Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json)
Hash identifier: srngzo/Khdo5LmfVrvd3gjgZ/1TkugQa5tB3IQkRC0Y=
Subject key identifier: 52:C9:29:E3:C3:ED:73:91:B3:0D:22:56:E6:7C:12:77:52:A1:97:64
Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Certificate serial: 05B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
Manifest number: 05AF
Signing time: Thu 30 Jan 2025 23:08:55 +0000
Manifest this update: Thu 30 Jan 2025 23:08:54 +0000
Manifest next update: Thu 06 Feb 2025 23:08:54 +0000
Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: V8lhCrV65czNvRBD0pvkQ5AukcDqBmLiEcXqvaTSt8E=)
2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: IJ+fkHbxBE1SHSjZ2ko97tJx/Im9hMimIC1imqln5xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1460 (0x5b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Validity
Not Before: Jan 30 23:08:54 2025 GMT
Not After : Feb 6 23:08:54 2025 GMT
Subject: CN=679c0687-7e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:c4:b3:fd:9b:61:37:7a:a0:93:0c:a6:de:
21:cb:75:17:dc:ab:c1:fd:2a:8e:fd:94:d1:96:16:
f3:b5:59:8d:75:75:1d:42:6b:ef:47:b4:07:bc:1a:
5f:40:f7:8e:3d:f6:95:fa:ad:18:82:01:ae:05:f8:
e3:74:ff:c7:a5:a6:60:ce:27:e8:9a:4d:67:a5:f7:
c3:2c:b9:66:b7:72:0b:bb:3e:d1:8d:fe:70:26:d2:
c0:5b:c3:fc:47:c7:f1:c3:00:32:9a:72:4d:9e:f7:
cf:d9:05:f0:d1:1c:9a:bc:a8:53:7e:96:f1:c1:1f:
2e:80:ef:df:7b:72:00:84:05:64:69:9d:a4:06:54:
13:92:ab:9f:b5:a6:47:c2:ec:98:54:8e:cf:74:1f:
fd:34:08:59:d7:a8:c9:22:0e:6b:a4:62:cd:3d:17:
30:ef:86:d5:3a:f7:94:08:18:8c:ae:4e:e7:09:6e:
06:9b:45:70:21:3f:ab:77:04:e8:36:92:55:f8:9c:
ea:10:84:66:f1:b1:e9:db:5d:78:31:4a:af:f9:14:
b3:9b:35:72:47:32:98:16:f0:12:39:32:22:88:4c:
78:a7:67:37:ba:d8:d1:a3:32:79:66:5a:20:ba:a9:
23:a8:9d:a5:26:37:69:c2:38:dc:9b:b6:99:df:a2:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C9:29:E3:C3:ED:73:91:B3:0D:22:56:E6:7C:12:77:52:A1:97:64
X509v3 Authority Key Identifier:
keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:df:70:eb:2a:c3:64:a4:d5:12:13:69:eb:e3:d1:81:63:c9:
b3:74:c5:35:bf:b0:e5:5b:49:32:95:a9:66:b0:40:b2:39:13:
ae:51:cd:a4:d8:c7:67:52:99:50:29:b6:68:66:f6:72:26:48:
9a:db:58:9e:e1:96:60:66:9c:3e:0f:78:62:73:78:26:cb:fa:
6d:b8:d3:ac:51:6b:cc:02:db:b7:20:98:b0:9f:2c:c3:7b:9f:
a3:9c:82:8c:d2:ed:cb:f8:0d:6c:1a:eb:94:47:81:31:fd:d1:
83:90:b9:dd:9d:a3:2d:12:63:54:7b:41:05:e9:3e:2a:04:6a:
e8:25:25:3a:5f:d3:3b:8e:74:9a:91:0e:9c:b0:a0:71:58:56:
47:ef:f4:77:e7:e5:c5:49:87:f5:a2:70:48:2c:9d:98:13:4b:
4d:ca:b4:e7:07:27:09:6d:cb:1a:e3:b0:a5:31:cd:ae:7a:36:
3f:39:cb:e9:75:eb:80:15:7d:b0:a5:fc:2f:30:7b:a4:15:b8:
73:ff:41:26:00:05:d2:f9:ea:61:4b:64:82:b6:f4:ca:bb:2c:
32:77:3c:ff:44:0b:0b:0a:f2:6a:92:a2:61:d0:38:7e:30:df:
06:8c:55:5f:e2:61:2d:9d:96:45:d8:a4:06:ab:4c:b0:a5:e4:
91:3c:4a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:47:36 2025 by rpki-client