Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft
File: w-IA1ABdmiPkv66uDtty6kPx0JY.mft (raw, json)
Hash identifier: rixOviCOcBhcJE1fUYOnoRjIJt2WzuMgqyIEJKph33U=
Subject key identifier: 8B:6E:A3:AB:C6:FC:6E:FA:93:13:E9:4B:75:CB:5E:18:7C:38:0F:84
Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96
Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft
Manifest number: B9
Signing time: Fri 31 Jan 2025 04:47:02 +0000
Manifest this update: Fri 31 Jan 2025 04:47:01 +0000
Manifest next update: Fri 07 Feb 2025 04:47:01 +0000
Files and hashes: 1: w-IA1ABdmiPkv66uDtty6kPx0JY.crl (hash: NiIVED7sPQYPxPK5hP9HFhD1pPazzp7gpjOpoOI0R3k=)
2: C19C2720CA2711EE82C12B0CC4F9AE02.roa (hash: VHJTWsm4wzJziIer/htU6hv3gqL/KMd1K2nOD3+RJsA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096
Validity
Not Before: Jan 31 04:47:01 2025 GMT
Not After : Feb 7 04:47:01 2025 GMT
Subject: CN=679c55c6-3bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:29:d0:ef:80:ce:d1:6c:3b:31:01:3e:32:
08:d8:57:69:1f:cf:d0:cb:cd:54:a2:2d:ff:6d:80:
53:f1:5f:31:0b:9f:dd:c2:b3:0a:45:02:ce:cf:55:
3b:85:a3:9a:39:27:c0:31:fa:1c:45:ab:43:ea:20:
1c:04:77:d5:06:36:9f:60:1c:75:69:f4:24:c0:42:
f9:2c:8f:dc:cc:61:20:65:09:56:b7:3b:12:4b:59:
e3:48:ba:33:f7:25:0b:43:95:e1:88:8b:cc:a5:99:
37:f8:61:e9:7f:15:5d:cb:f0:83:95:e8:d7:06:97:
28:bf:02:a4:49:59:00:99:98:05:58:db:33:bd:89:
9b:3e:e3:46:60:84:65:f7:57:dd:e2:e3:e4:17:2d:
59:75:68:60:1a:4b:80:d9:bb:23:ab:88:8a:fa:50:
a2:54:25:80:40:0c:c5:1c:06:d8:5f:64:77:46:d9:
c4:39:0b:d5:07:ae:3c:02:65:92:76:06:8e:b2:69:
ea:e8:2b:b7:a6:72:14:6b:a3:2a:5d:53:ab:cb:a5:
f1:f4:ef:5f:f2:64:ef:18:07:b9:e2:c2:04:16:eb:
9d:41:bd:ae:43:83:ca:00:d2:11:12:99:6b:d0:a6:
60:3c:5c:11:b6:0c:f9:68:86:4e:50:dc:53:38:ae:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6E:A3:AB:C6:FC:6E:FA:93:13:E9:4B:75:CB:5E:18:7C:38:0F:84
X509v3 Authority Key Identifier:
keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:97:58:1c:16:33:bd:6a:f9:11:7f:c9:f1:de:3b:64:8c:f5:
2f:76:d5:93:d4:2e:71:5f:ce:85:14:0e:b8:a7:e8:99:b8:20:
61:0f:fb:49:a9:bb:4a:4b:dc:f2:ee:20:4a:12:ef:72:83:93:
40:72:85:16:81:32:a4:4e:51:bb:0c:6a:fe:2c:ee:65:df:eb:
11:e1:ec:f6:c8:f1:0d:e8:f8:35:5e:24:ec:ec:59:0d:a2:f8:
26:df:9f:4e:a1:36:06:73:98:1d:c7:2d:3b:0f:d2:ae:73:a2:
11:e6:f4:c9:aa:2d:2d:6a:83:10:d5:6e:ea:92:dc:ca:9c:aa:
18:14:56:80:59:d1:e4:37:0d:94:c6:ff:9b:7f:3f:82:85:bd:
a7:31:d3:a7:69:b7:72:41:7a:ad:ff:69:6f:1a:ef:ac:88:84:
a6:f1:5f:c8:48:ab:9b:1d:2a:57:44:21:3b:68:b3:20:ef:6f:
7b:77:dd:4a:10:f7:22:c0:d4:32:93:6a:24:3a:20:88:c3:03:
88:ed:68:2e:88:c8:2a:51:e1:ae:8d:21:c7:25:85:f9:1d:cf:
b1:d5:12:51:b0:f7:ed:ae:8e:10:7f:81:73:61:f3:c4:20:55:
45:03:d6:e5:f6:b5:cc:06:12:66:1d:0f:96:b0:09:07:8f:66:
a4:d6:a5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:37:34 2025 by rpki-client