Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json)
Hash identifier: JE6SbFciH5CalL8p3DYkX+EyWiTbmc8CYhi95f+GGss=
Subject key identifier: AF:09:3C:55:FE:EE:C3:84:C9:6D:9C:80:CB:3B:CD:88:73:61:F2:7F
Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD
Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
Manifest number: 25
Signing time: Fri 31 Jan 2025 06:56:50 +0000
Manifest this update: Fri 31 Jan 2025 06:56:49 +0000
Manifest next update: Fri 07 Feb 2025 06:56:49 +0000
Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: nD4ARy9AKNs2auUDK+u3caxV4S7JNjAp/bc1GxUXUCE=)
2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
Validity
Not Before: Jan 31 06:56:49 2025 GMT
Not After : Feb 7 06:56:49 2025 GMT
Subject: CN=679c7431-6b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:15:8f:5a:58:a3:ed:19:ff:65:78:47:b9:
cd:5c:9b:9e:a2:f1:30:58:43:93:cf:d5:b1:db:36:
f7:da:5d:e3:50:55:53:a1:4e:6f:93:2f:ed:91:ed:
c5:b5:5c:c7:58:74:51:5b:41:3c:af:b8:d3:73:37:
06:b0:8a:6c:45:c6:5b:38:43:bb:50:cf:4f:e3:12:
fb:78:c9:d5:49:19:7e:71:14:52:67:c3:b2:f2:39:
dc:5e:04:8a:86:43:aa:34:68:3d:ea:56:47:98:4c:
6d:5e:36:b9:aa:92:23:c4:bd:17:d0:64:73:2d:e9:
a7:85:d8:b3:70:d1:85:bb:19:c1:b2:6b:a0:07:9a:
a5:49:2e:bc:9f:89:5e:5d:3d:6a:ad:6f:29:71:8c:
8e:d4:72:de:64:77:dd:dc:e4:bd:56:31:ce:f7:bf:
ae:97:c5:98:19:8d:6f:da:cc:24:5f:75:15:3c:15:
54:03:14:15:2b:01:f4:13:f0:9a:36:5b:c6:45:e2:
26:3f:e4:cf:9a:c9:c0:2b:09:73:ae:77:ee:f3:29:
75:80:f9:58:75:88:06:c9:4a:cd:c3:46:3d:c2:8b:
40:95:c0:8c:34:12:52:6e:5b:a2:01:77:95:63:ac:
41:a0:d1:73:8f:41:b5:31:dd:a1:10:55:47:ea:4e:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:3C:55:FE:EE:C3:84:C9:6D:9C:80:CB:3B:CD:88:73:61:F2:7F
X509v3 Authority Key Identifier:
keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:95:a8:07:c0:2f:e8:a4:4a:6c:b9:7f:e0:ec:93:ef:9a:ee:
13:bb:0e:07:de:cc:dd:5c:e5:c5:e6:eb:dc:10:fe:fb:c2:77:
72:39:ce:dd:a9:ab:4f:a5:61:95:ab:d3:e1:30:83:76:5c:1a:
c0:93:99:49:7e:1e:d0:4c:29:c0:90:f6:06:41:fe:30:24:6e:
6d:15:ea:0c:54:a1:0d:fc:e6:91:08:5d:6f:46:8b:53:59:88:
2f:43:69:81:6b:ad:e2:c3:f2:54:a6:93:42:2c:24:2c:42:fd:
ab:71:dc:7a:cf:94:8e:70:e0:77:08:41:ce:9a:64:cc:fb:13:
b0:3a:e1:8e:e9:6d:79:4d:83:35:72:7b:f0:61:45:f3:76:94:
ab:4f:96:8d:0e:6e:be:a7:cd:24:33:49:f3:98:45:68:c6:f5:
1c:4d:9b:3f:60:cb:0f:35:a5:47:96:a0:0d:0e:1f:da:1e:98:
f2:07:06:95:c3:25:70:85:e5:4f:cb:18:1c:79:8d:38:68:70:
9d:24:c0:08:4d:05:91:7d:f1:c4:98:16:02:3f:cf:46:ec:37:
a3:03:76:e8:af:62:3c:0f:c9:02:97:72:84:6d:47:04:1b:e0:
fe:93:1f:88:07:c1:61:4e:41:f2:aa:ce:cc:94:45:f4:ab:1f:
62:d3:c2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:00:08 2025 by rpki-client