Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json)
Hash identifier: 2+W9wVseHUTAaNxmC4RKAsWQIDWypzy4CpU7ob9gZko=
Subject key identifier: 7C:9F:AA:5D:74:EE:65:C2:3D:D1:36:86:AE:FF:2A:16:A7:84:3F:3D
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
Manifest number: 0170
Signing time: Sat 29 Mar 2025 03:27:10 +0000
Manifest this update: Sat 29 Mar 2025 03:27:09 +0000
Manifest next update: Sat 05 Apr 2025 03:27:09 +0000
Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: 7zAnmqm1tJhznHfMLeoZRyfDUlUIS2EKnSaBvPhQwAc=)
2: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: jWM3qF3q7kpRiSXeFFNjIBgWbV7okecU61rSD6G1V5E=)
3: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: LSSqPw0m9vdH2z02yt+UwvMOawigT/2JykBCEQ4iiVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC1E9
Validity
Not Before: Mar 29 03:27:09 2025 GMT
Not After : Apr 5 03:27:09 2025 GMT
Subject: CN=67e7688d-65ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:30:a9:2f:a6:5b:54:86:50:65:7d:4d:01:
80:6e:76:05:19:f1:0e:e7:8d:be:c7:90:60:44:0c:
3b:bd:01:96:18:c2:4a:53:03:bf:00:4e:86:7f:3f:
0f:6e:cc:e1:5f:00:5a:01:5f:a7:f0:ca:79:56:72:
76:f1:fe:7f:bf:82:1a:8d:8d:18:bf:13:d4:7e:49:
f2:50:6b:cf:ad:49:89:39:b5:17:d7:f4:51:a4:74:
4e:8c:f0:52:34:cd:12:b4:a3:ab:c6:cd:77:09:39:
b4:b0:e5:fd:2f:a7:8b:25:7d:04:52:5e:40:94:3a:
c1:0e:a3:3a:31:af:ee:b2:88:ec:59:e4:c9:20:f9:
ca:70:d8:fb:8f:49:59:4a:3c:6c:35:6c:f2:52:94:
66:a5:ad:64:d4:4a:19:24:25:d7:e3:9d:b2:54:aa:
60:a8:a1:a1:33:e5:b7:bd:28:a3:dd:95:c0:8b:65:
6f:77:88:96:41:3d:5f:97:b3:60:76:52:77:d3:e6:
1e:91:4d:2e:98:57:8c:cf:0f:1a:76:a6:03:39:40:
8c:40:50:fc:df:24:18:53:b8:8f:38:1f:eb:ad:a0:
68:42:7e:17:27:62:a1:90:fd:6f:dd:02:68:16:b9:
3c:f4:54:ad:15:b7:b7:17:1b:a4:96:ce:23:f1:8b:
91:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:AA:5D:74:EE:65:C2:3D:D1:36:86:AE:FF:2A:16:A7:84:3F:3D
X509v3 Authority Key Identifier:
keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:78:97:46:69:6d:15:2e:6d:bd:bf:5f:9c:f4:e9:d3:62:
74:ee:6d:1d:da:4e:02:18:3f:0e:89:28:42:9c:0a:70:d1:a7:
c2:1d:4c:ca:7d:ff:c1:17:9e:c5:d2:6a:10:1c:cb:ca:bd:b5:
90:4a:12:1f:fc:af:a0:8c:34:33:fd:15:21:ca:bf:98:b3:a7:
06:68:5b:37:da:1e:69:a3:1d:f1:70:cc:e0:eb:0f:28:7d:4e:
8f:1e:84:c9:5d:d6:19:99:ad:1c:8a:dc:34:56:f1:36:c0:a0:
b6:d6:6e:41:27:fc:c9:db:b2:2d:8c:51:6e:8a:b1:19:74:b9:
73:cf:59:18:50:a7:8d:20:ab:1b:56:0b:fb:23:34:d5:ec:c4:
e5:23:64:88:18:16:88:5c:10:41:59:b8:44:05:25:b9:17:65:
01:9e:a9:18:28:90:d0:79:59:bf:9d:e1:a9:4f:6f:1f:0a:1d:
6c:49:cc:d8:57:85:7a:c2:b2:ba:8c:a5:48:b5:f1:35:b9:63:
2e:26:28:14:c0:95:62:4b:20:78:99:3d:30:b8:62:d6:29:04:
f8:dd:dd:91:16:53:3c:4b:1c:53:2d:7d:1a:90:fd:de:bd:41:
ca:89:ab:d8:57:f7:5a:a3:03:e6:d2:c0:21:d9:3a:f2:29:c7:
3f:8e:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:33:57 2025 by rpki-client