Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
File: A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json)
Hash identifier: o+PfoV9M/GYgZgpeVzsAOo3Zzks5gQQa+VPaMhHyrRE=
Subject key identifier: 2E:3F:D0:FA:32:5C:72:2C:67:98:AD:AA:A9:89:6B:FD:35:20:86:79
Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59
Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
Manifest number: 26
Signing time: Fri 31 Jan 2025 06:51:15 +0000
Manifest this update: Fri 31 Jan 2025 06:51:14 +0000
Manifest next update: Fri 07 Feb 2025 06:51:14 +0000
Files and hashes: 1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: h7mcH+5IAY3oxSPA7HlcOzZM8NSrcePP9VOR1aZuHZM=)
2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: wskyOCDE340iqc6+xbxJBMsRJGfe9vODWh/hz8Ga1HM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559
Validity
Not Before: Jan 31 06:51:14 2025 GMT
Not After : Feb 7 06:51:14 2025 GMT
Subject: CN=679c72e2-bab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:47:15:5e:06:66:97:b3:24:0f:1f:fd:6f:
31:09:83:92:12:dc:7e:db:a0:78:70:02:14:30:b5:
c5:3b:e8:f9:f4:d4:b8:72:d0:39:86:09:2b:41:a4:
33:1b:c8:2a:89:06:d4:ac:a4:bf:b0:81:2a:05:93:
dc:85:e2:62:d6:60:af:2c:4d:3d:1a:f2:ef:33:1e:
d4:52:ff:64:5f:db:94:de:1f:0b:d4:f3:ba:ce:b1:
cf:81:7c:24:c8:e7:25:3d:66:36:0c:1c:bc:6d:90:
2a:87:1b:6e:ab:cd:fd:40:48:cf:39:6b:55:6c:f8:
af:04:81:91:78:e6:4e:cc:a4:11:24:00:df:51:fa:
19:46:0c:05:59:e9:85:7f:23:6c:4d:58:39:be:10:
5e:7d:10:64:d9:8c:03:20:2c:fb:34:9d:47:be:60:
1a:6e:04:68:4f:31:e1:aa:11:99:65:8f:71:ac:4b:
da:8f:86:2a:55:90:c6:e9:2c:96:43:5b:87:3d:4a:
5d:8a:43:63:fe:72:af:4b:1d:c3:c8:f6:07:36:ac:
2a:a3:46:4a:ad:76:f0:69:00:c8:c5:d6:a3:ba:5b:
ef:74:69:fa:a3:e8:8a:df:00:f6:50:76:0c:d3:e3:
ef:27:c3:58:c1:e4:8d:1b:e8:6d:01:66:a5:b5:4a:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3F:D0:FA:32:5C:72:2C:67:98:AD:AA:A9:89:6B:FD:35:20:86:79
X509v3 Authority Key Identifier:
keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f9:0c:e3:60:33:fd:d4:bc:56:c7:71:09:99:f6:86:a5:60:
b0:c9:2d:25:15:87:2f:e7:68:a2:ab:9f:93:45:2c:e9:72:ba:
be:9d:34:73:4a:8c:df:19:8e:af:1d:9d:c5:a0:8c:1f:ed:20:
50:29:05:8e:fe:46:8d:5a:08:88:76:5e:c7:0a:5f:fd:a1:3c:
f2:0d:8f:f8:f2:2a:27:85:84:11:e9:07:3a:64:a6:2e:b2:5a:
60:54:2c:9d:15:4d:66:4b:e3:f0:7f:8e:64:8a:e2:29:7b:e6:
af:0f:2b:fc:db:93:0f:c2:ce:d0:97:19:91:72:0e:fc:59:8d:
d1:15:65:20:1d:b5:73:69:dc:5f:18:69:bf:47:13:3d:0b:e8:
68:66:c6:fd:c2:51:81:29:91:b9:e2:c1:ed:5d:44:44:12:71:
42:35:84:2c:60:54:26:23:41:6f:b0:4e:a4:dd:b7:ac:c1:53:
f3:4e:34:62:01:15:84:73:fd:ac:a5:2b:6e:e8:6c:ed:d7:f8:
49:a0:68:b3:8f:e0:7f:a1:68:e4:fd:bf:5a:c9:05:8d:d9:94:
0d:ce:2f:fa:99:ab:f9:b5:a0:e9:af:71:a7:2e:1e:87:62:60:
5e:b9:8b:31:74:eb:b1:71:da:59:1e:38:ce:05:d2:87:42:02:
3b:eb:a6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:28:24 2025 by rpki-client