Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft
File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json)
Hash identifier: sWKeAL4ZU0xnQy8Vp6F3ivJJySu0/PNphxVKx9yWVJY=
Subject key identifier: 0C:10:17:78:BC:F3:7E:9E:8F:7A:86:80:B0:64:06:32:6F:4A:F2:0A
Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB
Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft
Manifest number: 018D
Signing time: Fri 31 Jan 2025 02:56:54 +0000
Manifest this update: Fri 31 Jan 2025 02:56:54 +0000
Manifest next update: Fri 07 Feb 2025 02:56:54 +0000
Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: yJPXR5f54NNiLMWE1jADag/PN2WXU/OAOsJgMIWCZgQ=)
2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: m6rZeuVTK1YDhuaaIVhiTv3yauwN9+tcZ5dIfBdhpRQ=)
3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: mAZNBvYiKFXdkzpTN4tNBsnyhqKr4h/2Tyrx/kSmdy8=)
4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: Vaf4WstL1N3DSV5lZGZocpmDqTwW1A3D3RH6q2VNIFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB
Validity
Not Before: Jan 31 02:56:54 2025 GMT
Not After : Feb 7 02:56:54 2025 GMT
Subject: CN=679c3bf6-64b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:25:36:ec:f3:69:4d:c7:d3:27:9d:59:b3:
49:73:20:3c:6e:5b:6d:3a:20:9c:ce:c1:0e:44:23:
72:e9:10:68:9a:28:e2:18:1e:f1:b3:d2:14:0d:83:
26:70:67:93:ad:df:7f:f9:5c:21:b2:f1:ef:ec:f8:
75:4a:28:b2:49:04:b0:ed:a2:9d:42:95:a2:c5:97:
2f:ff:a7:52:fd:b1:44:28:55:ae:96:c9:7c:de:b0:
67:6a:1c:64:af:52:ab:77:ba:e7:1c:fa:2c:46:dd:
2f:fb:4a:c3:8c:41:28:5f:f6:5f:07:9c:61:59:90:
c7:0d:67:84:63:9e:7d:7f:30:79:55:28:34:d9:07:
a0:ec:ef:d4:c0:5e:80:89:8b:cf:ec:04:84:d2:aa:
07:bc:59:42:35:c9:3e:84:bd:2a:a0:62:85:ec:9e:
0d:0a:66:3a:f4:14:10:b3:57:0d:e4:fb:21:e3:fe:
fb:e6:1c:54:06:67:cd:a2:ad:06:e9:94:2c:8e:19:
2f:84:50:91:58:7e:5a:ef:05:3f:d0:62:b7:e4:c1:
78:05:16:b8:ce:c0:27:c3:8d:e9:f4:6e:5f:fd:f5:
17:f9:03:3e:4e:f7:e2:36:ba:9c:4d:3a:51:04:61:
8e:04:5c:40:7b:69:43:7e:aa:3c:29:63:c5:ce:fd:
86:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:17:78:BC:F3:7E:9E:8F:7A:86:80:B0:64:06:32:6F:4A:F2:0A
X509v3 Authority Key Identifier:
keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:c4:8b:fb:d9:d1:75:9c:dd:f3:c7:2e:b6:23:a5:8d:93:d2:
21:08:91:fe:e0:b0:f6:31:51:79:10:ac:31:0a:f2:28:44:88:
ea:a5:e9:f0:3f:44:55:44:20:4f:ed:ba:14:a3:6a:31:05:07:
95:fc:a8:88:03:a1:05:1e:81:2b:63:79:0d:85:43:45:a0:dd:
bc:4e:32:c8:b3:46:b5:d4:09:1a:a3:50:70:93:6d:ea:3e:c5:
4e:91:dc:a3:67:75:ed:b3:16:0f:a8:b8:db:d2:d9:90:db:19:
97:3c:42:51:10:34:bc:0d:1e:27:a3:eb:10:ba:7b:2d:94:28:
33:79:ae:28:3c:48:07:72:d6:71:b7:8f:e1:fa:a8:9c:ef:fd:
b9:8e:63:f0:54:47:0d:11:23:f3:e4:01:06:f5:01:47:f5:d5:
2c:dc:d5:d6:3c:bd:cf:e9:3c:da:b6:5b:1d:95:51:98:54:13:
f4:e0:09:e9:06:d2:39:d6:96:6b:15:b8:0d:c6:bb:68:60:bc:
13:8f:51:ac:dc:29:8b:8d:63:be:de:bc:d4:4a:bc:97:e9:e5:
db:e2:6d:8d:71:97:62:5b:cc:2e:c2:42:61:4f:1e:89:5c:f7:
d4:83:93:88:ba:ab:86:52:c5:39:50:c8:9b:fc:bb:98:9a:d3:
0e:21:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:17 2025 by rpki-client