Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json)
Hash identifier: 8ZoS2JCf/0DCk3d/qfJCoa+Ub1Vz6pj37V2heBaRwWY=
Subject key identifier: 4B:18:61:56:7F:53:13:BA:97:7E:80:14:0B:57:D1:2F:7A:6A:A0:52
Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
Manifest number: 0188
Signing time: Fri 31 Jan 2025 02:54:34 +0000
Manifest this update: Fri 31 Jan 2025 02:54:33 +0000
Manifest next update: Fri 07 Feb 2025 02:54:33 +0000
Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: 3QrZVBQyjIEvYY6gqxe8Az1pkwanRNHtOqdtrbKUVQk=)
2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: s2ufqDtIL2LcUO3l3IJXmwdiZKcS7NlwuSG6RgI0b0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Validity
Not Before: Jan 31 02:54:33 2025 GMT
Not After : Feb 7 02:54:33 2025 GMT
Subject: CN=679c3b69-2067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:70:9e:49:f9:56:77:eb:14:d0:08:d5:14:
40:06:00:4b:e2:fc:5d:58:75:f8:bd:64:53:50:38:
17:31:23:57:85:09:37:24:dc:28:9a:c8:bf:81:93:
cd:85:ab:a7:3f:23:66:64:da:08:3d:66:e5:d7:98:
45:c3:b4:c3:4c:07:32:87:4f:93:d5:f7:a8:a7:14:
d9:8f:72:30:da:2c:7b:8b:9d:46:c9:c0:55:a7:bc:
20:83:eb:b3:c2:2c:17:bf:6f:f1:b8:8d:96:b3:d5:
31:13:58:2a:bf:fc:83:8a:41:ab:72:49:03:be:11:
9c:90:ae:f4:28:73:d4:1d:81:b0:e5:a0:fe:c2:f7:
73:0b:51:13:c5:42:9d:f9:2c:1c:7a:9c:3b:68:58:
9a:ec:09:a1:f9:7d:01:05:20:5a:61:06:75:91:29:
12:3b:69:15:b0:d6:95:d7:58:9c:bc:5e:0b:7c:57:
0b:69:28:ef:a6:a9:28:2c:16:ed:7d:a7:ab:74:20:
dc:15:ac:91:ba:4c:8c:ed:ee:11:de:f8:f6:52:50:
c7:3b:4d:d7:68:f1:6e:cb:4c:4f:32:44:3c:77:7f:
9d:01:4e:46:2a:2f:db:e0:39:6c:c7:9f:69:b5:27:
be:41:66:90:db:c2:4b:cd:7b:5f:f4:80:3b:24:fb:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:18:61:56:7F:53:13:BA:97:7E:80:14:0B:57:D1:2F:7A:6A:A0:52
X509v3 Authority Key Identifier:
keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2e:20:72:fc:ec:a6:54:5d:c1:2e:23:83:04:53:ef:9b:30:
a4:d3:5b:b6:ad:81:1b:a7:88:c9:18:ae:5b:9f:7a:f1:67:79:
be:5f:2e:da:23:86:7a:b6:fa:33:a4:91:cf:d2:5b:50:6c:1c:
74:bd:c9:d2:c7:92:da:7c:ac:2c:50:c6:c4:a8:35:65:9a:9f:
32:07:d8:a0:5e:46:33:53:a9:32:00:7a:49:cc:df:64:46:dd:
40:77:7d:df:cf:08:54:c7:f6:d3:5c:24:56:cc:23:c9:c3:5d:
47:e5:25:fe:54:df:fb:a4:46:54:e6:2d:b2:36:0a:83:6d:bb:
35:b0:0e:76:37:ff:49:b1:4e:d3:32:c5:13:20:b0:66:3a:c1:
14:25:c0:7e:38:76:ff:89:52:fa:ef:5c:51:bd:72:32:6b:96:
67:c3:6b:92:52:55:7c:36:fa:fb:69:87:f0:4f:d0:29:8d:60:
2c:ab:fb:01:0f:3b:8e:91:0c:4d:33:d4:94:a2:ee:c6:dd:1e:
d1:f8:32:1e:3d:71:c6:64:1d:6e:13:de:cf:44:c6:85:3f:ea:
0e:a8:04:a9:c7:c5:de:44:ff:9e:96:d8:47:21:1d:d6:78:d0:
3d:8c:19:2d:49:48:01:aa:8d:e7:f6:85:45:17:45:5d:0c:a9:
40:61:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:37 2025 by rpki-client