Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json)
Hash identifier: NzjeHw2Duhr01h92Wz/oW9gGk9VHo5JcgEiMxy7bFrY=
Subject key identifier: EB:66:71:B7:94:3B:7C:1A:1D:78:74:59:97:A2:9B:3C:72:0D:14:DC
Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87
Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987
Certificate serial: 0C35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
Manifest number: 0C28
Signing time: Fri 31 Jan 2025 18:20:33 +0000
Manifest this update: Fri 31 Jan 2025 18:20:32 +0000
Manifest next update: Fri 07 Feb 2025 18:20:32 +0000
Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: IaAlvh084HJEV0MLrBEVDJAPBTZdOEu6Os7SSPSrnEU=)
2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 3at8OHhr3TWPa09hDLUXiFFjg44cS/0xW9KQOVKngqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3125 (0xc35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987
Validity
Not Before: Jan 31 18:20:32 2025 GMT
Not After : Feb 7 18:20:32 2025 GMT
Subject: CN=679d1470-c2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:77:47:29:26:0a:60:68:83:97:27:74:83:
9c:1c:cc:ed:ea:79:98:e6:73:96:07:18:3d:6a:df:
69:30:5b:a6:c2:b3:aa:69:1f:01:dd:03:70:45:8a:
10:61:e3:ce:0d:b3:ce:d9:5f:1a:77:37:65:35:38:
51:86:33:54:83:4e:5c:d8:63:c8:f0:aa:0e:45:32:
0b:26:89:e7:27:aa:de:70:b9:3b:c8:c4:05:68:6e:
54:2a:3f:e6:68:8a:bf:a9:67:28:7c:8a:c6:22:ef:
3a:32:57:e3:c1:fc:11:61:54:83:92:eb:56:eb:2c:
20:91:52:98:9b:45:42:89:85:dc:71:b8:45:a2:e6:
22:db:49:63:80:a3:67:c6:a5:42:0f:d7:d6:60:17:
22:d5:1e:ce:6a:8f:48:03:49:ca:32:09:f5:7b:ae:
bf:b7:f5:cf:c5:b0:f8:5a:b5:9a:b5:6c:e9:da:03:
26:b1:94:78:0f:b4:97:4e:c1:ac:79:b4:b7:06:10:
e8:81:64:87:ce:b3:f8:75:45:ef:32:88:a1:09:4a:
ef:8e:78:19:ed:0c:90:c3:83:67:d1:94:68:01:ad:
3f:ce:0f:e5:63:52:27:fb:f7:a8:df:13:c6:c8:bb:
45:e8:2e:ab:1e:85:24:11:20:75:8b:8e:83:c2:0c:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:66:71:B7:94:3B:7C:1A:1D:78:74:59:97:A2:9B:3C:72:0D:14:DC
X509v3 Authority Key Identifier:
keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8f:ee:75:8e:26:0a:66:e2:a4:9f:f8:19:1e:b5:cc:a6:88:
dc:15:1c:c9:19:5f:92:f0:e1:48:75:ae:7a:df:f7:11:27:e8:
69:16:9b:16:04:8c:07:d7:43:51:53:20:e2:c4:d9:1e:e8:4f:
39:23:5d:fe:bf:42:8c:8f:c7:91:74:ff:60:db:02:c3:d4:c9:
05:3e:e9:f3:21:90:b6:ab:62:a3:b6:83:ba:ea:2f:d1:7b:95:
e3:67:3c:45:21:5c:85:0c:48:df:24:7d:18:6b:8a:b7:3a:d0:
83:de:dd:b1:f5:6c:ca:f8:b5:06:d3:e9:98:d2:86:6c:61:92:
7d:5b:97:32:77:2c:f8:a7:1c:9d:c0:5b:ef:5c:49:0e:5c:75:
44:6a:f3:30:cd:f3:8d:36:4d:f9:29:2b:52:5f:df:50:4c:a6:
84:b4:7f:e8:eb:84:d0:c7:f6:68:64:0d:26:b3:f0:a0:89:98:
dd:3c:7a:5f:8e:eb:14:72:5b:3b:31:7d:b5:0e:20:78:4a:5e:
78:46:4a:65:7d:ec:54:09:31:9d:d1:9c:24:34:f6:9d:aa:1c:
51:7f:c2:97:bf:df:92:6e:94:c9:d5:be:c7:db:ee:c6:6a:c2:
69:08:75:38:19:6c:78:64:89:0a:6e:47:a9:11:56:46:b3:75:
95:69:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:39 2025 by rpki-client