Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json)
Hash identifier: YkjtevMrnj9zXb4NRm4LyfdJtmuZy4mX0HCnAUYzZLw=
Subject key identifier: 6F:A0:3B:1E:69:FA:EF:5B:AD:C7:0C:3D:A4:76:9A:F3:C1:37:57:35
Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
Manifest number: 8F
Signing time: Fri 31 Jan 2025 05:32:27 +0000
Manifest this update: Fri 31 Jan 2025 05:32:26 +0000
Manifest next update: Fri 07 Feb 2025 05:32:26 +0000
Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: HBG9K8+9J8AkJuXz/U2Xn3GqUWiEKgbnvA5DtOxWKC8=)
2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: LMERtpQp+DLty4Wivq0OeREYwOOHlqWpDYnqAURaibM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Validity
Not Before: Jan 31 05:32:26 2025 GMT
Not After : Feb 7 05:32:26 2025 GMT
Subject: CN=679c606b-c3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:17:77:6a:4f:e0:35:e9:ed:d1:38:83:23:
44:ea:05:bb:03:16:d2:57:e7:a2:dc:d0:3b:eb:b2:
05:4e:10:0e:49:37:25:32:f1:df:8f:e9:3e:5d:cd:
7d:da:21:b4:c3:9a:2b:e7:3d:9c:4d:bc:f4:85:e9:
d9:87:87:d2:04:f4:1c:73:89:9d:43:02:d5:fe:2c:
c3:f5:3c:bf:8f:fc:60:f5:ec:0a:00:1b:5d:18:c8:
2a:48:7b:42:35:5d:7d:5f:c9:69:e4:d5:6c:a5:23:
0a:0b:cb:a9:8e:5a:18:e2:d4:9a:9a:0a:f4:c9:49:
02:5f:34:df:29:3b:08:c1:38:1e:24:e6:1d:76:57:
13:40:2f:30:03:03:da:19:de:f8:ad:ad:5b:ce:ee:
5c:98:a3:31:87:c6:21:de:1d:3a:31:f0:f2:bc:d0:
49:03:01:c6:c7:02:81:f5:20:f8:06:10:3d:25:99:
80:0e:c3:2a:f2:09:f2:e8:0d:e5:0f:55:47:1c:da:
35:eb:10:55:a2:d5:31:ee:0f:2b:54:0d:88:46:cd:
2b:09:91:46:ce:bb:4b:b7:8e:42:be:e2:3a:57:43:
a7:9d:85:ee:62:7a:fe:b0:5e:84:89:0f:77:d1:07:
35:c8:3a:54:d6:5c:12:a7:26:4b:ed:1f:12:e2:f0:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A0:3B:1E:69:FA:EF:5B:AD:C7:0C:3D:A4:76:9A:F3:C1:37:57:35
X509v3 Authority Key Identifier:
keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ba:03:ea:13:c4:0a:c9:29:52:b4:8c:01:01:c3:bd:ec:5a:
57:34:a2:16:d6:26:73:27:c6:6a:f4:d6:44:0b:7e:d6:70:23:
51:be:4b:0c:47:cb:86:9e:2e:a4:c0:6a:f8:48:65:b0:04:59:
52:6f:94:ea:40:58:06:ca:dd:4f:4c:fe:da:42:da:0d:cc:0b:
83:f9:ac:cf:21:47:33:e1:5f:13:53:33:d7:d2:ed:3b:c4:b7:
12:f7:04:b4:d2:8e:73:07:e3:97:fe:10:df:56:84:e7:82:93:
64:76:3a:f4:77:bd:e4:e8:ef:6c:0f:d4:1f:55:a0:f7:54:af:
d8:4b:2c:c1:a2:6b:46:ba:75:d9:11:b6:0c:d1:1e:d8:e9:c3:
31:89:90:f4:3c:f5:63:17:59:03:a8:06:58:2d:93:72:58:30:
be:f3:08:76:0c:3d:73:80:6e:5a:69:8e:2d:e3:10:31:36:e4:
61:4e:42:a0:80:66:20:a9:6d:cc:ab:c0:a8:3a:b3:0f:fa:14:
fd:fc:1c:f5:87:09:2b:6f:43:f9:f2:cd:76:8b:de:77:b3:90:
d8:93:38:49:e1:0a:2d:ef:30:d4:10:38:13:1c:02:32:65:17:
41:86:bc:a2:0b:3b:9b:61:b0:79:43:a1:9f:21:5c:d3:5e:ba:
da:df:2d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:43:47 2025 by rpki-client