Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json)
Hash identifier: Q4F1vaHvmImyskFFe5H0fmPD+YwmyIunKwAhSn1Y5Eo=
Subject key identifier: A8:30:0B:9C:DF:1E:2C:98:9C:8A:EE:8E:13:B4:4B:C1:3E:45:F0:F9
Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
Manifest number: 024A
Signing time: Fri 31 Jan 2025 01:54:37 +0000
Manifest this update: Fri 31 Jan 2025 01:54:37 +0000
Manifest next update: Fri 07 Feb 2025 01:54:37 +0000
Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: 0kwkDPhL4sglXQ8heIZwOR7c5LRV2OP0htkJqu61/Dc=)
2: E757164C074511EDB229157DC4F9AE02.roa (hash: zhlSwv825k22uOhCsCYjl4S8dGLu2Xo+4xCX2EAGQwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Validity
Not Before: Jan 31 01:54:37 2025 GMT
Not After : Feb 7 01:54:37 2025 GMT
Subject: CN=679c2d5d-2ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:e1:59:3d:e1:7b:3d:73:b6:e9:a5:87:00:
a5:83:82:43:62:f6:62:b8:25:33:f6:fa:d3:3e:7a:
6c:49:4d:a8:36:86:1d:4b:bc:ce:4e:58:2c:6d:95:
a4:75:14:42:68:e3:99:a1:3d:80:7a:db:62:4f:2b:
d2:ff:0b:1d:5f:df:1c:f4:1f:dd:09:1a:6b:5d:06:
53:b5:41:1e:14:0c:d5:00:79:bb:5e:f1:4d:f5:25:
b1:0d:c7:e6:b3:94:93:b8:c7:01:45:ce:00:45:5f:
21:d9:53:83:3c:03:d6:e7:84:74:00:69:4e:cb:a2:
f0:dc:76:e5:6a:96:8c:c1:ef:77:eb:55:0d:b4:61:
52:1a:ee:58:d5:c0:2f:26:49:97:b2:73:93:6b:76:
f2:3a:98:5f:0b:a7:33:2b:48:0b:1d:53:9e:b1:94:
19:66:2a:a6:3c:1d:dc:e0:ab:39:89:b7:96:f4:ef:
bc:db:18:45:c2:5b:19:64:d1:ce:7d:93:64:36:15:
6a:0a:26:d3:11:aa:72:83:3e:19:ef:27:95:68:14:
ba:90:4e:dc:1b:03:c0:9c:9a:b8:2a:cb:73:ed:06:
b4:85:9b:59:54:45:4d:3e:c8:bc:ea:00:da:8a:07:
54:1e:67:03:23:69:4f:33:f3:c8:d1:4c:60:72:76:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:30:0B:9C:DF:1E:2C:98:9C:8A:EE:8E:13:B4:4B:C1:3E:45:F0:F9
X509v3 Authority Key Identifier:
keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ef:80:43:8f:a6:f0:56:c0:2e:75:17:46:ba:65:80:e7:10:
22:a6:c9:09:4e:d4:96:43:af:41:ed:42:38:11:20:8d:15:53:
b3:54:fd:23:d6:1f:69:e9:c9:ea:1d:91:82:7c:08:69:c6:3f:
77:36:bb:a1:bd:90:b0:b0:e6:27:2f:c2:83:de:bc:7a:a8:98:
ba:da:1f:3f:5f:ff:82:7b:e2:ef:e6:4f:a1:1d:3f:42:00:66:
07:d7:68:81:fa:8f:0a:ae:0a:fe:73:92:9b:db:48:55:3d:1d:
d1:a9:67:a7:56:e6:03:f0:d7:9c:71:37:79:1d:44:0f:0b:97:
14:62:b1:c2:cf:58:d9:42:e4:15:83:09:1b:e0:36:9a:bc:9b:
6a:ee:9a:cf:61:61:6b:79:70:a9:56:25:a8:6a:c9:aa:85:6e:
62:47:ad:7d:b1:31:49:f8:54:38:7c:7b:b9:06:92:46:63:4a:
7d:5d:2e:27:cd:ac:e4:33:0b:e4:f7:15:8f:5b:e7:c9:d5:81:
04:02:3a:ff:64:b7:86:ca:47:0f:25:22:9e:f4:f9:e9:05:c9:
bf:d0:cc:fd:f1:69:09:9e:93:27:d3:16:0c:f8:30:55:32:4a:
08:5e:08:07:80:51:f1:1a:13:f0:bf:7b:43:b3:9b:6b:aa:3b:
e2:33:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:34:50 2025 by rpki-client