Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/iw2zCXST33DLraAwru5RCu092O8.mft
File: iw2zCXST33DLraAwru5RCu092O8.mft (raw, json)
Hash identifier: RfCiYnYo0ai90IraChAmeLgbDo0CVFWfOChGgRZzBY8=
Subject key identifier: B6:DC:28:C9:5B:2A:F1:E3:77:C9:C3:24:E9:6B:4D:6B:15:E8:7C:AB
Authority key identifier: 8B:0D:B3:09:74:93:DF:70:CB:AD:A0:30:AE:EE:51:0A:ED:3D:D8:EF
Certificate issuer: /CN=A91C0443/serialNumber=8B0DB3097493DF70CBADA030AEEE510AED3DD8EF
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iw2zCXST33DLraAwru5RCu092O8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/iw2zCXST33DLraAwru5RCu092O8.mft
Manifest number: 13BB
Signing time: Wed 24 Jul 2024 17:19:36 +0000
Manifest this update: Wed 24 Jul 2024 17:19:36 +0000
Manifest next update: Wed 31 Jul 2024 17:19:36 +0000
Files and hashes: 1: iw2zCXST33DLraAwru5RCu092O8.crl (hash: VssPhbY5NpjkSy95+SwPf+c4GqJgCSqPW2as/2of4Dc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0443, serialNumber=8B0DB3097493DF70CBADA030AEEE510AED3DD8EF
Validity
Not Before: Jul 24 17:19:36 2024 GMT
Not After : Jul 31 17:19:36 2024 GMT
Subject: CN=66a137a8-9a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:1d:65:e6:3f:44:d9:c6:57:b2:31:9d:7a:
d1:c5:f6:1d:e1:e3:fe:f4:80:27:3f:8b:45:cb:06:
65:6e:38:be:a7:0a:2b:68:37:79:89:f0:83:d6:f0:
9f:88:0f:ed:79:b6:1c:fd:6c:f2:c6:81:0f:0e:a4:
43:46:77:c3:00:fe:22:25:5b:9c:d8:94:c3:cf:2d:
b1:e0:7a:15:4d:48:ee:8e:07:5e:f7:2a:ab:38:b0:
86:99:e7:57:80:15:75:12:be:ba:a4:f6:db:21:f5:
a9:59:62:40:8b:4f:3b:1e:88:36:83:4a:07:0c:ab:
61:51:70:ca:41:fb:14:90:a7:e8:00:13:69:0a:97:
2c:68:93:47:ef:d2:cb:b3:ab:5f:85:c7:0f:df:74:
82:01:60:4a:4d:df:b9:63:d0:4a:e6:d5:ec:ad:7b:
9e:70:2a:83:44:ff:8b:8d:09:5c:ee:81:06:f7:68:
72:c0:7b:f1:33:90:71:4e:71:12:92:f9:6d:64:4c:
c2:8c:b0:16:f9:8f:60:bb:35:d9:f0:89:bc:41:82:
1f:79:63:a5:f2:e0:ec:b6:d3:94:ce:02:82:fb:5a:
5c:95:74:21:40:20:50:d2:ef:ad:d9:a9:ad:15:88:
36:da:25:98:8a:2d:28:2e:29:37:ab:c5:5c:6f:c6:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:28:C9:5B:2A:F1:E3:77:C9:C3:24:E9:6B:4D:6B:15:E8:7C:AB
X509v3 Authority Key Identifier:
keyid:8B:0D:B3:09:74:93:DF:70:CB:AD:A0:30:AE:EE:51:0A:ED:3D:D8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/iw2zCXST33DLraAwru5RCu092O8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iw2zCXST33DLraAwru5RCu092O8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/iw2zCXST33DLraAwru5RCu092O8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:10:8a:91:fe:73:58:75:8e:8a:31:38:a3:ae:2d:11:0e:7b:
2a:ff:aa:a9:31:66:3b:a6:c1:00:e2:b8:3a:ab:f9:82:c2:87:
7c:b8:57:28:15:0a:4b:ab:0b:97:02:4e:34:cc:62:d2:37:40:
a5:e5:39:6f:f0:ff:84:50:d8:04:f2:ff:aa:f7:0f:17:eb:1d:
23:1a:3b:cf:ac:75:86:c6:94:dd:12:f8:0b:37:4b:42:48:4c:
4c:be:52:ce:25:bc:e9:d9:e1:b7:f4:3b:b1:70:b2:02:66:72:
1d:51:49:a5:42:e4:7b:cc:10:02:0f:3a:67:ae:ba:35:2e:88:
ec:50:a9:a5:14:a7:79:a6:95:4a:28:db:2d:0e:e0:aa:f0:e8:
02:09:6f:59:b0:2d:d6:7c:81:1c:c8:cf:c0:bc:38:45:f9:35:
90:c9:9f:b3:70:6c:87:eb:84:ea:2b:f1:24:7f:a6:e1:e7:ed:
b8:b5:58:8b:1f:b0:3d:35:5b:61:0d:14:31:a5:75:77:be:7d:
2d:79:07:95:05:cc:4d:9b:4a:72:92:ab:3d:cf:b9:14:0b:4b:
1e:db:cc:0f:a6:33:5c:b6:ce:05:3d:a7:5c:88:b1:5c:0d:36:
8f:8f:73:0f:f9:e3:6a:e2:c0:2a:fd:1b:9d:69:b9:de:0f:62:
95:a6:f0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:43 2025 by rpki-client