Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json)
Hash identifier: jtdBbeh3A6KEdOsfE0qnnHMmjvsYoa29g3YiiVEoiYg=
Subject key identifier: CE:EE:2A:A4:A0:1A:24:25:F9:54:6C:FA:9F:98:3E:F8:77:B2:5D:38
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial: 0AD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
Manifest number: 0AC5
Signing time: Thu 30 Jan 2025 19:31:51 +0000
Manifest this update: Thu 30 Jan 2025 19:31:50 +0000
Manifest next update: Thu 06 Feb 2025 19:31:50 +0000
Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: n7aBA0me42eSEFSHCP9D7+6Jx9hJkOwtdffhcFYFD5I=)
2: A2DE5B44AE1C11EAA46DAF7FC4F9AE02.roa (hash: wBezilbHgFlLqA1qqUMQVDVzvkJDksyuC7XhtfdBEgk=)
3: 3FC1B85E431811EA84E68121C4F9AE02.roa (hash: kRXthgEAoGC/b23UrIEWTh9+gf3/yFfF1cVAtff2rTg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2770 (0xad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Validity
Not Before: Jan 30 19:31:50 2025 GMT
Not After : Feb 6 19:31:50 2025 GMT
Subject: CN=679bd3a6-a72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:cb:f9:c6:db:e5:2e:33:03:d4:29:eb:16:
55:77:54:9d:60:22:9a:bf:11:4d:31:d1:e0:60:e9:
27:d6:f7:6c:1e:a1:6e:ef:f6:08:5a:c2:71:9e:ae:
05:ee:63:2c:72:a2:6d:a8:35:a0:69:7a:b6:38:de:
72:df:4c:6a:8b:ce:fa:1a:b1:99:e9:91:39:21:f1:
01:6d:d4:49:ba:cc:66:ed:1a:7f:56:de:5c:cb:4b:
e5:34:bb:ed:e7:54:01:8b:d4:b9:f2:0c:e6:ed:15:
47:e9:ed:87:6d:ed:00:1c:a8:26:29:4b:fc:c6:16:
27:73:39:34:c2:18:5c:a3:d9:ea:58:ac:43:8d:30:
5f:c6:17:78:08:f4:a6:b9:46:ac:b9:09:1e:c9:29:
7a:8f:8d:e0:0e:8f:e7:18:1b:2e:89:e7:eb:48:10:
c9:6c:a9:32:d9:e4:99:88:93:bf:ad:ee:2f:d2:1e:
93:db:fd:a8:3f:c1:0c:78:17:56:0e:5b:76:41:d7:
59:4c:7c:c2:a9:59:4c:3f:a9:ea:08:27:92:8c:ea:
54:a0:74:35:95:37:6f:f4:7d:aa:58:0e:6d:22:5b:
3d:45:30:dd:96:fb:0e:4e:3c:31:66:fa:d2:81:b0:
ed:45:c1:b5:66:87:ea:57:9a:69:79:3f:b3:fc:46:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EE:2A:A4:A0:1A:24:25:F9:54:6C:FA:9F:98:3E:F8:77:B2:5D:38
X509v3 Authority Key Identifier:
keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:5d:79:c6:e6:e0:c2:69:f2:17:5a:e6:cd:a3:87:44:cd:10:
17:9d:af:c2:c4:39:fc:dd:a4:53:49:a6:24:be:52:db:14:13:
21:7c:dd:c5:0a:54:88:94:7d:98:3e:83:4f:4b:48:a1:5d:fc:
86:bd:6e:8b:4e:ac:96:02:83:f6:4a:2b:ea:74:3b:d0:87:17:
d1:3a:a5:98:dd:b0:49:33:e5:02:aa:28:3e:e2:0a:0d:6f:5f:
36:83:fb:6c:3e:ff:d1:4e:19:44:88:41:43:bc:ee:36:15:2e:
e1:14:65:04:54:f3:41:4a:c1:67:a9:6d:7d:f2:12:4f:50:90:
ef:0b:e9:ca:a4:b8:e1:68:96:09:78:f3:33:3f:1f:d1:2a:c0:
3c:55:2a:df:f8:f0:93:ab:de:62:63:5d:95:a7:65:d3:c4:6d:
83:6a:38:9a:b8:c1:8f:57:89:0e:32:c8:62:7f:65:54:66:eb:
a8:c8:47:fb:23:f3:eb:d8:8a:f8:41:2e:69:74:b8:bb:60:11:
5d:19:d7:88:3c:2b:17:d3:0b:df:5f:28:e3:e5:64:40:0f:3a:
8b:17:85:0f:98:25:ae:b7:cd:60:36:a1:d6:15:e1:b3:84:69:
f8:ba:9b:c7:e6:c4:ea:e4:b7:e1:0f:1e:40:12:c5:74:be:18:
fa:d8:ba:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:20:56 2025 by rpki-client