Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
File: B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft (raw, json)
Hash identifier: HBTjVRLwjw2YcFYI/tMA+lI6KbmEWg24fXeJhEw+y0U=
Subject key identifier: 17:37:FB:5D:E1:32:8C:E2:30:30:10:D7:18:35:F6:D3:46:79:37:69
Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B
Certificate issuer: /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
Manifest number: 5B
Signing time: Fri 31 Jan 2025 06:08:28 +0000
Manifest this update: Fri 31 Jan 2025 06:08:28 +0000
Manifest next update: Fri 07 Feb 2025 06:08:28 +0000
Files and hashes: 1: B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl (hash: Z4IlFelGA/WJThCtXQqNwNnPVBJRPIdgzCol06BQiOE=)
2: 335E880A5A1811EFB08E4F38C4F9AE02.roa (hash: uB7Em80PKGY4uO2oMYJtskRF61M8oMXLAmFb1PjEp7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
Validity
Not Before: Jan 31 06:08:28 2025 GMT
Not After : Feb 7 06:08:28 2025 GMT
Subject: CN=679c68dc-88a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:da:cd:a7:fd:a8:d3:3c:f0:c2:ea:ca:cc:83:
3a:16:ee:39:39:43:d6:1d:f5:78:99:c2:41:b1:78:
5b:1e:d4:a4:7a:e0:8f:34:5c:a9:4f:a6:7c:6f:82:
94:7e:22:66:51:62:99:1e:65:de:a4:e2:38:b6:19:
06:13:86:0d:38:1e:d4:c8:32:6a:3c:e3:97:4a:b0:
84:90:d7:29:c8:fe:8f:d6:5c:0d:15:4d:1f:c8:c7:
9e:85:70:2b:9d:e4:84:34:91:bf:09:ae:fe:ff:77:
97:77:62:f4:89:9a:e8:88:8f:cc:55:1a:d4:81:83:
3d:a9:13:16:ea:c4:e6:dd:55:42:fd:87:d3:e2:0b:
63:1a:ef:a1:2c:29:6f:e6:06:3c:4c:31:3a:ab:ab:
ee:12:70:09:93:14:7b:4c:85:f7:03:b7:8e:3d:57:
bf:d6:db:3f:34:68:76:ba:e9:9d:0f:72:2d:aa:eb:
4c:56:cb:ec:d8:1a:82:af:1a:98:a3:b3:22:7c:6a:
e5:8c:85:8b:f1:20:37:69:f6:bf:90:51:ce:2f:33:
4a:d5:3f:ed:17:14:8c:94:f4:01:c1:04:9b:22:a1:
46:78:90:c7:60:44:4b:fc:3b:11:2a:17:2f:18:53:
2e:f7:d5:09:5a:30:42:0c:9f:6c:51:8e:25:03:87:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:37:FB:5D:E1:32:8C:E2:30:30:10:D7:18:35:F6:D3:46:79:37:69
X509v3 Authority Key Identifier:
keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:34:97:1c:28:3e:49:15:98:3a:cc:96:70:36:45:b7:aa:2b:
01:35:c8:fb:bd:3d:07:55:b2:61:bf:69:ec:fe:62:1e:aa:b8:
97:f0:c3:a0:3d:a5:de:3d:66:cf:4b:2e:86:63:f5:0f:82:37:
2c:54:eb:dc:4f:7b:0b:68:32:e5:ee:ea:11:39:a0:53:52:09:
0d:41:36:b1:2d:6b:39:00:21:28:06:97:d5:fb:ef:c8:70:c1:
45:9d:70:4e:5d:b2:d4:4e:37:f5:85:e3:3a:a4:96:41:77:9d:
93:6e:6b:7c:9d:fc:be:46:fc:88:b9:e8:2b:c6:53:34:43:fc:
cd:e1:13:fb:2a:ae:3d:9d:70:83:d1:51:6f:6e:ce:e2:01:dc:
6f:cb:6f:a6:77:1d:46:3a:5f:32:d0:8f:54:ba:8b:41:60:98:
cc:8a:09:48:63:d8:71:1f:70:f9:cd:07:9a:b0:0d:70:a8:e6:
47:2e:f6:66:a7:b2:73:65:2b:c2:1a:c9:03:3e:4b:c8:74:b9:
49:1a:59:eb:c9:8d:e5:41:b3:10:f7:af:6b:89:ca:4d:56:8c:
41:a8:f0:fc:8c:57:83:0f:cc:47:57:81:d6:bf:6d:ab:54:6f:
80:de:67:46:dc:af:da:23:01:38:67:fb:c9:90:17:93:12:9a:
8b:a3:ab:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:02:26 2025 by rpki-client