Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
File: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft (raw, json)
Hash identifier: NGPwu2TJqPNqv9bCzxFjD4mrRBgYjUpGK9NZdWoPk2Q=
Subject key identifier: 69:5A:54:0F:F4:A1:CA:C7:CD:FE:5C:D7:12:C1:E6:15:A0:AB:E6:3C
Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C
Certificate issuer: /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C
Certificate serial: 064A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
Manifest number: 0644
Signing time: Thu 30 Jan 2025 22:29:31 +0000
Manifest this update: Thu 30 Jan 2025 22:29:30 +0000
Manifest next update: Thu 06 Feb 2025 22:29:30 +0000
Files and hashes: 1: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl (hash: 1tBOsBR3lM4FiyjwPx+SXveNEVROnN/S7ap3SZpOzCI=)
2: 154E7E02762211EBA80A6D61C4F9AE02.roa (hash: qkyN60ECu4BYWQ3TkIsHpS5OSWIDmixvU/RZxjOnAoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1610 (0x64a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C
Validity
Not Before: Jan 30 22:29:30 2025 GMT
Not After : Feb 6 22:29:30 2025 GMT
Subject: CN=679bfd4a-edd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:c8:98:af:0a:81:8c:99:db:a5:fa:99:d8:
17:49:94:d7:c5:de:19:72:bc:4f:7a:2f:1f:52:a0:
2a:30:44:0b:fa:ed:12:16:35:d6:d5:f5:5e:68:bc:
20:c2:32:73:1e:84:47:20:6b:a9:b2:2b:42:ff:b7:
af:4d:c1:9f:64:35:59:2a:33:42:58:ed:08:97:55:
45:7b:b7:15:25:9d:c6:7f:31:a9:8f:6d:23:47:a0:
42:4b:73:47:d2:e6:12:02:35:90:0b:04:03:24:79:
95:26:9f:c6:b7:b9:3b:fd:27:e4:9e:e1:35:bf:c3:
c7:fb:cd:1f:27:55:5f:61:2f:7c:cc:af:4b:2a:94:
7d:96:1b:0f:7b:50:0d:bb:dd:ec:80:e3:09:6e:9f:
bc:df:47:b5:ea:e7:b7:45:1b:c5:f1:e5:a4:2a:08:
72:29:a5:14:5a:74:04:c9:c4:bc:b9:5b:c0:52:b0:
46:b2:dd:ee:6e:7e:5c:7a:be:8c:7c:fd:26:c8:b4:
27:88:52:d6:a2:cf:97:06:ae:fc:bc:1d:17:f0:38:
a1:e9:b5:4f:94:93:cc:63:93:4c:c5:31:1b:1c:35:
49:99:49:3c:59:02:e3:c3:c8:79:12:75:ca:7f:ab:
48:eb:d4:04:f8:ff:b2:a3:98:49:eb:a7:26:17:fc:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5A:54:0F:F4:A1:CA:C7:CD:FE:5C:D7:12:C1:E6:15:A0:AB:E6:3C
X509v3 Authority Key Identifier:
keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ac:9a:aa:4a:5b:e8:30:12:39:03:ad:40:67:0d:b6:45:94:
18:c6:bf:a7:8f:22:d6:a7:62:ff:3d:91:b4:2a:e1:70:9a:f6:
4f:79:09:de:13:7e:76:7b:33:fd:c8:4f:35:63:d3:2b:75:ed:
94:1f:d3:7c:23:e1:97:bf:96:06:55:47:dd:93:b9:da:e5:c0:
a8:4d:27:e4:ff:ea:1d:45:24:59:54:68:8c:c9:75:78:5f:aa:
9a:2f:58:6b:31:d6:20:d0:94:b1:d0:e7:0f:35:7f:fb:1a:36:
7e:52:9b:ce:c3:9b:29:03:7b:d4:df:67:fe:51:86:98:32:a0:
21:12:80:71:1f:a6:ce:1b:ec:2b:8f:8f:d4:1a:dd:ed:cb:65:
2f:c2:bd:cc:92:60:b5:37:99:8b:93:0e:01:df:b7:e7:3f:4b:
39:ec:bb:f8:32:2a:f4:c1:04:2c:de:f1:6a:38:4a:bd:d3:b5:
f8:65:3e:67:c9:15:61:59:d3:cd:db:c1:d8:a2:d6:0d:88:47:
51:84:a7:b1:7e:64:f0:88:cb:02:a5:32:4b:a9:84:d2:5e:9f:
ac:5f:bc:39:55:38:5c:d8:1f:da:f1:f1:87:7c:c0:ab:ed:3f:
c3:d7:fa:af:4a:94:58:72:0b:49:f3:15:7f:d8:58:5c:96:5f:
8d:9a:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:22 2025 by rpki-client