Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json)
Hash identifier: idkcilD6Jm9hyhGqlKfVeeuX0iSjRVQEwTYO1xWVe7c=
Subject key identifier: 7B:10:78:0C:3C:59:EE:E6:33:F1:F4:62:03:5D:75:80:DD:A5:7B:56
Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53
Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953
Certificate serial: 0A0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
Manifest number: 0A05
Signing time: Thu 30 Jan 2025 19:57:35 +0000
Manifest this update: Thu 30 Jan 2025 19:57:35 +0000
Manifest next update: Thu 06 Feb 2025 19:57:35 +0000
Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: 6p7ZXYco6Jqn/GDD3tmh1MokbJ+Xc6tVOnSjW6b/MB4=)
2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: KPuYYAQ14XpM20WTZh+zfqEqRXqFeAhCtZEHNEUGMw8=)
3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: sDoqH+F903pEZfTL5CZCahrin5P/dPEPc5OIr03Af9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2574 (0xa0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953
Validity
Not Before: Jan 30 19:57:35 2025 GMT
Not After : Feb 6 19:57:35 2025 GMT
Subject: CN=679bd9af-e4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:6f:c2:f6:00:89:d8:87:1e:d4:f2:48:47:
1e:99:eb:a4:7f:0e:db:f3:e0:68:0f:ee:8d:37:90:
76:99:01:f6:fb:6d:1f:08:34:66:e7:b3:fd:63:da:
b3:c0:01:a5:19:0a:f5:6c:3c:07:6b:1f:a0:aa:d1:
e8:c2:8a:6f:20:0e:ec:b9:7d:9b:54:4b:f1:9f:1a:
d1:68:54:07:5e:b5:cb:9a:d5:e9:90:eb:82:61:c3:
b5:e8:82:8e:71:f6:7e:0b:e5:4c:e1:f1:af:b9:60:
07:af:a9:bd:58:fe:e3:a0:a0:66:a4:5f:2f:1a:82:
15:60:7b:72:2a:c2:88:0f:92:18:83:3f:d2:ec:77:
e0:73:a7:a9:c2:e7:37:42:d4:92:bc:78:16:d2:b0:
cb:18:28:29:9d:8d:63:6d:c9:c2:39:aa:31:57:4a:
b6:0e:97:d1:c8:e6:e3:ee:d3:6f:f0:da:6e:ec:5d:
f3:04:d4:f6:7d:d9:b8:4b:5e:2f:0c:79:39:ec:64:
3e:8d:c0:bb:1e:8c:a6:10:bb:18:f9:f8:eb:99:72:
b6:20:dd:6e:eb:c6:62:1a:e5:5b:be:1d:3e:6d:b5:
3e:a5:bb:34:1d:e8:39:e0:a8:55:08:ee:f7:3f:c1:
f4:c6:eb:52:fb:ed:da:3e:bb:a2:e7:fe:08:5d:a0:
03:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:10:78:0C:3C:59:EE:E6:33:F1:F4:62:03:5D:75:80:DD:A5:7B:56
X509v3 Authority Key Identifier:
keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:b3:20:a2:8d:02:5d:ce:48:bd:1a:d7:66:66:de:ab:ea:2b:
f6:ac:22:31:b0:e9:4f:3c:fb:58:73:09:c0:a3:35:b0:a3:e6:
53:85:b1:c9:db:33:54:56:3d:0f:01:da:a6:a4:94:78:19:eb:
c6:53:17:e6:55:06:66:ed:3f:e3:c8:f6:ca:5f:35:6c:38:fe:
1a:d1:0c:45:b9:20:58:d4:4d:f5:90:2f:88:f7:b5:f0:a9:9c:
e6:e6:fd:db:1f:59:52:41:be:34:02:29:74:2d:76:30:3d:91:
31:5c:42:3e:bb:c5:28:9e:c3:81:da:01:3b:41:ef:2b:a2:39:
e6:27:b9:2f:d1:c0:3b:44:5a:c7:d6:36:4c:c1:1e:ff:34:cc:
21:f3:ff:b2:24:97:20:49:ef:4b:33:de:7e:ab:7b:2f:4e:03:
1c:ab:f5:c1:f4:0b:03:5c:fb:be:6d:83:a4:d4:db:d9:0a:c0:
0b:ef:62:b8:66:14:6d:c2:17:cf:7c:b9:09:3f:e7:8b:9b:c2:
c8:05:3c:50:fd:ba:f1:2b:ef:a9:63:6f:c1:00:ad:c7:3e:cf:
71:6e:8e:b2:ba:9d:4a:db:e2:9e:5f:67:8e:1d:8c:d6:4b:e3:
d6:f6:12:09:85:0d:6b:8c:b6:81:ea:60:5d:4e:90:dd:36:7d:
f8:bd:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:49:00 2025 by rpki-client