Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
File: cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json)
Hash identifier: C2PAd9tRrPTZTdM4JsTdH8uLDdbSH9xZohEYfvskl4U=
Subject key identifier: 03:8C:ED:DF:3F:BB:F0:E8:45:CC:F2:67:72:42:AF:6B:75:72:21:0C
Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
Certificate issuer: /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
Manifest number: 017C
Signing time: Sat 29 Mar 2025 03:16:12 +0000
Manifest this update: Sat 29 Mar 2025 03:16:12 +0000
Manifest next update: Sat 05 Apr 2025 03:16:12 +0000
Files and hashes: 1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: 568CVjmmnppRS+ORTsLNg+uCszpNQ/orfbzrUyZMbS8=)
2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: gexTzIiKhgLcrcI1jyC1eZ1O4wMhCdNKof8sdrmuHDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FB6
Validity
Not Before: Mar 29 03:16:12 2025 GMT
Not After : Apr 5 03:16:12 2025 GMT
Subject: CN=67e765fc-79e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:c7:5f:aa:b2:e8:30:ba:04:0e:fb:b9:94:
ea:64:9b:08:26:f1:47:b8:46:e5:87:6b:01:03:b1:
a7:45:a2:06:df:3f:b6:b3:fb:40:4f:2d:99:97:9b:
75:a3:1f:2a:fe:34:db:41:ef:62:24:ef:8a:6d:fb:
83:29:8b:78:2f:b9:dc:b4:f0:e9:3b:bc:08:99:c1:
3c:76:98:e5:4d:69:04:a5:0a:a7:24:14:f1:a0:5d:
95:01:32:16:be:d8:c3:40:8c:3d:f9:50:15:3f:be:
8c:6a:9e:bd:ef:68:09:07:0b:67:9b:0a:de:dc:61:
d7:ed:f9:d2:cb:4e:89:d7:11:f0:dd:7a:58:77:df:
f4:63:8b:c9:ab:3d:6f:9f:89:0f:f2:de:ea:87:02:
8a:84:86:77:fa:be:d5:f4:c4:06:f8:cf:49:77:24:
1f:a2:27:95:49:15:75:03:ba:57:40:d6:97:11:ec:
dc:48:e7:9a:08:0f:83:d4:19:ca:41:77:83:3e:ab:
8c:72:7b:72:9e:d5:81:f0:fc:06:8a:c2:11:42:73:
00:83:ab:8d:d3:72:3f:7d:12:98:fd:5b:e9:52:0b:
f1:9c:b3:77:4e:3b:fa:f9:f2:c2:04:29:8a:9a:48:
b3:14:dd:45:cb:12:f8:da:c1:6b:3b:95:aa:28:c0:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8C:ED:DF:3F:BB:F0:E8:45:CC:F2:67:72:42:AF:6B:75:72:21:0C
X509v3 Authority Key Identifier:
keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:95:89:db:41:2a:a4:f4:5c:de:b3:a4:e1:89:56:e1:d1:cb:
56:8f:53:4f:38:08:cb:93:b1:2f:ca:2a:81:ee:2f:9b:e8:b3:
78:a6:66:00:c4:f2:68:fd:ae:06:09:f5:6a:8b:9b:07:54:84:
a7:37:38:b4:92:00:b5:44:ac:df:96:8f:96:0d:52:da:e5:de:
0d:de:c9:20:41:26:57:51:9d:11:01:c9:35:43:ab:ad:68:5d:
2d:7d:bf:08:fd:f4:f0:2e:5d:c9:60:bf:2d:34:96:4a:73:2a:
f3:81:ee:08:e6:32:54:fe:17:48:d9:82:98:49:8c:ef:03:b7:
a4:5b:e4:0e:5a:fb:3d:e1:28:5b:66:7a:74:fc:eb:71:19:06:
d4:c1:4d:99:83:57:bd:10:f3:bf:4f:f0:d7:9e:ec:7e:73:5b:
39:14:08:4e:09:74:7f:15:cb:a0:d4:b6:25:e5:16:bc:0e:23:
b3:94:b8:d1:5f:83:e8:e1:81:03:55:e5:7a:31:5c:d4:a6:5a:
9a:95:b5:3b:f7:11:82:5a:8a:15:b6:a7:1a:3b:ca:1f:55:39:
d8:d9:f2:08:a4:6c:8c:26:52:2d:f3:37:41:3e:6d:40:23:40:
03:eb:b3:99:e8:4b:8a:0a:8c:17:65:da:28:42:f7:d8:b4:de:
8c:51:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:34:15 2025 by rpki-client