Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json)
Hash identifier: YQ5eXf1J5ffvWJtsb+A5vP3VPwgxGzJ+7bDYy3jeAlw=
Subject key identifier: 78:FB:69:18:4C:29:B0:E3:0C:B5:2F:61:BA:CB:1E:CA:95:70:AA:E0
Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26
Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
Certificate serial: 0ACE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
Manifest number: 0ABE
Signing time: Thu 30 Jan 2025 19:37:16 +0000
Manifest this update: Thu 30 Jan 2025 19:37:15 +0000
Manifest next update: Thu 06 Feb 2025 19:37:15 +0000
Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: Yig++bMD//MWPPYon3tFHCiLkCPY2b3ciKwLvMsggFE=)
2: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: 2cXl/5f431sLYOEV9wOGgPMtNZFFmZ0haqZGiKbsEGE=)
3: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: UpMy5YvHwAoOrHu9/2m6YmhC+FBzuF02PJm6nhV30kU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2766 (0xace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
Validity
Not Before: Jan 30 19:37:15 2025 GMT
Not After : Feb 6 19:37:15 2025 GMT
Subject: CN=679bd4eb-b09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:b9:ec:1f:62:c9:ab:ba:a4:c5:74:64:6e:
1f:3b:de:43:e4:c8:7a:00:26:96:ad:c1:36:21:64:
80:ac:59:ef:82:12:65:6c:d0:b7:ae:76:a6:f1:df:
38:5b:cb:ad:4e:4c:0a:a0:ef:08:26:14:11:63:88:
8f:fc:59:ab:57:06:d5:a8:2c:eb:77:1c:79:ab:8f:
1e:0f:aa:7e:f6:04:6f:af:4c:bd:e2:a1:f3:d5:e7:
3e:f3:5c:3a:3e:1a:5d:b1:9e:b0:f8:01:e5:b2:f3:
7b:7e:42:62:ce:54:26:87:ed:97:d3:8a:b8:3f:20:
c8:f2:f3:08:83:81:36:62:31:e3:fd:fc:b8:82:83:
e1:2e:99:00:e9:ef:04:1a:8e:14:e0:5a:d2:a4:76:
05:f9:55:29:63:8a:f9:09:78:61:5e:82:69:ce:cf:
d7:81:ea:d2:0e:87:5e:d2:70:65:e6:26:b0:c9:64:
5f:b2:fa:47:3d:bb:41:1c:2f:07:cd:1e:2f:41:af:
55:24:ee:ae:88:0c:23:7f:4a:16:92:ab:35:63:9c:
ba:c5:6d:56:58:00:51:d3:65:c0:45:4f:8b:aa:6c:
66:ad:be:8d:d9:a4:a2:09:2d:78:2f:f3:bc:a7:95:
d0:bb:21:f5:70:f0:5a:71:c0:5f:c4:bc:ad:33:a8:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FB:69:18:4C:29:B0:E3:0C:B5:2F:61:BA:CB:1E:CA:95:70:AA:E0
X509v3 Authority Key Identifier:
keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:bf:d6:f9:f5:2a:42:5e:7e:c2:ec:10:bf:8f:2e:1d:a1:dd:
f0:bd:f2:a1:f0:37:41:b3:f1:36:2d:b9:d0:35:77:c7:3d:75:
15:e6:ce:60:c7:39:ca:df:3d:1b:b4:e0:1c:eb:71:47:2a:91:
82:2d:df:8e:18:19:16:bc:55:a3:9d:67:3d:1f:83:99:ac:d1:
56:62:10:75:61:2a:7f:bf:c4:22:e7:88:20:d9:04:bd:bf:4d:
19:fa:f1:24:7e:77:42:70:98:e8:38:23:33:9c:d4:64:31:a7:
dc:85:33:c6:5b:a5:f9:17:a5:f6:43:cd:b0:12:48:cf:a4:67:
d1:b0:ce:05:d5:63:60:fb:59:d7:33:65:af:39:5f:a5:84:08:
ae:17:4d:ab:8d:a9:bd:2e:ed:f2:dd:5b:03:00:06:b5:63:4f:
85:08:16:fd:fb:a6:51:3b:a4:1d:1e:ef:d1:d8:e9:9a:f8:af:
27:67:c7:43:32:68:6b:10:32:a7:eb:31:b0:3b:d0:f2:8d:31:
7c:a5:99:ff:5f:4d:02:a4:a9:bb:66:00:95:b2:4b:68:a8:cf:
66:66:96:49:e4:39:67:e6:c4:d8:3b:44:6f:68:76:a9:c4:c7:
9f:af:fa:51:45:00:c3:b6:a7:fd:e8:3a:94:41:81:f3:9e:0f:
0f:78:85:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:59 2025 by rpki-client