Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
File: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft (raw, json)
Hash identifier: 3Z3ywAU0h/m31ZzwaWhh0HeTSGMzgd56z9ysW7/PAe8=
Subject key identifier: CB:B8:08:90:98:42:8F:8C:E6:30:D2:DD:4B:E4:69:18:B7:82:2C:67
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
Manifest number: 0240
Signing time: Fri 31 Jan 2025 02:02:24 +0000
Manifest this update: Fri 31 Jan 2025 02:02:23 +0000
Manifest next update: Fri 07 Feb 2025 02:02:23 +0000
Files and hashes: 1: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl (hash: 8LE2pxSnXjye3XskjsM48ifZqM4r5FwFy+nQFB/YxE0=)
2: 60A2CF98817811EE9E9A211DC4F9AE02.roa (hash: OBulHvX2B6jsIGrCSAsyqZYvuyIkHgMKG5wNVNk2ul8=)
3: 195EA596AC8711EEAC4B2427C4F9AE02.roa (hash: hhO5y4e/DFpdPdaj49uvYHcFr1O6lkR5HUgMp+6rOns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Validity
Not Before: Jan 31 02:02:23 2025 GMT
Not After : Feb 7 02:02:23 2025 GMT
Subject: CN=679c2f2f-2796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:0f:f1:b2:df:41:89:23:17:fc:2d:a5:e0:
5b:11:57:74:b7:60:00:60:72:72:48:e2:c8:96:09:
b6:ef:d7:30:fb:92:65:2f:82:74:00:d5:07:c0:a4:
a6:11:03:0d:8c:fe:a2:f8:76:74:4b:18:49:3d:c7:
c1:60:7c:1b:f1:7b:e1:ab:bb:9a:a7:61:54:d7:9b:
f0:ef:52:15:26:ef:1b:3b:66:05:b9:2b:71:04:4e:
41:76:a9:d4:3f:d1:c8:ba:0d:e0:f5:30:47:d6:c5:
95:7d:c5:03:1a:14:24:2c:c2:b0:c0:f5:67:5e:64:
93:e7:67:a4:87:87:d8:79:38:06:07:5e:d6:b8:3d:
2a:ec:47:a1:31:bf:09:ed:32:7f:4b:cc:eb:1c:2d:
76:08:60:e9:68:90:1b:e3:90:7c:35:b4:6c:72:47:
ad:b5:e7:4b:72:7a:a2:1f:73:00:a7:37:df:f6:97:
77:33:c6:03:0e:45:0d:82:52:c4:1a:92:36:a8:c2:
e9:b2:51:d6:51:f7:ca:52:6a:ea:20:91:05:d4:f5:
3c:24:be:1e:dd:80:9f:6d:cb:9c:8e:46:47:03:5a:
44:7a:af:1b:8f:d0:68:aa:68:7c:2b:cf:02:a2:9d:
88:ef:9f:24:95:21:2f:51:5a:f0:71:04:3d:2b:de:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B8:08:90:98:42:8F:8C:E6:30:D2:DD:4B:E4:69:18:B7:82:2C:67
X509v3 Authority Key Identifier:
keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f1:9b:38:29:59:bc:9a:f8:f9:50:d2:74:16:1f:45:50:a2:
53:95:0a:2e:ad:61:8a:7b:d0:c2:fc:48:cc:5f:e6:5d:0d:e2:
65:d4:17:ff:6e:2c:79:74:53:2f:55:71:da:0c:a4:20:6d:76:
52:b3:5f:47:1b:58:94:c2:11:57:e6:e2:94:91:0f:dd:67:c9:
d5:31:d1:a6:6b:ab:7e:7f:6a:a5:30:36:ef:27:cd:69:21:05:
41:b9:95:13:bd:fb:b9:a7:c0:ac:df:84:14:0b:1c:c0:5d:b5:
05:98:4c:5e:c4:da:01:52:ca:d6:2f:72:24:9a:c7:95:5c:46:
b0:9a:6b:84:a2:21:43:79:9b:1a:cc:81:ae:2e:49:39:59:0a:
ca:85:3e:65:fc:66:56:03:01:b5:5b:7f:3e:13:d2:e7:66:4b:
fd:70:4d:e9:52:a5:dd:e2:40:bd:a5:15:39:f8:c6:34:c5:6c:
db:bc:ee:e6:df:12:67:f8:ac:26:2e:44:a5:75:ba:44:8e:f9:
81:cb:80:eb:20:6b:97:09:87:d8:e5:1a:41:f5:24:ba:01:92:
9f:62:00:1e:0e:51:71:68:c3:51:ee:1f:1b:48:11:73:b7:ca:
d9:b8:25:96:22:23:08:9f:8c:aa:43:3a:2d:55:1f:6b:3b:ec:
6c:9b:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:27 2025 by rpki-client