Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
File: E5bqlAlF_CBf8uPRsr4bkNcsxek.mft (raw, json)
Hash identifier: +EFfTPC/+rBkQMcshWpYQH/PS+69Wwj/TFcua6gqHaU=
Subject key identifier: 0B:C4:99:57:08:D8:F1:CB:9A:10:D5:4D:F6:37:DC:6C:61:56:99:C3
Authority key identifier: 13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9
Certificate issuer: /CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9
Certificate serial: 04C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
Manifest number: 04BE
Signing time: Thu 30 Jan 2025 23:57:00 +0000
Manifest this update: Thu 30 Jan 2025 23:57:00 +0000
Manifest next update: Thu 06 Feb 2025 23:57:00 +0000
Files and hashes: 1: E5bqlAlF_CBf8uPRsr4bkNcsxek.crl (hash: JgP9WcmLa1KH2BUPsfGQHdEsc8XL22oUyApBr9HzXGY=)
2: EB17A8C2152511ECAD055780C4F9AE02.roa (hash: 3Who1qUDm6eD8QDguJD4EaJb2KgGViSYhJ9baOpktjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222 (0x4c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9
Validity
Not Before: Jan 30 23:57:00 2025 GMT
Not After : Feb 6 23:57:00 2025 GMT
Subject: CN=679c11cc-08be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:31:a3:bb:3c:82:42:ec:5f:17:e8:5f:84:
30:26:2e:1d:fc:12:86:3a:44:57:bf:bb:d1:f5:6c:
1f:c9:ee:eb:f8:86:13:1d:c1:c1:7d:dc:02:ca:00:
d1:cd:d0:20:26:4d:85:cc:d2:ca:f4:88:cc:f7:cc:
1e:c0:e0:ec:08:25:f4:c1:32:af:79:2f:c6:a7:86:
65:4c:a0:df:31:96:39:12:fe:5c:8b:b8:7c:17:1b:
77:9b:2e:34:a8:37:e4:8d:f6:0e:c2:27:4a:f8:26:
4f:e5:6f:f2:48:99:6b:ed:54:17:0f:ba:cf:d2:cc:
9f:a1:d8:78:b9:ea:a2:78:12:b9:22:ea:48:e9:b8:
98:ab:67:0b:49:3d:93:4b:e8:6c:59:c1:d1:ce:29:
18:2f:aa:3f:23:88:8f:2c:a7:48:f5:77:cc:4f:f6:
04:b9:29:6d:3f:f9:0e:33:3c:48:25:64:fc:93:38:
c9:24:1a:43:3f:17:50:a7:6a:c3:a1:fd:3f:29:f7:
2c:2b:14:08:57:ad:33:a2:ba:41:d0:5d:40:6b:47:
f1:c1:98:a1:db:27:8a:bd:03:62:fc:0a:8b:97:37:
73:f1:d8:43:5b:7c:6a:d4:92:33:b5:81:4b:44:e4:
a6:49:d6:4b:b1:88:01:a5:0c:4a:ef:d6:51:24:77:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C4:99:57:08:D8:F1:CB:9A:10:D5:4D:F6:37:DC:6C:61:56:99:C3
X509v3 Authority Key Identifier:
keyid:13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:85:c3:ae:f9:99:4a:e2:9a:27:94:33:eb:e1:cf:12:bd:5f:
f4:2b:00:ff:a7:a9:58:05:f5:d5:2f:1b:32:b1:3c:09:55:46:
f6:36:05:86:c9:82:d5:b9:35:11:d3:98:aa:3b:59:34:b9:97:
db:be:36:3b:d4:97:3f:eb:02:9a:3e:0c:ce:34:ac:10:3f:58:
94:6e:08:72:49:18:ef:db:a9:2b:87:f7:ca:29:6b:9c:c3:88:
db:6c:dc:43:07:bb:28:1c:80:01:20:e7:0c:2c:db:46:e9:d9:
e5:9f:e4:94:87:12:e5:9c:33:a2:58:5f:a3:4d:86:cb:d7:4d:
3a:72:4c:ab:d9:fe:f7:d9:fa:bb:1b:0f:bc:70:bf:1b:59:b5:
71:50:b9:37:2d:ee:a1:b9:9f:40:02:d0:cc:71:ee:ee:d4:2e:
3b:4b:15:c7:fe:2a:b9:ab:1b:91:b3:95:b7:45:46:5b:62:f5:
b9:24:17:d3:39:71:8d:da:2f:e9:45:8b:d4:80:57:1a:a3:ec:
d1:b0:eb:55:75:36:cc:9e:05:66:d5:7b:c8:55:33:42:33:51:
c7:f4:8d:07:2d:3d:43:20:8e:4e:d2:ab:63:0e:cf:d1:01:40:
7f:32:4e:1d:d8:95:74:2d:ea:cd:ac:64:11:d9:56:a8:76:ef:
b0:5f:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:13 2025 by rpki-client