e:7c:8f:0f:1f:08:
3d:1e:25:04:f7:38:bb:9f:e4:f8:60:10:02:3b:29:
2f:c8:82:87:a0:51:3a:2c:63:85:15:4d:5c:f4:12:
89:e9:71:e5:5f:38:ff:03:75:f2:15:89:de:09:f4:
67:03:11:bb:a6:1e:2b:2a:11:32:27:e8:09:2f:82:
1f:4a:12:2c:a4:b0:75:33:38:c3:18:4f:68:bc:db:
e7:1d:68:d2:40:88:21:e8:84:fd:36:b3:64:8a:a7:
94:40:6a:cc:98:4d:cc:9f:46:59:d8:3d:98:24:ea:
6e:bc:90:11:23:35:ca:26:3f:e2:f4:22:39:1b:cc:
41:98:10:93:21:be:fc:20:c0:f0:f5:19:55:c7:af:
ff:bb:ea:bd:fe:15:cf:d7:0f:74:4d:7c:e3:bf:f5:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D5:7C:1D:8D:EC:DD:25:CB:79:96:F5:9A:B8:E7:96:A7:68:3C:72
X509v3 Authority Key Identifier:
keyid:0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:68:31:c5:c7:dc:9b:11:b3:85:70:a4:97:75:eb:59:ce:92:
b7:4c:32:22:f7:1c:59:0d:12:0a:54:d3:d0:4e:39:1c:4f:ff:
59:d3:1a:34:9d:58:f7:b4:9b:fa:0b:06:bb:24:0d:a3:db:d4:
f4:5e:71:12:63:dd:77:d8:90:bb:20:1a:2f:58:d8:cf:b6:d7:
28:1c:ca:a0:74:dd:73:68:cf:b8:03:ea:cd:7e:b9:d9:eb:46:
42:93:02:ed:17:61:c7:11:50:65:42:11:45:66:af:dd:b4:5c:
e7:fd:06:59:0f:54:bc:64:6f:90:e0:2d:fa:8f:a2:bd:3b:f6:
bd:01:a2:c5:73:ad:6e:33:0e:e0:fa:2f:91:72:f3:7c:c3:61:
31:ad:d3:b7:a5:af:03:47:b8:16:e3:fe:49:90:8f:71:d4:da:
ba:e7:4c:73:b0:b3:41:a8:3f:a6:9d:5d:c7:58:98:10:55:c3:
97:33:97:97:aa:d6:b5:bb:ba:47:14:6f:f1:c2:8c:8b:1c:99:
8a:12:fa:63:13:d8:23:f7:81:c2:3d:5f:dc:13:1f:cf:9a:6c:
96:00:d4:99:da:60:5b:e3:fe:76:8e:7b:36:ca:7d:a0:68:ce:
d5:7c:ac:a8:24:07:8b:e0:1e:b1:87:a6:53:c1:9f:7c:e7:53:
a6:91:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:05 2025 by rpki-client