Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json)
Hash identifier: 77KrwmezmptpzepvV5QoM9Nwnfr9K9AFGCmCOH21z5Y=
Subject key identifier: 2D:EE:46:DD:CE:67:8C:CA:2B:D9:E5:B1:36:10:38:5B:02:67:D6:51
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial: 0EBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
Manifest number: 0EB0
Signing time: Fri 31 Jan 2025 17:40:23 +0000
Manifest this update: Fri 31 Jan 2025 17:40:22 +0000
Manifest next update: Fri 07 Feb 2025 17:40:22 +0000
Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: q/NivImcSNbYHxkNeLnL5snHxxjDm5w7P2YWIdYU//A=)
2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: S6BUVTLFR5ykemKBBu8dE6BaxtUQEDDw3K/csPghGJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3775 (0xebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Validity
Not Before: Jan 31 17:40:22 2025 GMT
Not After : Feb 7 17:40:22 2025 GMT
Subject: CN=679d0b06-ba61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:4b:d6:c9:89:98:be:52:ec:3b:2b:2e:4b:
03:69:11:6a:65:a3:83:dc:1b:9b:5e:97:4e:2d:95:
4e:db:8e:b4:59:6c:82:1a:6b:40:52:e9:2b:29:32:
58:30:5d:53:de:7d:e2:da:bc:5c:1b:cc:ed:8c:13:
1e:ad:7e:6f:a1:b2:e3:dc:91:c1:f8:c4:9e:4e:86:
46:46:c0:53:6a:c0:f3:54:ba:96:85:1d:28:02:73:
91:91:bd:0e:42:db:46:eb:04:4f:ac:a9:fb:38:65:
de:2f:ab:32:e6:1d:b4:f1:56:6e:fc:28:86:c7:1c:
02:c8:b9:6c:e9:c5:e2:85:ef:8f:c4:cd:b3:98:e2:
3e:81:b2:60:b2:71:ef:e4:39:ba:8a:4b:ca:73:83:
5c:ed:b5:13:2f:b4:8c:5e:e0:e8:ea:95:e2:de:52:
e1:44:9b:60:9a:5f:e5:22:92:ba:d2:79:6f:cc:5f:
e7:93:a6:63:c7:43:49:f6:43:2d:80:c8:72:13:a1:
c1:fa:1c:23:59:65:20:95:23:d8:d1:a9:2d:cb:ca:
dd:d0:e0:b7:d9:a5:a3:eb:05:71:86:21:83:e4:43:
69:70:a3:5b:f6:9a:d5:86:d1:bb:6d:54:04:4b:4d:
91:de:07:ef:fa:db:58:68:d8:cc:38:cc:02:22:87:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EE:46:DD:CE:67:8C:CA:2B:D9:E5:B1:36:10:38:5B:02:67:D6:51
X509v3 Authority Key Identifier:
keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:8f:59:6c:26:9d:3a:57:c1:7c:21:a3:8c:19:38:e1:ec:b4:
c5:82:70:4b:ce:db:1f:a3:d5:f0:2a:e2:81:16:c1:5e:35:8d:
23:aa:09:b9:3d:e4:18:53:88:43:cf:de:4c:c4:2e:72:07:95:
76:57:0d:b8:7a:96:d3:a6:c3:04:e8:c9:d0:16:5f:2d:14:5c:
8a:71:0a:e8:83:8d:7a:39:9b:cf:13:55:a4:fb:5b:09:01:cd:
e2:f8:db:ec:6f:89:82:1e:12:7f:8d:6d:d3:19:1f:39:86:48:
da:83:8e:84:07:53:5a:9e:19:c6:4b:a3:f3:df:b7:85:33:18:
fc:5f:d6:ec:58:13:9f:7e:08:a5:40:84:0a:b5:3b:22:09:0e:
43:b0:0a:c8:d5:a9:96:fc:69:05:1d:ab:59:cb:1f:cd:b9:df:
17:eb:72:be:40:6d:ef:77:14:9c:ff:0c:b3:bd:56:e8:24:9e:
52:a6:bb:e0:6f:60:c4:00:df:b6:e1:71:49:1b:43:5e:d8:ee:
02:1f:00:99:ac:ca:b9:71:cb:f9:89:af:c4:b4:df:7c:fe:b6:
9c:52:b4:4a:4a:6d:4a:22:1b:4e:99:86:3a:38:71:e4:68:f8:
07:c1:6f:c6:83:8f:0a:40:d7:92:fb:01:30:81:43:a2:8f:71:
26:01:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:32:46 2025 by rpki-client