Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft
File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json)
Hash identifier: OMCEBbOGpG34ImGkCOGTIKkDAZox7XNqcIKJvW7LmoI=
Subject key identifier: 0F:BF:8E:40:2A:59:C1:15:1D:75:1D:85:24:56:C1:E6:A3:F7:FF:3B
Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30
Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930
Certificate serial: 0CBB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft
Manifest number: 0C96
Signing time: Fri 31 Jan 2025 18:10:04 +0000
Manifest this update: Fri 31 Jan 2025 18:10:03 +0000
Manifest next update: Fri 07 Feb 2025 18:10:03 +0000
Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: /Iywrm3cPHUmwWucI6sj//5PQkS36wy0fSsoq2tUqiw=)
2: 6EA46446646511EFA9435879C4F9AE02.roa (hash: wKDEdStmrZZfi1N+sozcMYpUpj9M6UZTKjL7qa1uJ/0=)
3: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: gaKPScXkAxsuY8VAZ/bdwS1+gAnXATdqGjlvtSNl84I=)
4: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: 9VMgA4YRxMIjWK/lK97cgRReFAG7X/1dXoRMnmEvJtU=)
5: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: fGSTp0iOsqzKGmiyV7ZzOtRpdpShcJwNBdDHeOBJzvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3259 (0xcbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930
Validity
Not Before: Jan 31 18:10:03 2025 GMT
Not After : Feb 7 18:10:03 2025 GMT
Subject: CN=679d11fc-a264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:58:bf:1e:ba:e9:82:1b:42:0d:86:c5:2a:
61:86:ac:01:28:85:8d:50:4f:49:9e:db:0e:1c:ff:
a4:1c:c2:c5:41:3a:5a:97:31:10:bf:68:d1:39:75:
97:1e:80:c0:48:43:d0:81:48:46:3b:d2:30:2f:10:
f0:f3:c7:ca:d2:b1:68:26:03:74:ef:6d:ea:10:4a:
95:79:ef:e0:e4:b4:2b:96:dd:a3:9a:66:2c:68:5e:
1e:3b:c6:0a:02:3f:4b:44:bd:9d:fc:a2:5c:c5:02:
53:67:28:82:54:7d:c0:be:e9:69:af:f4:90:23:72:
c4:2c:e1:e4:53:ea:9d:f3:a9:ef:b9:a1:0f:1f:4d:
30:fc:50:40:b2:fb:49:72:a7:8d:65:4f:fc:96:75:
46:a4:26:82:67:e9:b5:5b:59:b5:5c:0c:59:46:29:
bb:ca:40:89:3f:6d:34:b0:0f:a2:53:20:96:b8:2c:
95:7a:7e:bf:14:3d:a4:ff:71:e6:c0:a3:f5:be:ff:
a0:f2:bb:c7:39:5c:67:bd:ab:0f:7b:d7:1a:27:cb:
b5:f0:db:bc:a3:3a:71:ef:8b:6d:90:e1:1f:dd:c9:
38:71:80:23:29:76:2f:ff:d6:34:e2:2f:25:72:7b:
b5:d3:2b:85:b8:d6:bc:ce:01:b9:80:7b:01:00:ab:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BF:8E:40:2A:59:C1:15:1D:75:1D:85:24:56:C1:E6:A3:F7:FF:3B
X509v3 Authority Key Identifier:
keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:51:84:d3:8a:64:9e:3d:3b:fc:80:99:6a:f7:f3:8e:58:33:
17:8a:a1:cc:9c:39:09:c1:99:4d:05:d7:4b:8f:86:87:90:bb:
5b:1c:51:c2:6b:4e:d6:ce:72:b3:00:13:3d:80:a9:e1:d7:e8:
71:c4:34:fc:2b:89:ff:28:4a:05:70:9a:5c:3d:11:09:c3:d9:
ec:2e:00:b7:70:0b:51:63:4f:ba:83:8a:84:c9:02:ab:74:36:
49:61:31:93:be:5f:42:29:bd:59:53:3c:9b:82:a9:30:e8:c7:
2f:49:ec:9b:68:03:9c:db:7d:81:c2:9e:c7:dd:18:84:1e:22:
f8:4a:02:0e:25:d0:00:aa:b5:40:36:f3:df:cd:15:a8:6e:50:
7d:8a:5d:e6:fb:5b:d1:6e:27:c3:33:7a:da:a0:bc:2d:52:52:
3d:7b:74:5d:8b:ff:77:68:f0:5f:e4:ed:19:ce:5c:d6:57:7a:
0c:cf:a1:53:f8:37:b3:b5:67:20:2f:f9:b4:a1:0e:33:c6:07:
f0:61:86:08:d7:4a:c9:6f:63:65:f3:e0:a7:91:34:50:78:ec:
19:cc:c7:8b:0a:2c:3c:08:7c:ae:35:a8:91:c4:82:49:d4:64:
92:37:fd:a7:10:1c:52:9f:84:c3:2d:dc:3a:e8:be:dd:f5:a6:
90:7f:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:02 2025 by rpki-client