Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json)
Hash identifier: c6IWcaTAZy7d/6zSFD9hfVXajW77n5WY4acKGNiODiY=
Subject key identifier: 95:00:04:2F:B7:E0:79:C5:26:51:8E:4B:3D:9F:92:4E:A3:61:23:40
Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
Manifest number: 5E
Signing time: Fri 31 Jan 2025 06:06:03 +0000
Manifest this update: Fri 31 Jan 2025 06:06:03 +0000
Manifest next update: Fri 07 Feb 2025 06:06:03 +0000
Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: CEMT4Z6zt5aLYLzt8sfPQ/EGGJL6rc5GwpY+/spB/XU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Validity
Not Before: Jan 31 06:06:03 2025 GMT
Not After : Feb 7 06:06:03 2025 GMT
Subject: CN=679c684b-884f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:ac:47:28:69:39:98:1d:c3:00:66:9a:19:
a0:ed:38:de:51:b2:40:e0:0d:c3:56:66:4c:65:a6:
ed:dd:9c:99:d6:a6:cf:6a:bc:ff:36:6d:6c:db:60:
26:d8:9a:d5:53:a7:88:f5:40:d5:45:e8:74:d9:f0:
c6:d0:f4:e6:58:33:d1:63:8c:1d:d2:f3:61:4a:44:
17:85:44:80:4c:64:ba:86:85:4e:04:5e:e2:77:1a:
28:90:ce:ce:17:b9:22:02:01:88:24:c2:61:37:2b:
59:24:dc:73:59:c1:52:2f:8a:0f:46:69:66:df:92:
2b:3a:6d:da:aa:13:4e:a8:04:f4:04:bc:86:b8:78:
e6:5d:a3:3a:7a:88:33:a2:13:c6:86:cf:6f:2b:cf:
05:eb:e3:17:f1:c1:59:ef:38:c8:f7:42:13:8b:ca:
30:4b:9a:b7:51:73:ba:d0:2e:11:f5:f0:d0:5f:4b:
49:92:aa:0c:b0:96:8e:08:2c:56:98:b3:74:69:0d:
8a:22:41:0f:f3:62:b2:41:d6:e6:28:68:72:4a:de:
87:92:07:d3:c8:5c:5a:bc:2f:79:7a:46:b9:4c:fd:
c4:3b:c5:16:b2:7e:8d:d4:e1:e7:f5:ea:34:27:83:
d7:cc:60:c3:25:f9:8f:c5:c1:54:a9:b0:01:bb:b9:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:00:04:2F:B7:E0:79:C5:26:51:8E:4B:3D:9F:92:4E:A3:61:23:40
X509v3 Authority Key Identifier:
keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4b:f8:da:c4:8c:81:7a:0c:b8:12:4c:c5:ab:64:21:8c:b7:
4e:d1:93:94:77:c1:18:1a:32:24:e2:1e:84:0b:c4:5b:e7:cc:
97:f6:c6:ad:ca:86:44:b2:33:02:f3:55:06:14:1f:55:91:48:
21:64:68:56:09:2c:c4:c6:e9:49:bc:46:dd:0e:13:b1:8c:e8:
b4:70:fb:ce:99:aa:65:58:5d:a9:16:7e:bb:3a:87:ed:46:73:
42:79:17:13:eb:b6:99:ba:59:45:b5:f5:4d:84:8a:5d:68:69:
44:dd:ae:5e:8c:ba:69:35:59:56:09:8f:59:0d:49:2a:fe:03:
2a:06:fe:10:b8:3e:09:47:70:92:ca:16:7f:3d:c9:8f:c1:4a:
88:da:b3:9b:7e:17:33:31:21:36:49:e2:c8:df:3b:8c:6c:eb:
0b:e5:c7:05:9e:65:e5:42:14:05:e8:ce:4f:f6:a1:ad:70:4b:
ad:60:6d:31:ed:02:6c:f3:eb:a8:b4:e4:67:0f:3d:0a:c2:4e:
b9:08:9f:23:73:36:b0:75:a6:42:54:58:fa:83:09:33:99:b5:
8a:8d:8f:a2:fb:19:f7:18:76:9d:4d:99:b8:53:9d:88:8c:29:
18:6e:d0:da:fc:22:1a:45:0d:80:cf:71:0c:0d:fc:64:5a:eb:
d5:38:cb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:03 2025 by rpki-client