Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft
File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json)
Hash identifier: Ly9iCBs57FwJfz1RhhnI23OwONOldqNv3StwPDW7eV8=
Subject key identifier: 45:89:73:62:88:8F:3E:C5:F3:4B:F2:27:D1:FC:39:4A:76:BD:8B:F1
Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00
Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft
Manifest number: CC
Signing time: Fri 31 Jan 2025 04:54:25 +0000
Manifest this update: Fri 31 Jan 2025 04:54:25 +0000
Manifest next update: Fri 07 Feb 2025 04:54:25 +0000
Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: P+LSYhnAXkXAU93sj+q7htmkVx9+/eUQ+9XwdNsy0jw=)
2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: BKT8mKOvtKDrwuLWmsCuesw/k4MktBnMTWfVhN9KpJk=)
3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: Qk5WperL9Uyej6ohOzdzkfdTG/QX7gXEMdP5wBlxS2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800
Validity
Not Before: Jan 31 04:54:25 2025 GMT
Not After : Feb 7 04:54:25 2025 GMT
Subject: CN=679c5781-8a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:41:85:3f:b1:d7:82:d0:d6:e0:97:84:c7:55:
40:5b:0a:23:d8:d1:a7:ee:45:83:cb:5c:84:73:2d:
8e:8b:2c:bd:c4:54:37:a5:69:4b:0c:64:4e:86:9e:
a0:71:2e:87:cd:aa:17:20:25:69:2e:b3:2e:19:d6:
26:6c:54:35:1f:9b:89:15:27:64:5c:38:91:a0:6c:
dd:99:f7:66:64:f6:0f:6b:b5:08:60:4e:16:cf:58:
9b:a0:75:3c:49:7a:6f:10:1f:2e:a7:13:f0:1f:0d:
4a:ad:cc:b0:91:b4:86:91:a4:8d:0f:3a:62:9f:64:
ba:01:cf:84:2d:65:72:b4:7e:e0:6f:a6:3b:7a:51:
57:16:06:17:03:46:8d:ea:3c:6d:63:1b:c4:78:61:
c0:f0:9d:5c:eb:30:f4:71:5c:71:eb:e1:25:e9:42:
ed:fb:82:f9:57:25:60:35:40:d5:50:70:53:53:d9:
04:26:e7:b1:fd:25:c2:61:a9:ca:8f:d3:39:ac:c9:
4c:92:1f:c7:82:61:35:1b:63:50:04:f5:c6:ea:76:
7f:78:8c:5e:c6:af:15:46:ab:47:0e:ad:f5:29:b8:
55:55:78:9b:69:2a:a2:43:86:ad:e4:6f:fb:2d:7b:
09:6e:93:d3:39:d2:a6:da:f1:ec:91:ac:c7:d9:56:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:89:73:62:88:8F:3E:C5:F3:4B:F2:27:D1:FC:39:4A:76:BD:8B:F1
X509v3 Authority Key Identifier:
keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e8:ea:9f:e7:71:bf:0c:aa:3a:41:7b:46:9d:77:b2:8c:12:
48:87:08:f4:18:2b:3c:92:da:21:97:30:54:05:ad:3d:35:04:
b2:d0:dd:09:e9:b0:ae:77:d9:20:53:0b:81:16:2f:98:04:1a:
09:f1:10:39:bf:b0:bd:b1:2f:22:a0:58:6c:63:3b:6a:a4:99:
53:54:f7:ae:2c:0d:0d:e2:9b:56:70:75:03:68:c8:2d:85:6d:
96:53:8c:8e:b7:cf:72:65:e8:0e:d2:95:de:eb:69:2a:70:16:
a6:84:c2:89:42:32:f5:9e:32:10:4c:67:8a:39:46:40:bb:ce:
26:32:d3:a2:59:7c:e7:73:ba:e2:a6:c6:a7:70:41:2e:26:b6:
dd:94:98:db:da:9e:8d:f4:3e:b9:75:3a:3d:ae:18:5c:86:e8:
e7:77:78:31:51:c9:9e:19:1f:21:40:84:97:e9:2b:d4:be:4f:
cd:60:0f:14:58:eb:fd:32:ef:37:10:1d:89:cf:1a:2d:5d:4e:
87:04:14:65:17:95:0f:cd:4b:20:3b:2a:ff:82:8a:bc:4c:7a:
b5:74:ab:12:56:d4:00:73:d5:36:33:d4:25:4d:73:0a:a3:f0:
82:f9:90:64:28:c5:17:51:01:b1:a7:0f:f5:e0:16:22:e3:1e:
75:2b:29:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:17 2025 by rpki-client