Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json)
Hash identifier: Dk9Rpw3ymuwMFRXRRuDGVFuNVVxjggB7hBXDt7s/Fbo=
Subject key identifier: 61:90:E4:1E:FB:51:ED:E9:87:93:37:2A:E7:EA:E9:40:24:F6:DF:D6
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial: 0D90
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
Manifest number: 0D7C
Signing time: Fri 31 Jan 2025 14:43:09 +0000
Manifest this update: Fri 31 Jan 2025 14:43:08 +0000
Manifest next update: Fri 07 Feb 2025 14:43:08 +0000
Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: GxGMt4UzPnt5MFCiGqPWqa6w4+0TrBMH826Q6TtTB8U=)
2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3472 (0xd90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Validity
Not Before: Jan 31 14:43:08 2025 GMT
Not After : Feb 7 14:43:08 2025 GMT
Subject: CN=679ce17d-c429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:8b:cc:45:40:8b:c8:d7:0c:e1:16:e0:1f:
19:b0:76:d0:0f:2e:d8:f1:92:1d:4d:2a:55:7e:35:
4d:85:a2:45:9d:b5:71:09:b0:55:17:50:71:47:f1:
d6:73:5a:b9:d6:7b:23:f9:d0:ab:0c:2e:5e:4b:ea:
04:9b:a3:09:e4:ae:12:7e:57:81:ca:8f:03:e3:8a:
ff:c9:43:68:f5:64:0e:fa:63:a3:3f:73:b4:6a:93:
0c:92:fa:d2:39:87:d7:60:4c:c1:4f:5a:22:4e:ae:
e6:59:de:80:ff:f2:8f:d5:35:12:bb:81:73:d3:d2:
e9:a8:48:82:a1:d1:e5:0d:d6:63:58:d7:3c:71:d5:
5d:2b:65:92:2a:0e:0a:ad:46:c5:cb:a0:64:ae:60:
c8:68:2c:b2:59:9d:26:9f:6f:98:fc:bd:14:9e:c2:
75:88:12:6c:f2:e6:c6:52:07:e3:9a:1f:32:c1:61:
12:da:50:1a:d4:ed:c2:88:a1:00:17:b3:29:da:a2:
6a:e4:6b:6b:3e:f8:30:be:94:67:ae:14:2f:e9:00:
a7:3b:bc:36:60:77:ac:75:e7:27:fe:41:f0:58:17:
97:33:7e:5e:f7:b9:1a:25:63:f8:25:17:70:9e:32:
8a:13:90:0c:fe:53:13:92:ac:8d:1f:01:e2:58:e3:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:90:E4:1E:FB:51:ED:E9:87:93:37:2A:E7:EA:E9:40:24:F6:DF:D6
X509v3 Authority Key Identifier:
keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dd:28:62:14:5c:fb:de:85:9d:27:65:0b:12:7d:39:8f:0f:
42:7c:98:41:f6:33:b7:e1:70:17:5f:2a:99:da:b4:3c:3b:26:
b0:bd:21:1c:d4:b3:a3:19:16:6b:f1:83:29:97:b6:e1:35:f2:
b5:83:34:c5:c3:90:fb:72:9a:6b:b5:29:b7:11:2b:dc:ea:ac:
a9:03:42:98:5c:53:7a:84:3c:6c:b5:b4:13:4a:5a:88:4c:6a:
6f:c8:e3:d0:7c:68:d7:27:17:ca:4f:31:6b:16:3d:6e:19:98:
38:c5:93:a6:91:f5:bb:c8:50:0b:2e:38:9d:64:45:e0:1d:82:
35:8c:80:1a:e2:a7:81:ea:08:bf:16:d7:11:9e:2f:ee:42:92:
b2:99:11:ce:6b:28:30:13:07:29:a8:9f:b4:fb:96:26:2e:0d:
70:8f:c3:c7:55:9d:56:8e:a1:7d:e9:96:50:3b:f7:d9:3d:09:
72:bf:c7:1a:ff:55:b4:59:06:03:56:53:7c:e9:99:ea:b5:a6:
3c:ff:0c:20:37:ed:8b:16:47:dc:b7:94:c6:7b:96:a0:ea:8b:
08:51:0e:83:41:3a:eb:f9:43:74:9a:3a:f2:ff:76:c1:44:4a:
64:4a:14:31:b5:3d:39:d9:78:7a:36:80:35:27:01:ca:38:0b:
92:02:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:52 2025 by rpki-client