Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json)
Hash identifier: zxA6p6ZUpzJqHf8gnMNDO5BFKSShAYoT2gd3jRF+AmY=
Subject key identifier: AA:B8:A8:20:4D:51:F7:77:2D:E2:CF:53:F8:08:C6:A2:19:13:4E:28
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial: 118E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
Manifest number: 117B
Signing time: Fri 31 Jan 2025 17:13:23 +0000
Manifest this update: Fri 31 Jan 2025 17:13:22 +0000
Manifest next update: Fri 07 Feb 2025 17:13:22 +0000
Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: egwudKR/P5VYhBZM54cfDmncAsJISuqUh6KO40NHDd0=)
2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: sBWfqMdrbgHXkc/ZfAmcs+ee3JGLkHqnwdG8y4HuuaQ=)
3: DA0E6EFEE86411ECA54EC03BC4F9AE02.roa (hash: H4DVjhrQX80NkE2QeTyaoNeUxrpJLEpfDpSQExmSZjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4494 (0x118e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Validity
Not Before: Jan 31 17:13:22 2025 GMT
Not After : Feb 7 17:13:22 2025 GMT
Subject: CN=679d04b3-0062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:fe:2d:2d:cf:84:f8:be:e7:31:55:42:6c:
df:2d:1e:ef:a1:6c:b9:71:f1:e5:8f:e9:ec:2a:fe:
df:48:29:05:29:e0:8f:31:55:c6:a9:26:28:a1:55:
5d:60:d2:35:00:65:2a:ae:f0:73:4b:3e:e9:e9:c0:
a4:5a:54:03:50:71:de:59:e3:6c:f5:81:17:4b:a4:
b6:8f:73:b6:c9:ca:c8:1a:f6:2d:4a:bb:f9:5e:8c:
89:e5:6b:b4:48:c0:4d:cb:05:44:f4:3e:0d:23:e4:
35:4e:c7:99:db:33:f6:c1:66:26:6e:b3:32:39:00:
9c:cc:ea:44:83:65:c1:42:db:87:47:63:35:49:81:
f7:75:80:8c:af:e8:24:35:d9:90:ae:bd:4b:5b:28:
b5:28:ff:64:bf:08:28:4b:a1:fe:19:d0:c8:f5:c2:
97:bb:0c:6d:ec:4e:75:6d:87:e1:fc:4f:52:62:07:
27:16:ca:6d:79:cb:43:dc:bb:29:a4:ef:99:72:55:
d5:4a:d4:4b:2a:0e:ad:dd:b6:aa:3d:06:41:0e:4e:
34:1d:b8:ba:5f:04:a6:99:a9:7f:8d:d7:6b:d1:0b:
20:4f:3d:26:6a:87:ee:1c:dc:50:f1:e8:8e:91:4d:
2d:9f:3c:8e:89:77:5b:8d:cd:e4:94:f3:1e:f1:2d:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B8:A8:20:4D:51:F7:77:2D:E2:CF:53:F8:08:C6:A2:19:13:4E:28
X509v3 Authority Key Identifier:
keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:53:1e:4b:06:c9:b8:42:b1:1c:fb:55:05:c7:40:9e:55:45:
9b:95:8a:76:80:54:4e:0b:61:64:0f:f1:3e:e5:c9:dd:1e:e8:
da:f8:d7:f5:14:a9:1b:be:86:fc:3f:d8:1c:35:88:f9:f8:70:
47:89:d7:6e:4b:6e:19:7b:6a:69:3d:ed:b1:e3:ed:7a:46:ad:
31:f9:49:c3:92:a8:b3:cf:05:c0:44:fa:7d:89:76:29:36:9e:
5b:17:b9:bc:6f:49:ac:66:e1:3a:5d:e9:59:d1:03:cb:56:84:
1f:76:09:8c:78:e3:85:7e:96:e7:b5:a5:48:7a:27:56:af:14:
3e:14:52:cf:59:03:eb:cc:a9:94:d3:85:a3:89:8e:05:c9:2c:
83:0a:3d:34:f3:b6:c8:43:ca:c7:e2:16:67:3d:be:3c:6b:12:
4a:be:ad:eb:88:dc:74:34:aa:e3:14:cf:7a:31:b9:6d:57:fc:
af:a0:2d:78:c6:f6:16:0d:25:69:2b:b7:49:3a:c7:55:3b:37:
87:35:80:62:e1:75:63:14:d1:72:4e:bd:8e:7e:89:bd:02:bb:
98:57:dd:e1:62:ce:75:3d:d4:c8:27:6e:86:14:60:c6:f9:22:
a8:6f:1c:d8:3e:1b:c3:3e:42:b6:6e:b3:2b:af:58:63:0b:c4:
0e:2e:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:42 2025 by rpki-client