Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
File: cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json)
Hash identifier: dHkKrO03Ho/wF6vu7n2EBKjwqzLJcZq4JvozIsOQoyo=
Subject key identifier: A7:C3:46:3C:1F:1C:5B:00:99:80:F1:6D:10:F0:E6:65:0C:1B:E7:F6
Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
Manifest number: 56
Signing time: Fri 31 Jan 2025 06:12:55 +0000
Manifest this update: Fri 31 Jan 2025 06:12:55 +0000
Manifest next update: Fri 07 Feb 2025 06:12:55 +0000
Files and hashes: 1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: PyDRsYLwtwszVyKMXGXvcEFUFpPRiaSNIcynSMjKGA0=)
2: 73EF25545DDE11EFBCDB7463C4F9AE02.roa (hash: JrlJ2EvGFrH8+I8VUWwxgID9iYwpW3LVV5yISMkbZ08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Validity
Not Before: Jan 31 06:12:55 2025 GMT
Not After : Feb 7 06:12:55 2025 GMT
Subject: CN=679c69e7-7a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:c2:fe:32:69:c8:98:4f:cb:4c:1f:db:e0:
4c:e6:c4:9e:0a:59:0e:63:79:e5:45:e6:41:c1:70:
79:8a:5c:c0:eb:35:a5:4a:21:df:10:7f:a3:42:78:
1d:6e:56:68:f6:36:d3:cc:a7:1b:bd:3d:97:b6:bc:
f4:54:ec:b8:e9:41:1e:ba:fb:9d:59:7c:b2:43:bf:
c0:12:82:a8:88:86:d8:4c:c8:4d:57:70:eb:69:8f:
9d:51:af:db:a5:fb:20:d1:92:6e:57:82:df:27:fd:
65:d4:8d:ae:8a:9c:ad:8a:03:1c:41:91:f4:d3:eb:
e9:96:5d:ab:a6:a9:f5:2f:0d:f2:3e:c1:58:ed:ba:
25:8f:a8:2a:ab:63:16:a1:b2:ce:21:70:f2:62:8f:
35:d3:d4:e8:fa:14:16:82:ff:5e:45:1a:ca:13:08:
33:b6:73:22:64:b4:ba:61:4a:4d:18:7c:3a:b6:de:
3f:03:e1:48:b3:31:0f:b7:25:1f:88:26:c8:e0:dc:
72:c3:ef:ce:6c:db:fd:fe:ce:0c:56:d6:83:22:57:
3b:f8:79:53:0b:7e:0e:7b:0a:6f:02:02:85:81:70:
c0:d9:0b:cd:cd:0f:d1:f0:57:0a:83:f6:65:0e:00:
17:e5:3f:e4:d0:c4:68:c7:eb:72:9e:00:d4:f3:7e:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C3:46:3C:1F:1C:5B:00:99:80:F1:6D:10:F0:E6:65:0C:1B:E7:F6
X509v3 Authority Key Identifier:
keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:7d:76:fc:38:c4:a7:0b:91:ea:0f:b8:a0:f2:5d:46:0c:
09:2b:a4:e1:63:ef:ff:fe:1f:a7:be:bf:7a:fd:c2:d1:23:33:
9e:aa:9c:59:90:4a:1a:dd:6c:3f:66:1c:f4:c7:af:9f:42:e6:
84:f1:7b:27:54:4d:e5:f0:56:57:10:ff:2a:29:0f:0b:8a:ce:
6c:1c:50:bb:d8:1a:70:b3:4a:00:4a:f9:7d:16:65:c3:9f:3c:
15:5c:46:0a:5c:8d:fc:1e:55:8d:c1:e6:52:fd:96:83:76:e9:
69:f6:73:68:15:4e:aa:bb:23:4a:a8:27:12:c3:6b:b0:43:f9:
20:d6:48:f2:dc:47:24:fd:12:bb:5a:23:dc:97:9a:0f:42:0c:
99:00:32:3f:df:6b:71:d6:d1:20:b4:55:2c:2c:51:f3:ad:39:
d1:f2:bd:d8:1f:36:e1:ff:a9:0a:1b:a9:3b:6c:d9:cd:ab:a5:
12:73:4f:86:9e:12:6a:d1:70:ab:4d:46:40:b2:30:4a:84:f7:
ed:41:92:0d:40:37:07:df:80:7b:f4:14:a5:36:29:18:63:8e:
e5:c0:4e:18:8b:2e:43:2e:fa:fd:4d:f7:fd:d1:bb:07:a2:43:
15:63:8c:19:41:b1:2c:aa:1e:8c:4d:a1:09:84:1c:72:4a:89:
68:7b:fa:ff
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QzZFNzExMC8GA1UEBRMoNzExNjE3MDAyRDlGMEM5RUI2NUI0RURENjFGN0ExQzkx
RkNEQjgzRTAeFw0yNTAxMzEwNjEyNTVaFw0yNTAyMDcwNjEyNTVaMBgxFjAUBgNV
BAMTDTY3OWM2OWU3LTdhMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtJcL+MmnImE/LTB/b4EzmxJ4KWQ5jeeVF5kHBcHmKXMDrNaVKId8Qf6NCeB1u
Vmj2NtPMpxu9PZe2vPRU7LjpQR66+51ZfLJDv8ASgqiIhthMyE1XcOtpj51Rr9ul
+yDRkm5Xgt8n/WXUja6KnK2KAxxBkfTT6+mWXaumqfUvDfI+wVjtuiWPqCqrYxah
ss4hcPJijzXT1Oj6FBaC/15FGsoTCDO2cyJktLphSk0YfDq23j8D4UizMQ+3JR+I
Jsjg3HLD785s2/3+zgxW1oMiVzv4eVMLfg57Cm8CAoWBcMDZC83ND9HwVwqD9mUO
ABflP+TQxGjH63KeANTzfsirAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp8NGPB8c
WwCZgPFtEPDmZQwb5/YwHwYDVR0jBBgwFoAUcRYXAC2fDJ62W07dYfehyR/NuD4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDNkU3L0U0QTBDQ0FFNURE
RDExRUY4MzBERjU2MUM0RjlBRTAyL2NSWVhBQzJmREo2MlcwN2RZZmVoeVJfTnVE
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY1JZWEFDMmZESjYyVzA3ZFlmZWh5Ul9OdUQ0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD
NkU3L0U0QTBDQ0FFNURERDExRUY4MzBERjU2MUM0RjlBRTAyL2NSWVhBQzJmREo2
MlcwN2RZZmVoeVJfTnVENC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADxKfXb8OMSnC5HqD7ig8l1GDAkrpOFj7//+H6e+v3r9wtEjM56qnFmQ
ShrdbD9mHPTHr59C5oTxeydUTeXwVlcQ/yopDwuKzmwcULvYGnCzSgBK+X0WZcOf
PBVcRgpcjfweVY3B5lL9loN26Wn2c2gVTqq7I0qoJxLDa7BD+SDWSPLcRyT9Erta
I9yXmg9CDJkAMj/fa3HW0SC0VSwsUfOtOdHyvdgfNuH/qQobqTts2c2rpRJzT4ae
EmrRcKtNRkCyMEqE9+1Bkg1ANwffgHv0FKU2KRhjjuXAThiLLkMu+v1N9/3Ruwei
QxVjjBlBsSyqHoxNoQmEHHJKiWh7+v8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:17 2025 by rpki-client