Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
File: 72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json)
Hash identifier: nIj8V05d5c1F6bJXmr7HCujCa0nQBssg6S4f/0+Lh8E=
Subject key identifier: 7F:BB:55:8D:0A:F9:92:DA:B5:FC:C2:15:E5:A4:3D:7A:4A:1B:7A:65
Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
Certificate issuer: /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
Manifest number: 0135
Signing time: Fri 31 Jan 2025 03:41:22 +0000
Manifest this update: Fri 31 Jan 2025 03:41:20 +0000
Manifest next update: Fri 07 Feb 2025 03:41:20 +0000
Files and hashes: 1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: 0Bcos6uVGdsjWB4GUdndIfbdme2fbTfSqYHmkwWs80s=)
2: 3E734F70B9A311EE85D60B49C4F9AE02.roa (hash: rwWLgX0j1gAae5w6bqH0qLh9uyb80tM8QLuYgGiI8EU=)
3: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: d9ZhGU94CxjAU4bAS3pBSunhF0F9voc5kw0tZ3gpDNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Validity
Not Before: Jan 31 03:41:20 2025 GMT
Not After : Feb 7 03:41:20 2025 GMT
Subject: CN=679c4661-f966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:ef:4e:e7:73:56:ae:a9:c9:17:65:7a:85:
6e:f6:5b:0c:67:7d:24:f8:20:17:1d:0d:f9:e0:e7:
52:69:fe:65:2d:24:8b:9d:d2:0d:a6:58:ca:4f:26:
45:16:61:5e:94:22:a3:2e:53:1d:cb:9e:ed:ad:53:
b5:6a:93:b1:23:16:3f:74:03:65:ad:f8:e2:9c:7d:
36:b6:9f:14:b9:39:c1:6d:62:9b:4d:48:79:49:1c:
e2:e1:6f:70:f4:1b:68:16:88:2e:64:ea:a1:ad:54:
f3:18:46:49:ed:da:9d:88:0c:e3:40:f0:2a:65:2e:
cc:7b:15:c0:f8:be:53:a8:82:0c:43:b9:ed:02:66:
a9:58:f4:f2:a3:d2:2f:15:77:97:96:12:1f:0b:6c:
37:46:2d:95:db:a0:ce:f3:61:9b:b9:95:97:8e:41:
01:4f:5a:ae:a7:a7:69:6e:c1:3b:da:bc:f7:f2:94:
a8:8b:37:d8:c7:ef:b3:f6:2c:8c:e2:0b:12:44:1b:
0c:61:bd:df:f5:fb:7c:a8:df:76:de:22:57:20:dc:
fc:bd:f6:2f:ed:32:26:e8:6c:0c:1c:71:4d:54:d8:
13:30:c7:4a:90:ae:1e:bc:3e:66:9e:f2:20:47:fc:
95:5b:ba:c8:63:1b:e3:44:8e:3e:dd:15:68:9a:00:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BB:55:8D:0A:F9:92:DA:B5:FC:C2:15:E5:A4:3D:7A:4A:1B:7A:65
X509v3 Authority Key Identifier:
keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:bc:d3:1a:5e:39:1a:4d:d7:73:52:27:36:89:8b:6b:34:23:
3d:41:bf:6d:4e:63:fe:56:70:37:3d:48:01:08:d7:18:bb:e7:
77:36:ee:b0:4a:24:3e:86:9f:01:a5:21:f0:69:e0:ed:b9:fc:
69:0e:45:7c:19:b7:fd:c5:ba:45:e5:7a:e2:75:97:0e:53:2f:
1a:71:be:2f:ec:15:c9:c4:f1:8e:5c:da:cd:e2:c5:4d:47:45:
db:df:e0:7e:e7:2f:8f:c5:fc:4f:3d:c3:9b:d9:53:c6:9b:df:
98:21:bc:0d:65:1f:5c:55:1c:17:17:6d:63:98:67:7c:4b:75:
90:3d:f6:23:3d:a6:93:fb:8f:5e:53:63:9d:c0:9f:fb:b2:6d:
b9:7a:21:90:c5:71:39:08:d2:8d:b4:f3:e8:0b:f4:51:88:36:
64:22:9c:f4:dc:95:c0:b6:0b:6c:6c:3c:ff:bf:8d:1f:0d:2b:
66:0a:11:f9:ce:94:4e:89:f3:63:65:96:4a:f4:9e:18:cf:93:
dd:eb:ec:18:01:cd:cf:46:d7:b3:97:0f:0b:da:a9:f2:db:df:
2c:23:43:13:cd:4d:b4:1f:6e:4f:7e:38:5b:8b:1f:00:00:f8:
4d:94:f2:40:e6:77:3d:03:c6:c6:54:a3:97:8b:ba:a4:f5:d0:
8a:db:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:53 2025 by rpki-client