Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
File: _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json)
Hash identifier: RTXToWejDGY7hA0ul366tIIG0cxxopTXC+uN9IV9lP4=
Subject key identifier: 51:3D:89:85:79:54:9F:2E:87:5E:55:A9:12:DB:9C:BB:F7:F6:39:D6
Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
Manifest number: 46
Signing time: Fri 31 Jan 2025 06:26:01 +0000
Manifest this update: Fri 31 Jan 2025 06:26:01 +0000
Manifest next update: Fri 07 Feb 2025 06:26:01 +0000
Files and hashes: 1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: I1fg6iqvQbClUnaQmh4H8dKlj1gmfxaNfOOmLQCn0Os=)
2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: 6DTPGl0cK90vpMXpajrInMal5HqM8aVrjHYhHLus/gk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Validity
Not Before: Jan 31 06:26:01 2025 GMT
Not After : Feb 7 06:26:01 2025 GMT
Subject: CN=679c6cf9-1fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a8:43:91:a7:68:0c:dd:64:e9:96:a3:06:f8:
32:cd:19:85:5b:7e:d7:53:6b:43:1b:b9:6b:1d:8d:
98:89:3d:be:6a:7e:cd:69:a2:cd:bf:ee:ca:55:4e:
c5:31:9e:29:43:91:6a:08:b5:12:82:b9:86:b2:11:
24:f3:41:78:c5:f0:be:4d:d7:e9:d2:9e:ba:e6:74:
74:c8:42:33:3b:d9:fd:b2:7f:04:01:3d:6e:7c:47:
2c:a5:77:e1:78:d7:7d:9d:2f:7f:63:24:0a:1d:32:
51:7d:66:0c:e4:9c:d3:38:97:af:d0:8b:74:fc:64:
4a:a2:b4:83:35:3f:1a:b8:4a:b9:98:73:ff:b5:47:
1d:a9:67:37:7a:a7:a5:b8:7a:2c:75:02:a1:52:64:
6d:b4:bb:76:a0:f1:c9:37:1c:d8:2f:c4:cb:3a:b5:
5c:12:cc:03:91:8a:c4:c4:38:8e:ac:21:2d:ec:11:
99:44:d3:f0:5e:62:25:31:c6:7c:f1:1e:a4:51:eb:
5a:c2:f0:ab:24:20:c6:b4:3d:55:1e:98:24:09:9d:
be:ed:99:c2:9d:55:8f:40:60:e4:67:d9:29:1e:5c:
18:c3:ea:a0:68:1c:b2:da:09:04:30:35:30:08:b5:
57:21:55:49:36:b1:26:84:ae:63:05:cf:d0:b9:80:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3D:89:85:79:54:9F:2E:87:5E:55:A9:12:DB:9C:BB:F7:F6:39:D6
X509v3 Authority Key Identifier:
keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9f:75:fa:01:45:83:75:76:5e:cc:f5:fd:36:bc:18:4e:37:
25:f5:02:77:65:69:53:1a:e9:1f:59:34:2e:39:e0:51:be:2f:
b0:4e:e1:40:c9:5e:73:ad:63:52:3b:a1:9c:e7:0b:6a:13:26:
d8:41:a9:c8:54:ff:d9:45:77:09:3c:f2:2a:2b:f5:79:f5:f2:
fe:70:0f:f8:7e:be:e4:59:92:f5:1b:1c:00:9f:1c:01:a4:2f:
47:48:bb:8e:a6:da:53:1c:f7:11:ac:c6:b4:1e:c1:93:ce:40:
23:0d:80:69:22:3b:f2:a5:ca:c8:dc:7f:d9:f5:97:1e:85:bb:
12:e8:93:9a:4c:ca:48:9d:23:e9:04:fc:4c:3a:df:65:c6:d9:
b3:0d:92:d5:fd:a6:bf:86:30:75:37:0b:91:96:74:b5:14:8b:
0f:d2:9c:04:08:fb:26:6f:e7:61:ba:a1:82:63:6b:e7:c0:fc:
b9:c7:a3:08:9a:20:b3:df:d2:88:86:06:f5:cc:06:1c:00:45:
d7:25:c5:f8:c7:39:1d:6b:35:7b:bc:e9:8f:36:9c:45:3a:26:
16:60:fc:45:dc:f1:76:99:eb:8c:2b:7d:75:35:f5:3c:e9:2a:
7a:1c:68:83:d2:da:7c:8f:f9:6f:71:fc:9b:64:f5:f4:8d:6d:
7f:b0:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 21:01:25 2025 by rpki-client