Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json)
Hash identifier: EBoTajE0a1X0xTJs4uugVSswvDBvwL9Aw1HRXOYHOyM=
Subject key identifier: F9:47:9D:52:9F:6C:18:22:BB:66:6F:3F:12:41:07:80:70:5B:BA:68
Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39
Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439
Certificate serial: 346E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
Manifest number: 345A
Signing time: Fri 31 Jan 2025 14:59:25 +0000
Manifest this update: Fri 31 Jan 2025 14:59:24 +0000
Manifest next update: Fri 07 Feb 2025 14:59:24 +0000
Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: OVMx3ML1SzvWKC3N5xpbO6ECqFSK/92IUTZ73d3i7GA=)
2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: HW9R1Ep56SryGIz4W6P5CqXSgSxlXz4KavtGaF387a4=)
3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: AqcTvl3JE8iQmp2mHhzhnxH+2xnTnNkhAQ8gJbtZg+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13422 (0x346e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439
Validity
Not Before: Jan 31 14:59:24 2025 GMT
Not After : Feb 7 14:59:24 2025 GMT
Subject: CN=679ce54c-638b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:91:11:7f:df:c1:9f:ad:cb:00:ba:ef:85:
f5:bf:21:24:b9:8f:ad:30:09:60:4b:6f:6b:90:05:
62:ad:a8:37:e5:ae:ea:bc:aa:7e:13:71:cd:f6:45:
12:f4:24:35:83:2f:e2:f4:2f:69:4a:3b:6a:e5:3a:
8f:36:6f:d0:43:4a:bc:50:7c:d2:b5:91:7e:a5:32:
22:18:b0:8c:69:51:13:39:93:5a:d0:02:90:fc:97:
fd:64:8b:80:a5:58:ed:4a:fd:4f:65:8d:bb:34:f4:
d9:98:f1:a1:30:ea:bc:0b:03:28:e8:31:ed:d6:6c:
90:44:27:09:6b:af:0d:2b:e5:bf:5e:77:9f:83:bd:
e2:75:ac:71:47:a7:17:02:0e:83:01:11:01:32:aa:
49:3f:59:24:9a:b6:9a:0e:a8:71:3f:1c:65:a8:c2:
8e:c1:8b:0e:5d:d9:b7:f9:80:85:34:b2:e0:28:88:
47:cc:d2:a2:01:01:c5:c7:0b:18:fb:17:cd:35:f1:
f0:6b:f0:7c:f4:7e:4d:33:f0:c5:59:84:1b:68:a7:
5e:36:e4:60:c9:9f:48:0d:52:8c:ec:69:91:6c:22:
44:4f:7a:6e:ae:e0:e4:a2:0e:af:fc:75:c5:0f:be:
e8:8b:ca:90:23:2a:e4:59:0d:a0:45:3e:93:a8:06:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:47:9D:52:9F:6C:18:22:BB:66:6F:3F:12:41:07:80:70:5B:BA:68
X509v3 Authority Key Identifier:
keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:69:bb:15:ca:72:e2:6f:93:0b:cd:4f:75:df:02:f0:9f:c8:
8d:12:30:13:c0:2f:25:46:c5:f1:83:eb:01:bd:67:f7:d1:4a:
98:a7:de:34:bb:dc:08:41:3c:44:32:c6:f7:1e:a2:91:3a:ca:
d4:1a:c1:57:1d:09:56:8f:7a:91:59:f9:ef:02:52:e9:53:1d:
7d:a1:58:dc:79:db:25:90:61:d5:04:27:96:2d:05:9c:76:3e:
ae:1a:c3:1b:fb:88:c3:36:15:93:8d:f9:8c:fb:d4:d9:b2:a0:
06:62:08:90:4f:15:17:70:d7:85:1e:74:64:50:76:c9:b2:b4:
53:41:ce:51:e2:49:4a:01:0b:ed:04:f9:17:d0:49:72:19:06:
35:8a:78:dd:47:fb:b5:a6:ef:ea:4b:39:ee:ee:e3:96:71:e2:
f4:0b:1c:7d:a3:a0:ac:0f:00:07:84:37:a5:bf:86:1c:cc:c0:
5d:23:ba:63:31:06:1c:f2:b6:00:1d:4e:9f:99:1d:ba:49:33:
9a:87:42:d6:a1:9f:ee:03:2d:7d:e5:86:c1:64:3d:d4:dd:59:
0b:72:43:45:a2:67:57:bb:ec:ef:1f:01:b8:54:b4:a3:7c:b7:
f5:fb:50:36:31:53:82:17:5e:0b:1d:33:4a:4f:a5:68:79:71:
44:4a:50:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:19 2025 by rpki-client