Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File: AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier: J/oAFiQXfTACv+WsEJhzcTeS36636YtcuLAcsaHKKFc=
Subject key identifier: CE:CF:7F:8C:A0:7C:5A:F6:93:2C:18:BB:9B:A6:9D:80:42:37:24:E6
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer: /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number: 0236
Signing time: Fri 31 Jan 2025 02:00:29 +0000
Manifest this update: Fri 31 Jan 2025 02:00:29 +0000
Manifest next update: Fri 07 Feb 2025 02:00:29 +0000
Files and hashes: 1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: DP8r2pUzvtyK2sba04IdAzdQbX89dz9J42PgmmIauUs=)
2: 59179A7E0F3211EDA9D57685C4F9AE02.roa (hash: rMev8024uF8TEESVT+FsfOfbRH+3KQX0Th9l2lAdoEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Validity
Not Before: Jan 31 02:00:29 2025 GMT
Not After : Feb 7 02:00:29 2025 GMT
Subject: CN=679c2ebd-896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:4d:d0:a5:56:a4:65:16:0e:fd:e2:29:dd:
90:2e:8f:b8:1d:69:ba:ba:9a:02:9e:bb:da:4f:aa:
92:c8:f6:33:c2:3c:3e:6a:bf:78:cc:b2:ef:9d:d1:
77:00:db:68:26:36:00:94:ae:4b:2b:21:22:ab:fb:
06:1f:6e:b0:19:06:7b:bb:72:39:90:7b:e2:45:26:
27:2b:06:13:50:49:4b:78:ee:6d:00:92:0b:b4:ca:
1b:e7:b9:58:f1:6f:1f:2b:64:04:71:5d:93:5c:de:
29:72:36:26:da:d5:e8:4a:15:37:d5:cc:86:a8:ae:
6d:b2:5d:d5:a5:ad:f0:d7:41:7a:4a:f1:61:29:d6:
b2:47:a5:ca:94:8b:b4:d2:4b:11:05:f5:de:d2:f4:
26:d2:49:3a:a5:c7:7d:00:7b:18:f5:70:21:e1:61:
40:0f:e9:b4:78:14:f8:d4:ab:66:15:e5:d9:b2:7e:
9b:29:ca:4d:b0:d5:01:6f:4b:24:e6:c7:b3:5b:eb:
57:60:f5:f4:c2:d8:dd:62:ca:77:58:9f:72:f3:6d:
cf:83:84:23:dd:ad:03:fa:79:17:f7:1c:12:26:a7:
97:1e:9b:6d:99:a0:b0:aa:08:01:03:1f:7f:fc:29:
7d:ab:62:c0:2a:08:3a:84:e3:12:98:d2:51:5a:ea:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:7F:8C:A0:7C:5A:F6:93:2C:18:BB:9B:A6:9D:80:42:37:24:E6
X509v3 Authority Key Identifier:
keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2a:3b:f7:15:f5:bc:61:08:69:da:98:86:5e:4e:b1:4e:5b:
8f:76:45:fc:f7:d9:94:8c:30:69:3c:fe:16:cb:7c:ed:f3:a5:
89:9d:5f:52:dc:56:61:8f:96:fd:67:d8:2d:6f:d0:91:fb:3b:
20:00:45:f5:08:78:f7:c7:7c:74:13:b3:31:b4:85:f7:d5:79:
94:a9:08:cf:04:e3:90:41:92:3c:1a:75:c0:39:46:39:66:be:
e2:1a:84:d7:a7:80:00:9b:c5:59:78:40:b9:99:f1:c2:cf:8c:
d4:6a:de:f3:14:b7:20:6a:6b:5d:99:92:2c:9a:9b:da:ab:65:
e0:76:59:5d:d2:a7:61:e6:aa:21:6b:de:9c:8f:9e:14:02:1d:
86:2c:f3:79:3d:1c:c3:74:9b:f0:9d:f4:cd:29:a8:3e:dc:13:
33:14:a5:5e:40:f7:96:e2:63:f2:39:4e:f5:ee:4b:58:21:34:
5e:ee:b1:84:75:bb:0b:6d:18:63:a1:70:ba:32:71:7b:a7:b0:
f3:ac:7c:d7:cd:fc:96:29:93:25:56:84:e7:35:15:a1:0d:53:
6f:cd:37:b9:ef:c4:73:7c:fd:b2:df:43:a6:94:3e:3e:c2:71:
fa:09:1e:c0:ba:d1:de:fa:e0:2b:d5:6e:9d:16:b9:a5:71:82:
0e:3f:4d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:27 2025 by rpki-client