Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json)
Hash identifier: oalGFTTsorBg0lm4rDdZLqkoZ7PXVAtRl1SBa1wAs+g=
Subject key identifier: 1B:8A:2F:F9:E3:C5:9B:2B:25:73:7D:82:9D:6D:08:DA:0D:84:E9:0D
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial: 02ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
Manifest number: 02E8
Signing time: Sat 29 Mar 2025 01:35:26 +0000
Manifest this update: Sat 29 Mar 2025 01:35:26 +0000
Manifest next update: Sat 05 Apr 2025 01:35:26 +0000
Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: cc+skHtGlJzGLpZGQ/QfeGUuDAb2rjsWqLpzZ5DEhR8=)
2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: P0qEB44hIqjtgoxJbWTuafMgiRenfg8d6UvJuS/K3BM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911580A
Validity
Not Before: Mar 29 01:35:26 2025 GMT
Not After : Apr 5 01:35:26 2025 GMT
Subject: CN=67e74e5e-54bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:a1:91:f2:b8:85:03:3d:49:83:2e:ea:96:
49:65:d6:5d:5c:da:93:a9:0d:30:af:c1:7d:e0:33:
b0:2b:a8:14:db:39:e4:32:c3:65:9c:3b:76:e1:0d:
16:04:5d:c4:fc:46:70:5e:c8:90:92:a7:95:95:fd:
94:26:22:f7:a2:20:bd:03:af:62:bf:96:4f:86:21:
d2:28:45:58:85:c0:f1:33:77:c1:c1:d5:34:46:1c:
41:86:48:25:cd:a7:fc:55:f5:31:32:33:c9:ff:f7:
af:b8:bf:39:f9:b7:e0:dc:b1:a7:80:de:03:24:f0:
53:e8:25:82:ed:19:75:94:58:45:c5:1c:aa:b3:2f:
d0:70:4d:54:ea:28:c3:63:fe:ed:ec:6e:ad:53:35:
c2:52:aa:37:13:bf:9f:71:4c:c0:64:a2:6d:c2:46:
6a:57:d8:95:a6:3e:da:53:cd:ad:41:1e:70:85:15:
54:12:dc:1c:f0:3f:ff:f2:43:24:09:1c:61:85:a1:
70:48:bd:52:14:5a:d0:30:29:79:ef:b3:1c:ae:4a:
5a:c8:81:1c:e8:ac:22:ea:b4:73:d3:42:6d:c0:51:
7a:43:b9:f2:a9:10:be:4f:e7:51:90:85:69:f6:20:
4c:d5:a7:f7:4c:93:a5:f9:24:cd:ef:bd:27:c5:4d:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8A:2F:F9:E3:C5:9B:2B:25:73:7D:82:9D:6D:08:DA:0D:84:E9:0D
X509v3 Authority Key Identifier:
keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:16:66:3d:9d:c7:1c:ef:60:67:45:56:7d:09:19:58:c3:21:
7b:5a:d8:42:e2:32:eb:cf:04:9b:d8:04:f6:10:f0:75:2f:b1:
58:17:29:c4:eb:5c:59:74:20:a6:6c:d9:18:0f:51:48:cb:d7:
6f:5d:9a:23:0b:e6:dc:8b:e5:bc:58:62:11:de:95:aa:ca:3e:
66:cc:f9:c6:b4:e5:97:eb:99:e9:e9:20:49:df:79:2d:a5:4c:
e4:08:7f:8d:51:d7:e3:b5:c4:a6:8a:57:cd:3d:b4:63:b7:a2:
7e:c4:14:d9:f5:dd:ba:eb:ca:08:14:e6:ce:b3:7b:3d:4a:39:
e5:c7:8d:4d:de:06:70:52:c4:d7:7e:9a:f6:8b:17:0d:55:37:
6b:cb:be:df:c4:44:7f:cb:ec:bd:79:c8:57:75:5a:f7:50:1f:
d5:21:63:31:2f:00:a4:29:1e:8b:ac:6e:56:63:b1:8c:3e:40:
18:d4:4f:77:9e:88:99:34:c7:7d:e4:07:12:15:3e:cf:e0:81:
16:05:96:47:99:33:c6:65:ac:a9:79:67:a9:de:46:f1:5f:8d:
95:b6:f6:4c:77:53:db:41:65:16:31:b1:de:d6:9c:28:20:b8:
ba:db:08:60:2f:29:04:7a:a3:ae:7f:80:4b:0a:bc:06:6e:9f:
47:89:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:03:28 2025 by rpki-client