Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
File: M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json)
Hash identifier: WRDdlHCyHoiBQPx24t4m7p9Wg3N62atnL7aI9QHL+2M=
Subject key identifier: 93:42:B5:58:62:91:DE:FB:5F:44:C1:8E:DF:B6:A3:04:72:8E:7D:D5
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
Manifest number: 73
Signing time: Fri 31 Jan 2025 05:51:07 +0000
Manifest this update: Fri 31 Jan 2025 05:51:07 +0000
Manifest next update: Fri 07 Feb 2025 05:51:07 +0000
Files and hashes: 1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: xIoeA0a64SND40E35o5GkeTpdPpgGb+juhluhQSI3Yk=)
2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: ys7Tf3/LcQFVZYWL3i7WWzdqMmvmM++iU4ympKZhLhE=)
3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: tsoBMusAYtzjMEQt6uZAdSSMkNs5iOHuJdHdIDa6SSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Validity
Not Before: Jan 31 05:51:07 2025 GMT
Not After : Feb 7 05:51:07 2025 GMT
Subject: CN=679c64cb-8c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:78:7a:bc:15:53:88:d9:4f:f9:24:37:df:
d1:f3:4b:24:1a:65:e3:f7:1a:d5:cc:5e:d0:be:6c:
f4:33:8c:f5:0f:0d:a7:88:90:da:e9:ea:2a:83:b5:
84:1b:48:c1:be:cd:b8:f0:13:71:07:19:82:40:14:
c9:8b:5f:e1:48:e6:56:21:63:4c:08:d4:45:1c:43:
c2:a3:df:9e:9e:27:b9:2b:9e:7a:7f:43:f4:0a:0f:
2c:7d:0b:38:8f:1e:30:0e:a3:08:b3:ae:15:bc:ee:
47:18:40:b9:39:5d:39:47:a7:08:e5:a7:23:a8:db:
c4:e9:38:76:a3:01:3d:21:46:60:22:95:79:e3:60:
9e:7f:66:34:25:dd:7b:d5:d4:53:3d:75:03:fa:b0:
17:64:25:d9:40:ff:91:bf:eb:61:75:77:80:04:1b:
ef:f9:ef:6c:a4:b6:05:ce:95:6d:76:6f:04:a0:a3:
14:0f:76:d4:64:fd:97:9f:7d:39:75:dc:63:4d:ba:
17:62:e4:64:aa:23:a3:38:2f:a2:ae:26:d6:0e:ca:
90:5b:d3:40:03:4b:15:8c:a0:2c:61:68:a4:88:fe:
61:7f:0c:7c:fe:f7:84:28:60:e5:3d:68:3e:de:67:
74:d3:97:e5:d5:f0:6d:71:6b:38:7d:bd:8a:be:02:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:42:B5:58:62:91:DE:FB:5F:44:C1:8E:DF:B6:A3:04:72:8E:7D:D5
X509v3 Authority Key Identifier:
keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:2e:d4:86:f2:78:79:65:40:3e:9b:87:dc:77:5e:f8:28:0b:
7e:64:e5:b0:92:40:47:08:01:de:e4:f6:cb:41:8a:2a:9b:b3:
a4:c7:0a:96:26:6f:5c:3b:34:d2:38:35:1c:99:d1:e2:e9:ac:
25:ee:47:af:17:72:f2:c8:ef:8b:0c:3c:02:1c:cd:2c:d2:c4:
4e:7d:dc:32:59:a0:0f:46:d4:2e:fc:ea:02:84:1a:68:0b:8e:
46:c1:3d:22:1a:65:fe:d6:64:47:df:96:ac:1e:04:a0:8a:6f:
d7:26:70:de:5b:e2:f7:25:79:df:72:48:0f:d6:84:b8:86:21:
ea:d7:30:13:41:ce:11:0d:5e:6b:65:a5:4b:ed:4d:d6:ba:cf:
c2:73:33:cc:33:94:eb:05:f8:fc:69:08:78:46:27:d9:a9:01:
a2:02:d5:a5:2f:08:eb:ff:cc:e7:c2:6f:32:48:95:08:e1:68:
05:3d:bd:ff:7b:0e:43:80:55:cb:51:53:70:54:23:ee:43:23:
b9:8d:69:ae:30:da:7f:cc:04:63:65:a4:08:95:83:11:cc:0a:
00:8f:cd:a0:b3:12:c6:c4:7c:7f:b6:e0:35:00:42:86:73:8b:
9f:f9:b8:9f:a8:67:bf:b6:41:8d:4e:f8:8c:d3:f4:e5:1b:54:
5a:8c:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:22 2025 by rpki-client