Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File: bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier: 5Yv0wLdnTU0QvLog4+dsIqcp7oklZjxrkpvS95+GUGc=
Subject key identifier: E6:C4:B8:D4:7E:41:23:1C:2E:28:69:F1:92:F0:6B:70:E7:AE:D8:DE
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer: /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number: F5
Signing time: Fri 31 Jan 2025 04:24:33 +0000
Manifest this update: Fri 31 Jan 2025 04:24:32 +0000
Manifest next update: Fri 07 Feb 2025 04:24:32 +0000
Files and hashes: 1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: FMcS4gbxPwtT+49xxO0CjbKeIMtlkf7Hzqk4i2kMcTw=)
2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: TgP6m9OEjffqCLWh57vOCQCFFyLSkjZJc7ba7bn55rY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Validity
Not Before: Jan 31 04:24:32 2025 GMT
Not After : Feb 7 04:24:32 2025 GMT
Subject: CN=679c5081-11a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:4c:f8:96:c0:4e:7f:e4:a6:f6:f1:1a:fc:
93:50:88:32:9b:35:f1:16:f0:9c:fa:52:2a:db:35:
12:48:d6:4f:ed:2c:b9:8f:cb:e4:51:bf:35:7d:f2:
53:87:1c:b8:86:89:19:0b:e9:95:9b:94:0e:22:99:
44:d8:9a:ec:3b:42:8f:9f:95:84:5f:53:d7:08:2d:
f4:b9:da:8e:67:dc:26:43:c0:0c:ff:30:fb:77:82:
f9:37:19:1b:8b:c0:07:f1:18:59:ba:c0:82:89:56:
9b:a4:f2:e5:45:ea:69:1a:51:2f:06:47:f0:1f:b2:
18:86:b8:10:58:d6:8d:3c:74:7c:e4:b9:1a:d5:6d:
33:24:57:c0:cc:23:13:45:48:2b:28:66:6e:04:7b:
7a:4e:cf:24:58:1a:38:b8:aa:54:ca:5f:bc:06:5f:
ef:bb:4d:5a:4b:5f:5e:f5:5e:7f:24:28:b1:f6:5f:
79:4e:17:f7:2e:e6:7c:bc:ce:e9:96:b1:94:ae:06:
21:6b:e9:77:91:45:49:05:d9:60:24:0f:f6:2f:b5:
b5:2a:10:04:96:f7:c1:d8:1b:33:b0:fc:fc:55:e4:
b1:67:03:2b:89:fb:f0:37:74:f1:8c:74:38:65:5b:
b9:dd:db:e1:7a:a1:2d:41:dd:77:cd:51:78:0f:2d:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C4:B8:D4:7E:41:23:1C:2E:28:69:F1:92:F0:6B:70:E7:AE:D8:DE
X509v3 Authority Key Identifier:
keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:59:bc:22:82:70:31:c2:a4:1c:53:f1:06:d9:81:d3:ac:15:
b5:9a:52:f3:47:0b:6b:7f:3d:ac:cb:c7:a6:8d:ff:43:51:7f:
1f:76:38:f0:ef:a4:7f:60:70:30:b2:4c:ac:12:90:c3:2d:6a:
14:68:6a:71:f6:12:69:5c:6a:e3:90:e0:3b:b9:de:71:b8:7f:
f2:64:d5:57:9e:ff:08:c8:37:50:11:ac:eb:c8:a6:2a:fb:1d:
32:4b:90:0d:6e:05:c4:c5:08:e3:fe:5d:a4:38:62:63:94:48:
13:10:11:ec:b3:64:95:80:c4:31:2e:c2:a2:57:da:89:d7:33:
8b:20:e5:80:75:ee:f8:5a:90:4f:bf:d9:58:e4:e8:3d:52:44:
b3:65:15:c3:3f:4e:23:0d:fe:53:bd:6d:ac:c5:00:2e:5f:b7:
74:2c:ed:50:e6:75:36:59:48:1b:86:27:f0:20:18:32:c8:48:
fc:0a:c3:e9:33:5e:2f:c4:3f:23:f2:fe:e7:f5:74:bd:ca:aa:
46:a1:3b:d4:57:5f:57:b7:02:fe:e2:1a:66:2e:0f:bb:96:45:
59:5e:e6:b5:28:2d:50:df:e3:30:49:7f:c2:f1:19:2d:d0:68:
c9:c1:b4:eb:32:97:fc:bc:41:3f:a4:b0:a5:d0:18:05:69:a2:
52:b4:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:42 2025 by rpki-client