Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json)
Hash identifier: ouoheaqxJSjaw9zabP+BErMjiFy980r9J4ttS5zOy2U=
Subject key identifier: 5E:12:FE:69:0C:29:1E:80:33:39:C1:A4:66:6B:6E:79:BC:EA:F4:51
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial: 18AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
Manifest number: 187D
Signing time: Fri 31 Jan 2025 16:31:17 +0000
Manifest this update: Fri 31 Jan 2025 16:31:16 +0000
Manifest next update: Fri 07 Feb 2025 16:31:16 +0000
Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: Jy4Im12nCkSDBCSdadtJrQczWyGniOLk1poqrPjwq6Y=)
2: 4A4CE204D49A11EEAB1AF055C4F9AE02.roa (hash: EzHzSCDlBlC4veKW1Q3W/qzMLdRqyApJm4hY8qe4PS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6316 (0x18ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Validity
Not Before: Jan 31 16:31:16 2025 GMT
Not After : Feb 7 16:31:16 2025 GMT
Subject: CN=679cfad5-9301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:d6:bf:57:66:80:96:33:55:8a:51:5f:64:
44:06:76:9a:a9:fa:1b:bc:b1:58:c8:a3:a2:66:56:
b5:a2:a7:c9:60:2e:65:4b:f4:af:1a:b8:95:87:74:
ac:61:61:52:ea:be:b3:18:25:9b:91:74:a3:ec:fc:
08:e5:4f:da:27:35:3e:9d:a7:2c:77:9b:75:60:44:
8b:cf:79:5b:f5:62:94:d0:9c:c4:b1:96:05:84:33:
f6:55:66:dc:8f:30:92:b0:a8:ae:43:32:4d:ee:02:
ff:16:62:4e:2d:1d:cf:c9:6b:80:f3:7d:b3:71:7d:
09:1c:38:8b:20:c5:7b:62:4f:f2:a7:6e:e3:23:65:
cb:14:f8:f2:7d:a4:06:4f:6c:88:d6:97:da:30:ca:
99:63:70:86:76:25:6a:9a:0d:9e:3a:f6:92:5e:0c:
88:6b:92:4a:e7:cd:b1:4d:f1:25:97:83:af:8f:30:
46:22:e6:c4:26:39:df:b7:66:08:ac:72:6c:1b:be:
3f:ae:86:0b:b9:65:e9:f0:db:ab:46:65:fa:b8:bb:
12:9d:9d:3c:0f:30:65:69:9e:cf:40:5f:dc:d0:aa:
37:eb:86:ee:49:10:cf:73:2e:51:5e:7d:48:c7:21:
76:12:94:97:5f:7c:c2:dc:30:2f:cf:98:6f:13:5e:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:12:FE:69:0C:29:1E:80:33:39:C1:A4:66:6B:6E:79:BC:EA:F4:51
X509v3 Authority Key Identifier:
keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ad:06:77:96:32:35:1d:a7:00:a9:00:fc:0f:95:17:5e:3d:
fd:df:22:9b:e9:83:90:15:8f:98:f0:eb:87:35:d4:a6:a7:38:
87:01:0d:ba:8e:c2:0b:20:f3:3a:8b:bf:99:25:be:93:fc:55:
c3:61:f4:8f:a6:62:f3:46:c4:3b:61:88:63:ec:93:c0:6d:50:
7e:82:1e:a7:9e:da:98:b2:0f:d2:20:d1:fa:a5:77:1f:2e:c7:
51:a0:06:7d:02:72:88:fe:44:3f:c5:71:05:35:1e:0a:5d:3d:
09:35:97:8b:70:67:7d:e5:d8:6a:fc:b3:bc:ac:28:78:26:44:
2e:3c:62:fe:f5:76:d6:3e:01:b3:27:d7:9c:73:18:8f:f1:4a:
d0:01:b6:21:ff:97:0c:4d:e7:99:cf:af:36:c4:88:95:ef:8e:
06:9a:13:2d:f6:56:43:6d:10:9d:a3:c3:68:78:4e:9a:78:af:
8d:1c:ec:e2:15:c2:36:a6:ba:00:19:fb:5d:6e:a4:c6:bb:02:
71:0c:9e:de:89:fa:c2:7e:07:19:f0:ef:ee:02:fa:67:89:3e:
48:9f:7a:f6:50:b2:63:0c:24:ed:28:1d:73:e2:61:d5:cb:84:
3b:ed:84:70:0b:91:21:e4:f6:a3:da:e8:4d:72:57:6c:77:09:
02:5e:6c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:07:50 2025 by rpki-client