Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json)
Hash identifier: vSZMm72tdIiyYwVHqqkb8+NWH7i4JFuYFp7dCrXhEYc=
Subject key identifier: 17:73:9E:7C:A3:47:C1:D5:91:26:9E:4E:F5:45:B0:6D:CC:F4:AF:58
Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79
Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
Manifest number: 9E
Signing time: Fri 31 Jan 2025 05:27:08 +0000
Manifest this update: Fri 31 Jan 2025 05:27:07 +0000
Manifest next update: Fri 07 Feb 2025 05:27:07 +0000
Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: cgZUAG8OzNtrnDeWRwse1lPvw/4g4xgPuTtgD18GwUg=)
2: 0E3462143D2D11EFA4B90A1EC4F9AE02.roa (hash: WuVOWMIZsWaqgCf62FxXtIQArid3aP/swI50L4Fc9Qs=)
3: AC82414A392511EF88F70D39C4F9AE02.roa (hash: VLLI4apzU65MvbK7HK/CI33oFr6zuJC3PU4p9pha8w8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
Validity
Not Before: Jan 31 05:27:07 2025 GMT
Not After : Feb 7 05:27:07 2025 GMT
Subject: CN=679c5f2c-e6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:34:4d:49:f8:cc:69:f9:be:75:60:b6:fd:
f3:57:0d:bd:91:c2:72:fb:6c:6d:5b:dd:09:64:c0:
24:74:73:b6:4e:e0:da:3f:68:bb:5a:dc:e6:66:69:
f2:83:88:95:f5:3e:92:74:b4:24:b1:8c:9e:58:9c:
d2:79:ec:62:db:04:0c:44:a9:3c:da:34:6f:e7:ef:
1f:1a:e4:9d:24:86:19:88:16:98:f6:9d:bd:30:18:
ea:86:70:5a:d8:43:f9:e1:c6:88:ac:46:f5:7a:e5:
70:bf:46:97:cc:d7:c5:31:a2:b7:ac:3c:9f:97:d2:
bc:a2:3a:a3:ba:c0:c5:2d:a6:e6:50:01:62:9a:3b:
17:23:cb:e7:89:b1:91:08:97:22:53:2c:40:af:c8:
e3:ee:64:4d:78:13:47:89:ee:af:00:d6:ed:79:b9:
7a:f2:a5:b2:36:4e:c1:97:fe:5d:7a:5d:90:16:18:
a6:0b:bf:f2:2e:bf:3a:47:09:9e:94:dd:97:a4:be:
0b:63:f5:03:3f:76:46:3a:b3:e4:54:cb:6f:19:3b:
3d:e4:ad:82:54:71:7d:5b:4f:96:fc:31:ad:4b:9f:
d8:5e:ce:1d:f3:6b:77:4c:0c:03:1b:c8:0d:77:3a:
73:16:ea:48:5d:08:df:0f:32:5d:7f:08:44:d9:1a:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:73:9E:7C:A3:47:C1:D5:91:26:9E:4E:F5:45:B0:6D:CC:F4:AF:58
X509v3 Authority Key Identifier:
keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:f8:8c:49:87:ea:1b:41:74:88:f6:07:50:08:bb:1a:cf:c9:
78:3a:c8:7b:87:08:4b:11:52:0f:18:34:9b:df:91:3b:aa:90:
6c:24:27:51:b0:1b:f0:7e:a9:d9:76:3d:ed:34:a9:d9:0f:4c:
c8:27:df:33:17:f1:01:c1:64:9c:55:a7:18:6c:45:7e:93:67:
75:10:96:fb:85:ac:dd:50:f8:cb:33:08:96:0f:53:1f:14:a2:
3b:0c:55:7d:04:fc:9d:92:54:d1:f8:f4:0a:49:1e:18:cd:3a:
41:12:c7:5d:85:28:d4:c3:f2:24:06:43:85:ad:41:80:02:74:
f9:c7:99:19:2a:03:d1:37:09:52:f6:bf:9d:5d:bd:90:c3:a7:
3a:02:7e:f6:2c:18:2c:61:e0:40:7c:c8:91:d1:cb:7e:5c:2a:
37:52:98:03:bd:92:60:5c:66:4c:59:bc:95:f5:d7:34:e2:76:
3a:b9:69:a0:ab:db:d0:f7:f9:47:1a:8b:7b:24:ca:bb:ac:00:
46:5c:9e:2a:06:85:86:24:e6:60:78:21:e2:d8:a7:05:d2:2f:
eb:41:12:16:35:35:97:cd:58:64:4c:11:0e:57:eb:3f:75:95:
50:8a:a8:d6:6a:7e:5a:a1:52:6e:9b:29:6c:87:fd:5f:7b:37:
db:7f:6f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:49 2025 by rpki-client