Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json)
Hash identifier: Uyfp7MpFwYB79Ssr66fHIUujDDl0n177rRBujpeD96Q=
Subject key identifier: 94:ED:B5:37:64:2F:D2:61:1E:1C:4F:A7:96:72:56:FF:4E:51:D6:D1
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial: 255E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
Manifest number: 2549
Signing time: Fri 31 Jan 2025 15:45:08 +0000
Manifest this update: Fri 31 Jan 2025 15:45:08 +0000
Manifest next update: Fri 07 Feb 2025 15:45:08 +0000
Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: IkLLL8FFwBgDUrNjdCl19kqU+QvB4QwZaGzNKXPFmlo=)
2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: ZTjcZNGWNBFnqimSC0hZgDjcbOf3sFUClKajeqFLy/U=)
3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: sAmTypMf5/yjgtAyFRTnQXafX3UsjEyUxFVjaKwVwKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9566 (0x255e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Validity
Not Before: Jan 31 15:45:08 2025 GMT
Not After : Feb 7 15:45:08 2025 GMT
Subject: CN=679cf004-39fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:1b:55:06:5d:e3:49:99:20:5e:9d:08:b7:
0e:60:9f:0b:64:33:50:6d:3b:b3:03:19:70:ed:d3:
57:f9:22:c0:ee:53:e7:2e:d4:a4:22:92:99:6e:d9:
e2:f5:2d:56:0e:a1:e5:b8:7e:d5:9a:e8:f0:03:2e:
d3:5a:25:f9:0d:a2:35:21:e9:00:13:6b:8b:93:62:
49:a4:b1:71:7d:ae:17:f1:b7:f4:ce:3a:2c:37:3f:
9d:d4:04:56:31:ab:05:a8:09:e2:60:f5:4b:56:47:
b9:41:89:b5:c0:10:1b:3f:a8:c0:ee:72:ff:3b:f5:
8e:bb:8b:b4:2e:85:13:0a:f0:a3:50:96:03:2a:0e:
66:51:0a:2d:5f:8a:26:32:7b:fd:cf:c1:6d:01:f1:
8e:7f:d5:d0:35:8e:a6:a0:0a:17:85:8a:81:05:52:
40:2c:29:7a:2a:03:c3:db:d0:ea:9e:60:11:56:16:
6a:bc:86:f0:38:21:4f:25:a6:7e:ac:f0:ca:20:7c:
43:41:25:37:03:d3:e1:40:be:0b:32:97:75:97:b4:
71:0d:b2:4b:58:13:fc:c5:d5:3a:08:3c:c1:53:9a:
b5:41:35:cf:19:4d:e8:3d:60:a8:e3:11:bd:68:f2:
50:e8:29:99:93:28:64:3e:ca:be:cb:61:35:ec:f6:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:ED:B5:37:64:2F:D2:61:1E:1C:4F:A7:96:72:56:FF:4E:51:D6:D1
X509v3 Authority Key Identifier:
keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:77:41:e3:6f:af:bc:92:ee:8d:2b:e2:83:b8:5c:f5:39:5d:
6c:ea:61:1e:81:e0:35:db:60:5b:6a:0f:e1:a1:0b:07:be:36:
88:d8:50:ba:76:70:6c:73:26:88:5a:ff:8f:5a:5b:0a:7b:23:
d1:bc:7b:fb:1c:6e:f8:5e:a0:22:bf:62:a1:f0:39:5c:b1:31:
b7:43:8c:f8:66:21:2f:25:d2:e3:8f:f6:ec:0a:d5:c0:92:73:
dd:79:b8:b1:56:62:db:cf:d1:b7:b3:39:4e:86:66:90:b5:05:
a1:2c:4d:1b:f2:2f:cf:1b:48:c7:67:85:39:ef:7a:b4:31:46:
35:05:a3:e4:12:70:dc:65:35:73:f6:7d:0d:80:45:e4:a4:a4:
88:1f:1d:f3:5b:0c:db:b5:8e:3a:21:c0:c8:3c:9a:e1:65:31:
eb:65:bc:f2:22:cf:b9:dd:f4:ee:eb:fa:71:ba:ef:d4:cc:2e:
3b:72:30:71:d8:fb:3a:87:d7:d6:11:aa:d1:09:55:a7:9c:16:
5e:de:8a:4c:1b:c3:ce:70:93:79:d7:13:ba:e9:d9:c8:28:ad:
68:a5:5f:03:5f:56:9d:32:e6:e0:68:91:91:00:63:30:bc:09:
5e:73:74:bf:22:a2:b3:ec:4a:93:51:1b:b8:5f:5a:9f:19:f8:
b4:72:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:04 2025 by rpki-client