Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json)
Hash identifier: GrSAor6HBeKsMaRQSb7p9oWQ5rmQSpnAp6MEHfrwXyk=
Subject key identifier: 9E:7B:D1:F3:2D:E4:E1:59:AA:D7:D2:57:F7:AB:FC:73:EB:AA:A8:0D
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial: 0244
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
Manifest number: 0233
Signing time: Fri 31 Jan 2025 02:07:32 +0000
Manifest this update: Fri 31 Jan 2025 02:07:31 +0000
Manifest next update: Fri 07 Feb 2025 02:07:31 +0000
Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: SGoxwIubIruuCyKhLJTedqteGVDKn10Hz6PMdH+p4co=)
2: 31A7C2F6BE0911EF968E820FC4F9AE02.roa (hash: 6++XtaJ8fNmMvOZeWHghdxBq+qQ0o2Xl9vKHno86MG8=)
3: E73131A43F7211EFAA8D2F2AC4F9AE02.roa (hash: cHVAnbAAZkxxvDbaZ0/vXTAfraTJSVRsAmDN10groi8=)
4: 32136556BE0911EF968E820FC4F9AE02.roa (hash: 4bCkfy9g2C8ssAnRQuAnEbbQzUJjUI6UXxlQyCaObKQ=)
5: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: 67zhTTp2vfU+e/e2tJTNawILQWqWdPCohYNKfRAh44c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Validity
Not Before: Jan 31 02:07:31 2025 GMT
Not After : Feb 7 02:07:31 2025 GMT
Subject: CN=679c3063-75de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:cc:ee:01:29:00:6f:cd:8b:2e:62:3f:cd:
5b:ae:c3:d1:78:62:ab:34:99:7d:a3:7f:66:b1:ac:
2f:aa:d8:8c:7a:31:8d:76:33:48:2e:b6:b6:fb:5d:
43:15:dd:f6:e2:8d:84:2a:80:ab:b4:67:f7:4c:0e:
cf:4e:43:52:a5:b6:5f:94:b7:37:b0:05:07:e0:6a:
d8:2d:0b:55:d7:08:11:b5:ee:bd:89:6d:03:37:26:
23:67:93:09:31:34:fc:2a:e9:dc:96:38:93:b7:e7:
f8:9e:54:e5:a1:00:07:26:7d:f6:9d:50:cc:7d:db:
a5:27:20:66:ab:0e:67:21:37:84:18:e5:a9:5e:a7:
4f:0d:f4:5c:a0:a6:c3:5a:5d:65:1c:f8:a5:bd:2d:
ab:8a:05:fc:57:f7:55:af:61:80:e0:89:d4:3e:1b:
e1:64:65:0e:df:98:b2:d9:bd:93:26:a0:4d:66:68:
a9:74:4b:4d:a5:58:8d:a3:d0:b7:f1:e3:ce:dc:03:
d1:b2:73:1e:4c:ed:ed:f6:28:5a:c2:23:29:b9:a5:
b8:f0:10:44:f5:0a:a3:a2:80:ea:78:fe:a3:aa:5e:
2a:01:b8:33:47:26:a3:44:a1:18:e0:e5:8a:1e:d7:
68:23:24:d7:bf:00:14:50:1b:62:bd:cc:36:04:b0:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7B:D1:F3:2D:E4:E1:59:AA:D7:D2:57:F7:AB:FC:73:EB:AA:A8:0D
X509v3 Authority Key Identifier:
keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ad:f5:ac:cc:99:95:9c:64:3b:03:d7:48:31:40:db:12:40:
79:a7:f5:58:0d:f0:d0:84:c2:a5:36:db:97:72:f0:48:f3:58:
db:7b:96:db:2b:a7:59:3c:4e:4b:54:b7:1d:a7:bd:b3:62:df:
84:c5:42:4d:28:12:81:90:aa:6a:6a:56:71:3f:95:0a:52:d7:
8f:37:ce:51:63:f7:aa:28:75:e4:0c:7f:0d:11:81:1a:cc:44:
ad:dc:d1:01:04:ac:26:66:ca:25:41:9a:91:91:7b:0b:1e:65:
1f:79:6a:0c:d9:23:ea:58:f0:1b:c4:c0:68:f5:25:8d:6c:fa:
2c:30:36:33:47:d3:31:32:a9:9b:20:30:40:2f:35:3a:f3:d1:
72:3a:cd:b7:ab:dc:9f:94:71:2e:e2:7d:66:ef:a1:4f:a7:51:
fc:12:7d:fc:38:71:eb:0b:23:84:30:9c:c0:5a:d4:91:76:2c:
dc:cb:2e:3d:92:09:05:d9:ed:18:f3:70:0c:35:99:a2:18:a4:
1b:9a:95:3a:59:26:1c:27:76:2d:66:91:09:2d:01:a4:93:03:
b2:85:ca:62:60:9a:3e:c4:79:b5:33:56:c7:02:3c:c3:19:b2:
d3:c1:0d:e4:35:be:00:2b:40:98:6b:93:0e:29:d9:00:73:19:
68:5e:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:13:48 2025 by rpki-client