Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
File: 55ST8wo-6fDuQFIv8Z1oXIBium4.mft (raw, json)
Hash identifier: GUYrcyKloB7GYxDLdPndcblbHOZ2m2HCiy6WjOtGF/k=
Subject key identifier: 0D:35:A8:E7:00:C6:0D:17:0C:10:FF:A6:DA:E9:23:99:22:B5:F4:CD
Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E
Certificate issuer: /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
Manifest number: E4
Signing time: Fri 31 Jan 2025 04:35:19 +0000
Manifest this update: Fri 31 Jan 2025 04:35:18 +0000
Manifest next update: Fri 07 Feb 2025 04:35:18 +0000
Files and hashes: 1: 55ST8wo-6fDuQFIv8Z1oXIBium4.crl (hash: jJkqe2HHeyourS6Iky2AkUbjq3UsNc1dUpogEIfy7qc=)
2: 54692EB02FB111EFAD1C6322C4F9AE02.roa (hash: htvjEjCXOkW/zLBD0gHg0KDfRWwqB/ypPFNwonZP/5s=)
3: 53F6AEC62FB111EFAD1C6322C4F9AE02.roa (hash: l3Zbp44EWmuhuGkMyVWrkx+zx/tnGVkejRQYBzbmTB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
Validity
Not Before: Jan 31 04:35:18 2025 GMT
Not After : Feb 7 04:35:18 2025 GMT
Subject: CN=679c5307-d67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:38:45:47:b7:5a:c9:d2:2e:51:18:69:93:
e9:82:ab:f1:7c:a0:f4:90:21:f5:f3:df:ca:9c:9c:
24:67:dd:53:d3:06:cc:87:00:a3:14:a7:ef:9e:89:
d7:0d:b0:06:66:65:66:90:11:3e:f9:a4:9f:7c:d5:
32:02:22:86:17:08:71:18:2a:58:d3:0b:6a:63:8a:
91:3c:0b:13:78:9f:0f:8b:be:31:23:3d:e9:40:ee:
3e:7b:5a:fe:35:f5:e2:2c:c4:63:1c:ef:c7:45:7f:
b7:9f:10:fc:5b:33:e5:3b:ae:51:0b:81:dc:a0:c4:
82:ae:b7:2c:54:8e:bb:a5:36:9b:68:a9:d8:d6:45:
58:de:02:8f:62:09:f8:89:48:2b:70:f3:ac:b2:b4:
ef:c0:2b:46:d8:26:fd:ce:0f:80:c9:1e:62:69:31:
99:f0:4d:31:86:c5:1a:3b:08:96:1d:43:79:15:a8:
14:14:b6:4b:bb:30:56:27:a7:c2:4d:7f:4c:f3:fa:
c1:cd:f1:1b:b8:07:f6:e2:24:6a:d7:2d:c9:12:49:
f1:c0:ec:42:f7:b6:e5:7e:31:40:6a:0f:a5:a0:7b:
75:a1:ad:93:82:a8:1b:22:e6:22:3e:1e:55:7f:45:
18:88:53:bb:4c:a8:d3:f5:ae:d7:73:33:9a:e0:70:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:A8:E7:00:C6:0D:17:0C:10:FF:A6:DA:E9:23:99:22:B5:F4:CD
X509v3 Authority Key Identifier:
keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:11:7b:45:26:a4:4f:1b:6d:76:e5:fc:73:e0:66:b9:ac:3d:
a1:9b:3d:3e:b1:af:86:93:c5:f8:e3:bd:72:17:48:b5:5a:b9:
19:47:34:4a:f7:af:c4:23:7e:0f:19:41:5f:ae:87:00:71:40:
22:e0:fc:c3:a2:8f:50:25:8b:4e:9a:90:fa:b3:fa:7f:01:cf:
ee:51:a0:b3:0e:d7:d7:ca:30:70:a4:36:99:50:e7:6f:6d:77:
0d:0c:52:0f:97:22:2c:10:e9:7f:5d:19:72:81:80:1d:be:dd:
35:d9:17:62:90:e5:32:43:90:98:64:b5:c9:70:c1:d6:a4:3b:
b4:b7:ca:73:37:c5:ea:c0:8e:3d:bc:97:6d:c9:60:1f:bb:2e:
a8:0a:89:e1:dd:e0:97:ea:bc:f6:71:a4:f5:5e:0a:da:8f:49:
3b:8f:ae:a6:da:e8:9c:3b:3c:97:5a:f3:ac:6f:46:1f:d9:bf:
b0:f0:25:09:f0:fb:42:b5:03:8f:49:f7:95:66:d0:28:97:77:
3c:34:52:a1:ca:fe:09:eb:40:c5:04:4f:7d:71:a8:db:76:d0:
a3:5c:44:d3:42:ff:b4:51:68:80:5a:cb:a1:e8:8f:3e:cf:62:
df:b6:4f:68:02:c9:81:63:1d:dd:8b:e2:d9:aa:bc:4a:3c:94:
cd:4f:ec:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:15:46 2025 by rpki-client