Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json)
Hash identifier: 9Z+IiNmaZar3HmXR3ZuqaHdo66bITmPGxoHNJkn8blM=
Subject key identifier: 1B:34:1D:70:EA:B0:DC:97:03:D2:F8:B2:6E:26:A4:6C:1E:11:FA:82
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 037F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
Manifest number: 036A
Signing time: Fri 31 Jan 2025 01:00:29 +0000
Manifest this update: Fri 31 Jan 2025 01:00:29 +0000
Manifest next update: Fri 07 Feb 2025 01:00:29 +0000
Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: f4H1mS5EFfNMAjShiH7hWNmEmg5S5MW6KfRS5t1EAbQ=)
2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: krhsFK4PFWTrjNJ4p9/c55q/gQAKBPQnFLQMSNIsQfk=)
3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: jcldHkQ5FFmg/MXlqtsVZ+VaudO8txN/6DH5hAk06uA=)
4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: FkQAfdMiMVRkFmDG7OCPPtDI1TM4+1FS9ZFrS9JgM34=)
5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 4ZluWaRFJyFeOP9xnmq3elh/rOt90VuN3X6ZFi8v76c=)
6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: 2xYkc0CBHJO1BA1IWYUatPbE+AVeAURXevuFcb34wYs=)
7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: J+kNwKbZA9+MvDuLAMY45SZRzBH7dIz40cdBHlCeLTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895 (0x37f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Validity
Not Before: Jan 31 01:00:29 2025 GMT
Not After : Feb 7 01:00:29 2025 GMT
Subject: CN=679c20ad-9d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5f:88:65:7e:02:5c:39:9a:ac:14:45:9e:2a:
1a:40:b1:3b:87:9a:7c:67:7a:9f:f6:b3:69:91:72:
bc:e3:b1:b9:58:f8:27:e0:03:9c:ce:1a:c8:40:31:
39:50:c6:90:c0:b9:cf:30:b0:2a:48:07:c6:94:a6:
c6:49:2f:aa:8e:21:9f:e7:27:7b:75:fa:47:f0:a5:
f6:ca:c5:b2:4b:65:79:e5:3a:b9:f9:34:cf:d2:87:
c6:1d:6b:2c:46:40:20:16:8b:fd:24:42:5a:2c:4f:
16:68:ac:eb:0c:4b:6a:5d:65:e8:1f:a1:a6:56:9f:
04:11:47:04:6f:44:74:45:34:47:1e:2d:66:3b:76:
3f:ef:f2:30:bf:12:07:48:3a:24:e1:15:b5:a7:91:
28:78:ca:5f:26:43:ab:01:64:31:48:d1:5c:c5:0d:
46:ad:30:6c:2b:8f:f6:56:d4:bc:88:9e:9b:aa:d0:
9e:20:cd:0a:24:a2:59:a5:5c:c1:66:f2:22:6e:23:
fe:90:be:97:2f:e0:6a:c5:ee:4f:a4:97:d8:61:cd:
d4:ac:21:20:ab:55:78:97:fb:c5:01:51:57:a0:4a:
c1:dc:10:aa:e8:ec:36:0b:9e:e8:de:50:38:d9:21:
e0:a3:9f:78:93:8a:cb:97:93:7e:6d:40:54:87:81:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:34:1D:70:EA:B0:DC:97:03:D2:F8:B2:6E:26:A4:6C:1E:11:FA:82
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:58:de:34:84:42:d5:75:ca:0e:e4:38:ee:57:49:6d:ae:80:
8b:1d:1d:46:51:57:9c:f4:da:d2:f0:6e:90:a1:d3:2c:04:22:
2b:20:a7:79:76:ed:fe:9e:e5:8f:15:25:6f:78:6e:a4:4a:1c:
8d:94:97:06:4b:ba:20:0f:52:17:71:45:c9:c4:e6:59:36:05:
cc:aa:07:81:e8:c9:01:82:71:03:52:69:89:fd:b1:61:2b:35:
14:18:9d:f9:18:7f:a6:db:1d:d2:e3:65:e9:21:a2:88:33:20:
4a:a2:d0:6d:5d:6c:65:b2:92:1e:61:3d:bd:94:da:89:92:e3:
36:4f:ad:85:a6:8e:c4:35:e1:34:41:f2:8c:34:3e:df:d5:a4:
3e:70:4e:ce:22:54:72:db:9e:cd:c9:78:76:3b:d7:c6:d5:40:
62:33:d2:05:28:85:02:b1:99:da:f7:12:f6:a5:8b:8f:73:df:
0e:a3:20:79:e8:c4:73:7f:c4:98:cb:56:c6:c8:8a:ed:d0:52:
5a:21:05:5c:06:b4:ca:2e:42:ef:35:dd:ff:c6:4b:b7:54:3f:
22:9e:09:a0:c7:da:bc:2c:18:04:95:79:3a:34:0e:39:42:a8:
e0:6f:06:c6:b6:90:c5:c2:64:b9:79:f9:3f:32:aa:1f:d2:6f:
f8:32:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:05 2025 by rpki-client