Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json)
Hash identifier: 2gZGRcDwwRabzDWb5iJcX3RHyjAak88DIgk3r4ijpyw=
Subject key identifier: 72:3F:B3:7E:B6:66:6B:F8:AE:AA:1F:9E:18:05:0D:A1:C9:E4:41:CC
Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Certificate serial: 059E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
Manifest number: 059A
Signing time: Thu 30 Jan 2025 23:11:36 +0000
Manifest this update: Thu 30 Jan 2025 23:11:35 +0000
Manifest next update: Thu 06 Feb 2025 23:11:35 +0000
Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: 24xOYwCtKhi3cmDvSOubSx1hhm8ZbcnNxseFuyv0ye8=)
2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: GcFR8h/iT3o9szKNg9QC0T/IhGSts82BlmqYJleuoFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1438 (0x59e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Validity
Not Before: Jan 30 23:11:35 2025 GMT
Not After : Feb 6 23:11:35 2025 GMT
Subject: CN=679c0728-6bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:67:c4:4a:c9:74:42:0a:8c:19:4c:99:c5:
57:a2:4f:0f:17:e9:b3:a7:54:a5:e5:26:7c:b2:df:
03:ba:fd:fe:b8:31:aa:76:b5:c6:a3:7d:61:28:7b:
2d:81:ec:59:68:45:a7:f9:3e:e5:65:b5:45:2a:b3:
74:0e:5b:43:f0:9a:a4:ba:14:3f:3b:56:8f:23:f7:
78:ee:87:3e:b2:16:4f:84:5a:92:8c:85:ff:99:a7:
45:77:fd:8f:ee:d6:85:83:dd:aa:db:63:14:eb:2c:
d4:ea:2f:55:9d:2a:f7:6e:85:eb:da:30:2b:47:f1:
92:26:78:32:c0:c5:ac:be:ac:8f:22:c3:b2:88:f9:
ba:f3:2c:f0:7a:74:b9:34:bd:a8:6e:01:91:6d:4a:
c3:20:51:c6:76:de:c6:00:e2:24:7a:cc:2d:7f:07:
4e:3f:b5:29:a9:52:72:ff:26:78:1d:52:87:78:6a:
a1:ea:3f:51:c6:04:1f:4c:37:ef:03:d5:4f:ac:5d:
59:7f:78:03:db:87:d1:2d:c6:4b:91:5d:84:ac:97:
fd:38:06:f4:e5:7f:bf:59:67:9d:1c:72:a9:3a:b4:
49:c9:9d:8e:3f:14:82:29:5b:ff:bb:91:ae:a8:2c:
40:4e:37:b0:24:bd:6b:e8:37:7e:ef:6d:03:4b:14:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3F:B3:7E:B6:66:6B:F8:AE:AA:1F:9E:18:05:0D:A1:C9:E4:41:CC
X509v3 Authority Key Identifier:
keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:26:08:47:fc:5e:80:31:4f:7a:4e:59:b3:70:50:53:7f:62:
d4:af:02:34:f3:d7:1b:b5:40:56:e8:8d:c9:74:72:d7:b4:9d:
6b:d5:2e:cf:4d:94:9b:b5:aa:b3:06:c8:04:b4:5e:29:62:2f:
0c:da:83:8e:c3:9a:65:7b:7c:a9:42:34:88:c7:2c:19:fa:76:
d8:67:08:85:87:1b:40:cd:ba:3e:c1:7d:c8:ce:cd:88:3a:88:
b4:f9:3b:2e:e5:87:5c:3b:f4:3d:a0:26:5e:bf:f8:83:9d:dc:
6b:ce:2b:ed:bc:14:d3:b4:9a:a1:a3:de:9d:c5:16:77:24:f5:
bd:d9:18:2b:6f:74:56:b1:b7:6e:c0:f8:45:0a:fd:91:b9:7a:
01:3a:c4:6a:29:31:73:67:b6:65:86:4d:75:0d:ed:84:43:91:
38:dd:5a:08:f7:54:cf:8d:ee:20:69:1d:0a:c0:99:b7:19:f0:
f5:4e:f4:60:6b:c9:ea:3e:27:49:fa:64:b8:74:26:a7:e4:ec:
e5:6d:49:a1:0c:00:d0:d1:4e:95:41:ee:da:65:6b:2f:c8:8f:
c0:24:46:95:a2:06:b9:e7:37:4e:b9:60:25:b3:d3:f5:91:0d:
4a:62:c2:d0:d5:25:b2:1c:b4:ad:76:07:0d:51:c1:6d:f4:ca:
28:26:0a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:26 2025 by rpki-client