Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft
File: 5-kErSYVSeMdvVn0azB0xr-m2rI.mft (raw, json)
Hash identifier: UZkr/7c9CytuBxxiRyk05LSmmrZzQdQpRqc+e4dCuco=
Subject key identifier: F4:C0:82:1B:9F:59:28:82:B3:DF:CE:1D:19:A3:14:61:1E:9C:D3:85
Authority key identifier: E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2
Certificate issuer: /CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft
Manifest number: 0161
Signing time: Fri 31 Jan 2025 03:13:02 +0000
Manifest this update: Fri 31 Jan 2025 03:13:01 +0000
Manifest next update: Fri 07 Feb 2025 03:13:01 +0000
Files and hashes: 1: 5-kErSYVSeMdvVn0azB0xr-m2rI.crl (hash: m3AZMSNQ5zYF1KGojOK3BomwfAfuFORvrcaglso+ClM=)
2: 20BD79FAC17A11ED8F7A315FC4F9AE02.roa (hash: FtelNB9mh9rm/DPnO36fMVkGjRmD3W2CCA0ojbvk/CE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2
Validity
Not Before: Jan 31 03:13:01 2025 GMT
Not After : Feb 7 03:13:01 2025 GMT
Subject: CN=679c3fbe-dbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:e2:ac:14:ee:14:a2:21:82:50:05:40:cf:
3d:7d:1e:24:c7:bd:51:73:8d:fe:45:c2:c9:45:fa:
61:22:2c:06:d9:c7:35:a9:35:ee:02:c5:23:85:d8:
a1:16:5d:dc:6d:0c:8b:3d:e5:b9:8a:9d:a6:81:40:
ae:45:29:43:27:73:4f:62:05:d6:bc:a3:17:19:fe:
f1:74:be:cb:d0:1b:fd:02:15:75:57:23:68:5a:31:
4a:db:74:c3:c8:74:3f:70:af:aa:78:65:3c:85:02:
ce:5d:fa:46:a6:18:11:c8:c6:0a:8a:6e:b5:73:ff:
e7:b7:fd:f3:3c:85:cf:9f:53:e0:bd:21:9d:46:8b:
90:0d:3d:8f:96:34:cb:f4:a1:60:d2:b0:ca:cc:25:
5b:18:5f:10:de:6c:40:c7:b4:3b:d5:4e:38:98:8a:
47:98:90:32:76:93:72:42:7b:3a:47:09:f5:34:b4:
99:06:a0:20:a8:3a:a7:5f:54:f1:67:53:6f:64:8b:
bd:46:40:88:b2:63:44:b3:2e:ec:ff:63:e4:49:84:
72:5a:75:18:40:ed:ae:1e:58:0c:4d:19:5e:5f:d3:
24:4c:7c:5f:d3:aa:8c:70:fa:f1:a2:b4:93:9d:39:
e4:25:29:50:41:e0:be:81:da:6f:e1:35:7d:81:c4:
5c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C0:82:1B:9F:59:28:82:B3:DF:CE:1D:19:A3:14:61:1E:9C:D3:85
X509v3 Authority Key Identifier:
keyid:E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9c:fc:52:65:9b:25:0e:7a:a2:a7:0a:85:59:e9:16:d9:17:
29:eb:38:ce:92:b7:60:03:e1:83:27:d4:6e:3e:c7:2e:bd:8e:
bc:fc:0b:3f:fe:38:48:87:3d:66:70:a8:d6:4e:a1:54:0d:3c:
59:38:ee:95:de:b5:f9:69:0b:17:d7:cf:f3:f7:aa:e9:b0:25:
74:a0:b8:59:2f:4f:98:81:48:24:71:ea:70:23:b8:49:27:01:
27:36:37:96:7c:78:69:56:01:95:b3:f7:40:29:c1:c4:7a:57:
56:81:8c:7e:c3:20:1a:5f:d0:bb:0e:aa:8e:5d:a3:b1:c3:22:
22:73:60:08:c3:53:a3:7a:55:51:ab:b0:02:55:1c:3a:4e:66:
f2:c1:b0:df:1d:aa:ca:c3:f2:83:7b:84:58:1a:18:d9:13:74:
b0:f6:28:bf:84:c5:aa:b0:8c:d3:ca:49:14:3d:18:7c:40:7d:
2d:36:ea:45:7a:4b:11:12:aa:d9:01:ab:73:22:a7:a1:48:d5:
33:7e:a9:34:23:19:17:70:f0:1b:33:e0:61:29:1f:b0:9d:72:
15:68:15:d5:ef:4f:c3:d7:15:11:0b:f9:16:0f:f0:55:90:ba:
f7:53:24:93:fd:fc:3b:8f:dc:d2:3d:4e:36:90:c5:0a:c5:af:
ed:ae:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:25 2025 by rpki-client