Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
File: CkMWPL6xv3mMnOQcHF50ociDesY.mft (raw, json)
Hash identifier: sP8apwOhFXpspvTdntb/cIkvKiz0wGib6rr8OZRW/qE=
Subject key identifier: 67:D7:FE:FA:34:B3:29:6B:64:10:E0:BD:BF:6A:30:3B:C4:AF:1D:72
Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6
Certificate issuer: /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
Manifest number: 0237
Signing time: Fri 31 Jan 2025 02:00:21 +0000
Manifest this update: Fri 31 Jan 2025 02:00:21 +0000
Manifest next update: Fri 07 Feb 2025 02:00:21 +0000
Files and hashes: 1: CkMWPL6xv3mMnOQcHF50ociDesY.crl (hash: q59NSfbPYpdr0dVbKkLsE4n8C+MPP7w7umll0pRhR5g=)
2: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (hash: JKeISo/Mq9MpA3CnUuVBraJP4vSdwyiOEeRfzcBtl0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
Validity
Not Before: Jan 31 02:00:21 2025 GMT
Not After : Feb 7 02:00:21 2025 GMT
Subject: CN=679c2eb5-6642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:49:42:f8:fe:0f:f5:6b:0c:78:8b:76:ef:
f7:96:fa:a1:6a:d7:e7:e6:17:d6:ce:5f:f0:b8:71:
cc:de:e0:b7:1c:33:3a:5f:ee:b2:8d:7a:ec:e5:83:
b0:ce:9c:1e:66:4e:18:0d:d0:7a:5a:77:cf:77:65:
09:9b:19:c3:73:40:19:a9:ba:86:42:fa:e6:71:1a:
1c:cf:d8:db:ef:fc:40:c8:aa:f5:54:8e:84:b8:be:
3a:a2:27:67:e7:d8:1a:d2:0e:57:f2:fe:77:07:47:
95:05:b9:46:ea:5b:f2:5f:d2:71:a6:35:d0:99:dc:
5c:ce:34:46:41:c0:bf:1d:ea:89:50:40:32:70:f6:
26:1b:fd:36:e1:1b:d1:86:9e:a0:e2:c1:ea:25:ed:
66:87:5c:82:67:36:8b:5f:6c:19:8c:ac:30:f8:eb:
62:6f:ef:63:8a:f4:d6:f6:89:a2:bb:bd:8b:c2:c9:
02:8d:d9:59:d0:35:ef:ed:f9:db:47:b4:50:46:55:
2e:89:19:91:f6:32:2a:58:6a:af:0d:e0:44:48:92:
71:bb:ab:f1:05:37:80:c4:ae:52:d5:11:f7:47:8d:
f7:42:41:f9:f8:83:bf:bf:7d:b1:a0:f8:0b:67:bc:
ae:4d:63:c8:6f:8e:ee:00:a7:45:56:24:34:6a:0b:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D7:FE:FA:34:B3:29:6B:64:10:E0:BD:BF:6A:30:3B:C4:AF:1D:72
X509v3 Authority Key Identifier:
keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:7e:32:2c:37:0a:d7:9a:81:61:8e:b1:0d:e1:b6:27:36:db:
29:90:91:56:16:3f:fe:95:7e:ba:48:da:a9:33:47:85:0a:bb:
e4:c7:1b:7a:66:6f:e1:c7:26:8e:5f:5b:c2:8c:b2:99:0d:9e:
c9:f0:02:ea:94:77:f4:ea:3a:09:d3:6e:d8:0c:ec:1a:42:13:
a7:6f:e6:74:4b:08:9d:f2:7c:dd:fb:30:75:27:4d:74:b5:99:
fd:da:fa:16:47:b6:f7:f5:f6:37:67:c6:e7:56:8e:59:ea:e9:
3c:ee:b7:1c:12:64:a7:c7:f7:ef:fb:69:f1:64:20:0b:d0:9e:
05:60:6c:42:cc:9a:df:ad:af:ce:9b:09:b5:f1:4b:9a:58:92:
f2:b2:89:9e:8a:2f:43:f1:72:7b:6a:40:7e:7f:03:9b:f8:c0:
5d:ee:d1:99:41:0c:d8:c9:20:ed:d5:eb:48:86:67:7b:9b:00:
d2:a7:b2:52:60:1e:7a:1e:d0:d9:33:8c:75:aa:71:d1:43:7c:
f3:59:9c:f8:e2:13:13:af:ea:44:aa:76:45:e2:a6:17:0a:89:
b9:b2:d8:11:0e:cb:31:a7:e4:9e:46:97:9a:a9:b8:f7:cc:76:
ed:d3:7d:95:b3:9c:07:8b:45:be:e7:4d:30:75:82:d0:6e:05:
eb:fc:0a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:02 2025 by rpki-client