Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
File: 5bRMaejecz32GWYFbn5BXsfHDSo.mft (raw, json)
Hash identifier: Uhzrra5jN2R9Iii1N6WpvEpNfJ5Affye6gHBgT+loyU=
Subject key identifier: 2F:56:9B:5D:7C:2E:09:BE:A7:E6:EE:49:62:4E:D2:61:FC:9A:AB:4A
Authority key identifier: E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A
Certificate issuer: /CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
Manifest number: 6D
Signing time: Fri 31 Jan 2025 05:55:11 +0000
Manifest this update: Fri 31 Jan 2025 05:55:11 +0000
Manifest next update: Fri 07 Feb 2025 05:55:11 +0000
Files and hashes: 1: 5bRMaejecz32GWYFbn5BXsfHDSo.crl (hash: 0SnzPg0qkpwhb1ZImFflgusA0Nw9GX3pusXrMy46r1Q=)
2: 01F62A6438F011EF9A82662BC4F9AE02.roa (hash: 6ibBV+FsUpvviGFZhtbUaWu715IOaDD6qWu96emn7VA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
Validity
Not Before: Jan 31 05:55:11 2025 GMT
Not After : Feb 7 05:55:11 2025 GMT
Subject: CN=679c65bf-ebc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:a1:9c:78:f6:90:06:3a:37:79:76:ea:a2:
e3:f7:d8:29:45:1a:35:ae:b1:e0:72:8f:e4:7f:d0:
9f:c2:86:82:ce:cc:62:70:46:45:29:69:fe:d5:7d:
28:bb:98:5b:25:e8:99:6d:98:3d:63:10:63:ba:1f:
44:ab:f4:c5:f9:f1:7e:38:ad:a5:90:54:87:ae:42:
78:29:b8:02:8d:db:cd:42:9d:c5:10:7b:36:36:01:
9e:fa:87:36:5d:09:f6:a9:a2:55:be:fc:56:e6:4c:
0c:22:9c:e2:2b:fe:1e:63:9c:82:8d:d0:4d:f5:f9:
55:5f:04:4a:68:c2:13:c6:0b:70:35:8c:6d:02:15:
16:a4:c2:07:c7:50:94:42:64:9a:c4:d0:32:12:c4:
cd:7c:95:aa:a9:09:de:a3:2c:30:82:06:f9:3f:de:
bf:64:e0:20:2e:8b:9b:a1:6f:02:3b:62:f3:7c:5e:
19:99:0f:d5:10:c3:2f:7b:ec:57:25:f6:4d:3f:fb:
f6:24:f4:2e:f2:a6:90:80:54:96:bd:d6:0d:bc:3f:
96:ff:fd:74:dd:c5:9d:ec:d9:d7:1d:71:fc:fe:b3:
52:6c:79:01:eb:71:d2:4f:d7:f8:0b:23:5d:86:38:
ec:9a:de:c9:c6:17:97:90:63:5c:db:af:78:e9:d0:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:56:9B:5D:7C:2E:09:BE:A7:E6:EE:49:62:4E:D2:61:FC:9A:AB:4A
X509v3 Authority Key Identifier:
keyid:E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:01:20:95:4d:2b:46:98:c8:ea:76:92:02:5f:aa:5b:e8:9b:
b1:60:ae:5c:d9:0d:1e:c4:6f:c1:fc:2e:db:a8:4f:34:44:a1:
54:e3:df:cf:16:ee:41:8d:3d:15:9a:ce:58:77:20:1f:ff:4a:
7c:48:33:60:30:c5:b1:1e:c6:e0:d1:e8:92:b1:27:b1:c3:8d:
12:7d:53:ef:c8:88:4a:b0:9b:6f:7f:5a:63:51:e8:83:03:85:
16:25:13:ba:0c:c6:35:50:ad:f1:58:f4:1f:ea:1a:ae:37:7a:
d6:6c:e2:34:0f:24:e8:52:d6:f7:10:e6:44:43:54:75:24:08:
8e:1e:06:64:40:b6:ce:26:0f:58:0b:ad:81:f4:74:79:e7:2f:
a7:0a:00:10:43:60:17:a6:9e:95:e5:7d:00:40:47:63:f1:fe:
ce:98:2a:d2:7c:36:a8:72:12:ec:1d:fd:79:5a:9a:bc:f6:71:
ed:23:da:96:0a:12:8c:c5:5d:23:d9:a2:a7:05:30:3c:40:7b:
ef:d6:1d:17:de:41:45:bb:2a:84:54:b3:1f:fd:d4:4f:3e:5a:
81:8d:57:bc:91:29:2b:8a:a1:e1:78:23:d3:66:6d:53:01:d5:
e5:a9:2f:55:be:47:eb:c9:4e:9a:02:c2:6e:fb:c0:59:38:1d:
c4:ee:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:22 2025 by rpki-client