Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json)
Hash identifier: 7Thk7ukIhs4sgr13mT3pbfiWU0fDOraACbVqZc1L8S4=
Subject key identifier: 10:08:6C:4C:82:5E:68:0B:08:9C:BF:94:A3:BA:62:6E:67:90:7E:AD
Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
Manifest number: 0121
Signing time: Fri 31 Jan 2025 03:51:40 +0000
Manifest this update: Fri 31 Jan 2025 03:51:39 +0000
Manifest next update: Fri 07 Feb 2025 03:51:39 +0000
Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: FcbljEUumrZOEMHhdIY4jsAlwF8cJn35Hl8rZ4dj1i0=)
2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Validity
Not Before: Jan 31 03:51:39 2025 GMT
Not After : Feb 7 03:51:39 2025 GMT
Subject: CN=679c48cb-6a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:46:52:45:24:ff:9b:41:0e:07:92:4f:65:
69:98:be:49:2a:c6:ce:2c:f6:44:53:96:01:28:0c:
4a:10:e3:d1:b2:f7:5b:d3:bc:ef:7c:9c:e0:35:2b:
de:a4:bb:f0:93:b1:a7:f5:96:21:f5:52:7a:52:3f:
b4:60:97:27:19:c1:00:94:64:47:32:cf:a2:c5:4b:
fc:d3:37:e9:33:50:90:c7:cf:d3:87:4a:fe:8e:a6:
0f:7c:c8:a8:28:ef:85:bb:a7:ab:da:37:50:fe:c2:
96:78:82:1e:c1:b6:94:b5:84:41:15:ec:b3:d7:6c:
55:bf:2f:7b:8d:a5:a3:f6:36:ce:f7:3f:86:57:46:
17:1a:98:22:34:f4:05:fe:e8:f8:0d:b4:35:60:1e:
8a:02:e0:e5:d8:ee:dd:c2:d8:2a:f9:2c:88:47:1c:
9f:16:bf:dc:b1:71:7d:7b:a8:57:a9:e4:07:20:a9:
a0:60:90:e6:90:e1:05:ca:0c:7a:7b:c8:c6:f9:8a:
80:b6:fc:e4:df:ec:29:66:d7:a5:4e:d8:56:7e:1f:
3a:85:fb:3c:eb:23:9a:fb:34:eb:90:ea:b3:9d:82:
85:4c:15:b9:cd:c9:67:60:28:43:44:b6:70:b1:b5:
d6:e3:82:82:89:68:b9:95:bd:28:59:60:01:86:cd:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:08:6C:4C:82:5E:68:0B:08:9C:BF:94:A3:BA:62:6E:67:90:7E:AD
X509v3 Authority Key Identifier:
keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0d:d4:18:f8:a5:98:10:cb:be:5a:4f:bc:1d:3c:d1:d3:a9:
3e:c0:56:cf:90:cb:07:1b:21:77:7a:19:9f:d8:86:bb:e2:ef:
f4:c1:d9:97:2e:90:3b:b7:67:67:33:6e:89:37:79:13:69:e4:
0f:02:d6:d6:ff:98:14:48:f9:69:55:4f:9e:d7:35:b7:e7:d9:
ba:92:b1:22:a2:c3:b6:24:4f:a6:bb:48:ea:20:e2:03:97:7b:
69:46:0a:a0:e4:c6:7a:9e:51:77:8e:01:9d:e9:94:32:87:8b:
d4:87:b4:5f:e3:44:45:28:c7:4b:b8:f0:27:a6:8a:c7:23:38:
c9:49:21:d8:70:4c:ff:d3:48:86:aa:de:80:8c:80:34:3c:15:
c3:31:df:f4:e4:eb:b4:4b:08:93:51:70:a3:cd:2c:6a:dc:f7:
7c:2e:77:cd:28:cb:9a:c0:1b:70:55:42:56:0d:27:8b:7e:2c:
23:39:4a:ac:22:f1:7e:7e:39:4e:79:0e:9b:38:0b:85:00:1e:
96:d4:55:66:6f:92:c9:c0:3d:7a:52:a5:16:a4:9e:36:6d:c4:
83:b5:f3:04:5b:ee:d6:99:97:05:42:64:de:de:8e:5f:59:00:
f1:5b:73:45:4c:f3:bc:f4:b4:ed:9e:22:b8:56:f1:5e:9d:29:
26:ee:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:20 2025 by rpki-client