Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json)
Hash identifier: 9czd8dRpWXYYP4NOL+Lp3PwYD8x2x9UvqGYrEOTv5XY=
Subject key identifier: 0A:99:9C:BF:36:F4:DE:BC:F1:6A:79:2B:05:BA:74:8C:1A:FE:79:5F
Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0
Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
Manifest number: 019F
Signing time: Fri 31 Jan 2025 02:35:29 +0000
Manifest this update: Fri 31 Jan 2025 02:35:29 +0000
Manifest next update: Fri 07 Feb 2025 02:35:29 +0000
Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: J/PeDR2muxCzEpwUJrVE5C0QjYtsvLIqm/rh+AtypB4=)
2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: kD/w2pEsMVUtTytSnR/xZcEA/RvnsimONEARk2tyefI=)
3: B360BB9689AD11ED93CAB75FC4F9AE02.roa (hash: fw7QuarxRQnoH7qC3OJT6mVZQ34rVRmQZlTqqAc2+08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0
Validity
Not Before: Jan 31 02:35:29 2025 GMT
Not After : Feb 7 02:35:29 2025 GMT
Subject: CN=679c36f1-f5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:0b:b4:d5:21:3c:5f:ca:a0:6f:a8:f2:3d:
f2:41:43:d3:b9:f7:66:ad:f8:77:16:29:52:2c:d2:
1d:e3:7f:f7:2e:74:bc:15:85:ee:66:de:41:b8:37:
c5:86:83:2d:5b:63:4d:f0:c4:7f:3c:0a:5f:20:39:
17:d8:9b:05:10:b5:73:9e:27:aa:22:35:35:65:d8:
77:b5:5b:39:19:29:a7:37:b1:93:09:4b:3a:3f:a0:
2d:ab:40:1c:b5:c2:a6:55:34:a1:e6:a4:3e:0d:7f:
cb:46:98:a8:84:74:45:c0:08:cd:14:24:71:1b:ad:
eb:3e:ac:bd:d3:07:d6:8a:1e:0f:ab:5f:a6:42:44:
52:c6:1e:15:d1:f2:5f:78:b6:13:cd:85:b2:54:27:
ed:5d:f4:fe:a1:b3:18:b7:70:2f:ff:49:d4:8a:26:
c0:85:50:1f:e4:a0:8a:bc:0f:28:07:31:d3:d0:c9:
1c:73:3e:59:3d:0c:f4:6b:b2:d4:43:b5:92:24:ea:
eb:df:df:32:89:ca:7a:ad:11:1a:2b:18:21:68:ff:
3a:0a:eb:27:41:9f:43:33:04:e0:06:84:7d:12:9e:
3b:d1:c5:ee:df:22:c8:f9:c9:fa:c5:46:4e:de:16:
fc:cc:1b:83:21:02:a1:c8:2f:a5:84:f1:d5:53:1c:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:99:9C:BF:36:F4:DE:BC:F1:6A:79:2B:05:BA:74:8C:1A:FE:79:5F
X509v3 Authority Key Identifier:
keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:70:15:c8:9a:5c:49:55:98:18:35:7a:51:b2:36:bc:32:58:
74:9b:60:d6:1e:a3:f6:e1:94:33:a4:8c:9b:cb:8c:ba:99:c9:
bd:a8:c7:60:86:ac:fa:39:63:36:ac:b8:cd:ed:59:49:6f:e9:
13:30:a7:63:4c:04:50:78:5a:c4:91:4e:ce:57:0c:30:39:c0:
eb:c1:1f:82:9e:99:ac:57:da:57:e2:99:cc:54:9a:20:41:51:
67:b6:cb:ad:d0:db:c8:a1:45:b0:5a:af:75:58:59:4f:b1:3a:
e4:a0:6f:38:87:ed:f2:14:68:77:2d:63:02:fb:b8:75:58:39:
7c:d4:26:52:53:9b:96:3e:83:89:9f:e2:d6:04:18:20:aa:7b:
ad:b3:4a:d2:17:cc:bb:17:8d:4f:a4:16:81:58:92:5c:0f:23:
38:b1:48:5e:35:be:37:e0:68:dd:38:b7:a3:16:26:8f:cd:f9:
d0:c0:ac:24:1a:cc:b8:bd:54:0c:90:d1:91:3e:de:67:23:54:
11:9f:7c:21:58:02:5c:d0:2b:f8:4f:d2:b9:33:dc:db:03:c2:
8a:24:68:6d:1f:f2:da:db:22:e8:dc:3a:15:61:bc:36:4b:a3:
a4:46:09:0d:e1:1c:cc:48:b3:e5:8d:62:16:d2:0f:11:c9:78:
ef:d2:ea:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:42 2025 by rpki-client