Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
File: cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json)
Hash identifier: yMlRa9YUpIMA2VuODa0V7RHb3FpY5xccIPL2EvCEdhY=
Subject key identifier: 80:EB:E9:63:1A:F6:B5:D5:3D:B9:05:CA:CF:84:C0:06:98:ED:25:38
Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
Certificate issuer: /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
Manifest number: 015F
Signing time: Fri 31 Jan 2025 03:19:13 +0000
Manifest this update: Fri 31 Jan 2025 03:19:12 +0000
Manifest next update: Fri 07 Feb 2025 03:19:12 +0000
Files and hashes: 1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: 3MxSK3J9vaKaE+gkpRLHUCpFQY4IpaS2bPtlzT7ohAM=)
2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: gexTzIiKhgLcrcI1jyC1eZ1O4wMhCdNKof8sdrmuHDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Validity
Not Before: Jan 31 03:19:12 2025 GMT
Not After : Feb 7 03:19:12 2025 GMT
Subject: CN=679c4130-b719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:7a:40:ad:5c:41:8c:e6:5d:52:cf:02:c6:
82:2d:0c:d3:56:07:2c:8e:37:5c:63:45:6e:5c:31:
18:c5:7d:e7:21:c3:71:14:38:fd:9e:4d:42:a1:fc:
7f:33:be:7f:d7:3c:22:62:f8:1d:6d:0e:b1:c0:c0:
6b:69:1f:8e:54:4b:5f:9b:a0:ee:ae:8e:69:92:e0:
f4:f6:91:60:10:aa:70:95:50:c7:ad:9d:f7:d6:5e:
7b:7a:76:bc:6d:ec:74:9d:c0:43:d8:e8:37:e8:86:
3d:b4:3f:2b:3b:2f:87:b8:fe:2c:86:1e:89:8b:e5:
bf:59:5b:e3:14:99:87:23:09:eb:04:ed:f1:bb:7a:
89:22:35:5c:3a:79:df:bc:a4:fa:7a:ba:e1:b6:ad:
49:42:46:83:39:72:58:0e:27:08:b0:80:34:44:b0:
b2:62:b4:a2:65:38:ed:d9:52:77:9c:d2:5b:63:9d:
91:2e:f1:2f:23:b9:43:12:e8:3e:b6:7c:8e:42:a4:
62:a8:59:63:42:6e:f2:4f:95:d3:8c:c2:13:4f:57:
a9:49:e5:2c:9e:f6:ca:32:8d:34:e5:17:75:f8:84:
3e:9e:af:1c:99:ec:60:f7:e0:7f:fa:80:5a:c2:f8:
6f:43:a0:a0:88:78:69:90:a8:37:c1:ce:44:8b:58:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:E9:63:1A:F6:B5:D5:3D:B9:05:CA:CF:84:C0:06:98:ED:25:38
X509v3 Authority Key Identifier:
keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:c9:87:79:3e:aa:7d:03:2f:ad:29:e9:42:a8:b3:a2:7b:06:
9a:85:11:9f:11:98:37:ac:5b:f9:2f:5a:62:b0:37:da:0b:94:
9d:d4:c6:8b:1a:57:2c:fe:2c:c7:7b:0d:81:3e:d2:cf:80:2f:
7e:12:92:b5:fe:a1:b3:26:f1:c0:02:ef:2a:68:e3:5b:11:75:
16:fc:93:d1:d6:ad:3a:a5:c3:b6:69:a6:93:76:ac:ee:c8:ba:
8f:ca:43:da:3d:dd:86:73:64:2a:60:e1:38:c5:09:2e:a3:84:
30:29:d6:54:0b:75:b9:1e:5a:53:01:e4:6c:82:e0:9c:80:68:
43:cb:3e:a0:42:b9:6e:bd:2d:03:ed:57:28:b3:d9:99:49:61:
09:3b:88:c8:2d:b6:ac:13:b5:2c:e2:1e:b0:b6:52:5a:15:ab:
7c:9b:23:90:b4:c4:fc:73:b8:23:bd:ad:61:f8:80:ac:fa:41:
c4:51:4c:cd:d2:c3:46:e9:73:12:7b:96:dd:53:dc:a5:57:3d:
d5:63:1d:20:a5:7e:0e:45:ad:ac:13:8d:cb:eb:fa:3f:35:1a:
6a:ca:62:2d:08:07:96:2e:4c:7c:37:6a:ec:80:6a:0b:9b:7d:
d9:75:63:59:bd:65:66:62:92:a7:6e:50:51:03:a7:5c:75:e7:
0b:b6:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:14 2025 by rpki-client