Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json)
Hash identifier: A4YvSi8xEgYX9Gb5/ARSeS1u5LF6H06Uq+Td04BLdz8=
Subject key identifier: AC:26:38:36:8B:4E:44:56:68:24:51:73:F0:AC:AA:E7:B1:FC:81:29
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial: 3607
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
Manifest number: 3536
Signing time: Fri 31 Jan 2025 14:24:18 +0000
Manifest this update: Fri 31 Jan 2025 14:24:17 +0000
Manifest next update: Fri 07 Feb 2025 14:24:17 +0000
Files and hashes: 1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: WujvOqQ3ZTzAkLFmJbRt1qQlvPVT5G2Tdbz/AcpZoYE=)
2: 7B5072FCC90A11EF9DD7E74FC4F9AE02.roa (hash: XrCD0SoiCbFp5ReQWSQTJTKj1pMb++WuEXREwqBJSIs=)
3: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: YPxJgAFP2pm+e64iG82yJRkFHNHfja4F2rH7VSVuFpA=)
4: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: 3QqIb/PpEMe7CSOMb9cfzIUcXW1tet3HABkiD8A3zkU=)
5: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: apyNb0gzlP7QIPlzF+1SGVtUOjpAimi2EUrocnrYZRM=)
6: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: 8JKaEfgtThOrevd/FI1wUsWQCsjDZCsWDfH4rtPvYOM=)
7: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: Yn6iyp3sOHzht7NrUVV1K95CTLrIyR+zeCU6DhPlbi0=)
8: 9538F912A09511EE9616A86EC4F9AE02.roa (hash: UIhH1UdXX1/WldxbBw/5eFdUsW8H5rv3xowCVi4x/js=)
9: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: E9Q0DLQxOx2PNLNxJzUPOmEekE0nfR8RNH8+NziMkYc=)
10: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: 6xFx//HoX9CSfFy+iBeZSYBO+hoRtkc5fjd5y3qvsJk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13831 (0x3607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Validity
Not Before: Jan 31 14:24:17 2025 GMT
Not After : Feb 7 14:24:17 2025 GMT
Subject: CN=679cdd11-7158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:95:3d:b2:a7:93:76:c9:44:66:b9:92:2c:
0f:e0:1b:1f:43:26:be:31:20:6a:8f:3e:b5:64:96:
8c:0f:2b:71:ab:e8:d8:88:8e:4c:da:d5:ba:58:79:
5e:f4:38:40:9e:74:4c:e9:33:84:51:30:f5:7b:26:
b1:ea:01:d9:ac:d7:f6:07:a7:01:db:32:bf:36:9b:
d4:55:b4:0e:5b:4d:35:3d:9f:28:ed:8d:c2:87:a5:
1c:a8:02:e8:cb:aa:71:11:58:73:a1:e9:ea:c0:9f:
d3:d9:82:f6:7e:2a:11:1d:ee:99:70:17:12:bc:0a:
5f:bc:4d:2f:34:37:0c:0f:71:cd:47:18:fc:34:0e:
c2:5b:04:12:84:69:69:6f:97:fb:4e:35:ed:c9:44:
6f:9f:f4:e1:d9:52:48:6b:d8:fd:5f:7f:67:0b:d6:
d2:0d:45:b2:f2:5b:3e:dd:c5:1e:48:a6:de:a1:13:
6a:0c:ea:1a:f7:5c:b6:77:db:05:2d:1b:2a:22:47:
ed:79:77:4a:78:c6:31:69:98:7a:1f:4e:3c:cd:89:
bc:ed:d8:16:88:94:9d:45:98:c3:89:55:5e:5b:da:
da:14:64:b5:c0:26:0d:72:61:11:dd:61:b6:1c:10:
4e:c1:eb:4f:c1:38:c1:31:0f:1c:93:68:fc:a8:61:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:26:38:36:8B:4E:44:56:68:24:51:73:F0:AC:AA:E7:B1:FC:81:29
X509v3 Authority Key Identifier:
keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:70:b1:2e:b5:89:c7:ad:c5:0a:a4:e5:c7:44:61:92:ba:2c:
43:bc:08:08:7e:2c:b4:c4:62:fe:9b:f6:a9:c3:d8:82:60:7f:
df:72:d5:19:d9:cb:5f:62:5f:c7:ff:31:6b:fc:44:8a:d8:ce:
12:ed:f3:f9:ce:4b:03:be:f4:50:ea:a7:3c:7f:12:20:59:10:
d9:26:3d:17:63:98:b6:3f:cc:b9:d4:f8:c2:ce:15:50:b7:22:
56:36:21:9c:5c:dd:e9:40:b0:03:ef:88:81:53:22:5c:44:ec:
10:e7:f8:4d:08:ac:18:d5:25:27:99:56:79:a9:50:65:69:be:
a3:5a:cc:19:ac:a6:88:96:ef:50:45:04:84:29:44:6a:14:97:
0c:a5:86:56:5d:1d:37:ea:50:a3:e1:b8:ee:1d:4d:a0:a6:22:
23:cd:30:a9:26:fb:43:91:71:34:dc:ce:2d:b7:c1:84:a0:30:
a7:e7:df:9e:fa:df:d0:36:9d:5f:b3:7e:23:f0:34:fb:03:aa:
a5:3e:58:f4:48:72:22:0e:e4:19:5d:4d:1b:13:73:c9:57:b0:
85:70:5e:9b:58:ef:b1:ff:b6:88:2e:06:22:ab:b3:88:14:ea:
f1:fd:ab:17:94:e7:bb:a2:c8:d1:30:3e:e9:07:64:3d:e2:2f:
2d:38:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:00:42 2025 by rpki-client