Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft
File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json)
Hash identifier: LM6sQE/d4e3KqiTHiYzinBGU73UNR0Nt29hloJ75pkY=
Subject key identifier: 0D:62:F9:EB:52:0C:F5:4D:2A:72:A8:FF:C8:64:EC:D5:DD:7E:E3:29
Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Certificate serial: 3477
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft
Manifest number: 3461
Signing time: Fri 31 Jan 2025 14:18:23 +0000
Manifest this update: Fri 31 Jan 2025 14:18:23 +0000
Manifest next update: Fri 07 Feb 2025 14:18:23 +0000
Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: 2jLsmcgMDZD4lnQS7WFT3mFSOIhNpfuSZiWZJIELWkA=)
2: 2C5F8752A10D11EFB9BE8476C4F9AE02.roa (hash: Iv390Bd/MJyqbzwOB0bqCA/PrLBJuVtYX/m4XRUDX5k=)
3: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: jfY5GTg8hmmhErbL9iwX+gxSO1reSXWac9mVO/Xqq1g=)
4: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: 6UO6N8yoyg6+8CvpDMt8iCmfSbV26PbG92dRF9r0otc=)
5: F8E58782A10C11EFA3C0F375C4F9AE02.roa (hash: joxi3OaPnE1De2CkoKX8c3yAH5f2DPtnnESV+trPxbM=)
6: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: 0Wsr5VamrOSe1PRZDclYr+ROoB9PidSlGQIwmrfuBe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13431 (0x3477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Validity
Not Before: Jan 31 14:18:23 2025 GMT
Not After : Feb 7 14:18:23 2025 GMT
Subject: CN=679cdbaf-2e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:e5:68:01:b8:03:69:e4:ba:4e:90:ff:61:
e9:11:3f:fc:1c:70:42:c3:95:d0:2d:a3:a0:8f:3e:
79:e9:f7:1b:5f:72:23:df:d9:e2:63:72:16:8d:62:
47:4a:a8:6a:a8:7a:d0:00:54:5e:bc:f1:e7:4f:76:
dd:04:51:1a:9d:9e:eb:d5:31:c9:32:d4:ba:de:85:
7e:f1:41:6f:26:02:06:0e:1c:e7:2a:e9:ab:56:ca:
54:f3:df:94:dc:2f:b7:e1:be:73:d8:aa:d3:08:79:
2c:79:a6:5a:64:cb:d5:43:9c:f3:26:74:92:a1:e4:
96:6a:44:de:3f:a2:b4:f3:56:c3:8b:33:92:cb:0e:
f2:6a:22:ca:15:b0:70:ad:54:7d:82:bf:fe:42:ae:
d4:cc:48:8b:46:73:27:96:43:7f:c3:01:c1:04:83:
87:bb:c6:59:f6:c0:fd:3f:ea:0a:b8:16:e3:a2:45:
33:6b:91:9d:6c:61:5e:47:60:41:ab:30:9d:f9:0c:
d3:55:a5:f5:5c:b9:f6:c4:b4:7b:43:ed:b7:8c:17:
8e:22:96:f8:28:b7:82:a2:c3:f9:cb:d2:33:f1:e9:
c8:6a:82:ca:9c:bb:e3:c7:48:ce:81:db:9e:e6:58:
dc:32:74:6c:93:78:51:fc:86:54:d1:cb:96:a7:1f:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:62:F9:EB:52:0C:F5:4D:2A:72:A8:FF:C8:64:EC:D5:DD:7E:E3:29
X509v3 Authority Key Identifier:
keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:42:55:99:9f:7e:93:f2:e2:ba:a3:1e:09:a8:8c:cc:57:34:
43:21:06:5e:80:3c:2c:a9:89:7f:44:3f:74:2a:18:4e:a3:49:
ed:b5:58:10:fa:f7:25:4d:8d:3b:76:57:37:44:04:5d:25:f1:
2d:a6:b3:79:bf:c3:ec:94:cf:33:5d:10:07:a6:50:b9:23:5f:
c8:ab:b8:c5:5e:87:f5:b5:0c:a3:6b:a5:8d:ba:35:76:fd:56:
21:7a:80:b3:5a:43:5e:26:82:ff:0c:b8:bf:95:9c:9b:61:6e:
a1:b8:56:a6:50:b4:ce:13:89:90:75:c7:a9:32:3f:5c:2f:37:
5a:bb:2e:24:e5:43:3a:5a:8c:79:93:d7:f3:fa:71:7e:6c:a7:
96:fa:9b:b4:b3:f6:bc:c6:34:a1:7a:16:40:eb:d1:28:de:74:
25:c1:8d:53:2b:dd:cf:26:ed:12:70:8a:2f:e9:93:9e:e2:80:
c7:65:17:e5:3d:6d:62:64:87:f7:6c:0b:7b:52:bf:f3:e6:fe:
01:61:40:6c:15:b3:54:e3:38:58:2c:3c:42:d6:82:db:74:12:
ad:99:77:23:0b:8f:88:b1:d2:cb:c4:85:d6:00:3c:b6:87:03:
43:ca:8b:a4:83:a0:76:7c:25:4b:9e:e6:51:51:0a:a6:16:15:
f2:af:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:24 2025 by rpki-client