Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
File: aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft (raw, json)
Hash identifier: ShEAgvEmtyCBU9Sy+/5gIDZiDEsNIGz++L7ryVf3PwM=
Subject key identifier: 3A:98:EC:C2:A6:79:DE:3E:22:C4:6E:8D:53:C5:76:C9:7E:3D:09:8D
Authority key identifier: 69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98
Certificate issuer: /CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98
Certificate serial: 06D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
Manifest number: 06CF
Signing time: Thu 30 Jan 2025 22:02:17 +0000
Manifest this update: Thu 30 Jan 2025 22:02:16 +0000
Manifest next update: Thu 06 Feb 2025 22:02:16 +0000
Files and hashes: 1: aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl (hash: k8cgY8XxIofreFcuNo2lYsDtLz/rmI5gE7EkKPD4TEg=)
2: DE524D283F0511EBBB4C174FC4F9AE02.roa (hash: zWRikEivlVPteMMOfXpGEHZKMPXoa2S3XawXpPi4Aig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98
Validity
Not Before: Jan 30 22:02:16 2025 GMT
Not After : Feb 6 22:02:16 2025 GMT
Subject: CN=679bf6e9-0ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:1f:02:fc:dd:f0:8b:52:9a:81:de:b4:46:
19:04:ef:bb:bf:59:e7:9d:ae:99:4b:fa:13:b3:8c:
1a:b3:8f:51:a9:aa:89:33:0b:fd:4c:d3:16:f2:c6:
30:8c:3a:3f:9b:4d:59:9f:1b:45:4b:70:c4:7f:13:
90:af:0f:ea:d5:23:15:fe:8c:98:06:f9:4d:aa:1e:
b3:85:5e:a3:81:46:1e:3e:67:a4:73:e3:60:a4:df:
70:42:96:56:f7:ec:3a:6d:12:f5:51:74:ec:f3:0b:
18:bf:e4:02:ff:86:29:8b:26:6d:86:e1:b5:f2:c7:
95:30:86:ef:98:d3:97:1f:cd:b1:0b:21:36:91:e4:
41:1e:59:9b:d8:5b:fe:1d:09:5b:ee:98:4b:86:4a:
08:61:32:d7:cc:94:56:68:32:bc:8d:ba:b1:36:7f:
39:b7:98:13:cc:bc:80:71:a7:bb:d8:e8:2a:8f:9d:
0b:1f:fb:6e:31:27:f9:d9:8e:a1:13:c5:4f:2d:a3:
f7:fe:7d:2d:cc:48:74:b7:15:86:fc:c1:62:8e:2e:
09:12:21:fb:bf:00:6b:c3:59:59:04:4a:28:d0:d7:
5a:33:83:58:3c:d8:6f:07:5f:79:72:99:dd:d0:03:
e7:e6:c7:91:bf:7f:4c:13:66:71:03:2e:f0:75:87:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:98:EC:C2:A6:79:DE:3E:22:C4:6E:8D:53:C5:76:C9:7E:3D:09:8D
X509v3 Authority Key Identifier:
keyid:69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bd:81:67:4e:68:5b:ed:cc:a9:62:ee:a7:a6:cc:cb:88:43:
2f:e9:ab:71:f2:7a:4a:9e:ef:25:29:4d:0a:2a:21:52:74:4a:
25:c6:e4:c1:1e:42:8c:88:9e:49:30:41:3d:56:71:9f:6d:e4:
aa:30:2d:0b:c9:1d:00:82:1c:f6:3d:fb:b0:d1:1b:24:6e:80:
57:5a:9d:c6:5a:57:ab:c1:df:28:e9:f1:58:a0:60:a1:e9:86:
0b:ac:c4:35:b6:fe:97:e1:8e:f2:a8:06:f4:04:4c:02:23:31:
b1:7c:9f:e8:a5:aa:24:8f:0e:7a:93:e0:d7:e9:df:b8:14:0d:
21:9a:64:fe:01:d3:8a:70:22:c2:a5:5d:fd:f2:85:2f:0c:ac:
9e:a4:03:af:38:43:32:27:ef:9a:94:ad:24:83:35:e5:eb:d1:
d8:01:dc:41:69:1e:94:42:0a:82:9d:81:8c:ec:a4:7d:2d:7d:
ab:39:a8:80:2e:1c:12:47:55:dc:c9:c7:b3:2d:e8:0c:a0:89:
5c:01:e6:01:e0:61:93:4e:51:d8:77:70:49:09:b1:38:1d:cf:
af:d1:7d:43:85:83:5f:1f:02:5c:77:a6:c3:13:37:37:77:53:
be:bd:b9:e9:29:14:d9:46:45:41:f6:65:ea:0b:31:62:22:1d:
7b:95:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:37 2025 by rpki-client