Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft
File: MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft (raw, json)
Hash identifier: fqYGWIqR5pwvMnNaPkEu7tWFhXNDEcrk07WSfA7/4sA=
Subject key identifier: 62:0F:01:7D:4A:47:23:1A:58:08:DA:01:9C:BD:24:17:52:E7:70:29
Authority key identifier: 30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28
Certificate issuer: /CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft
Manifest number: E4
Signing time: Fri 31 Jan 2025 04:32:19 +0000
Manifest this update: Fri 31 Jan 2025 04:32:18 +0000
Manifest next update: Fri 07 Feb 2025 04:32:18 +0000
Files and hashes: 1: MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl (hash: LXOAn27sNcbSszfsU0/kKJw3jSXEKIUke/LoPBtGJzg=)
2: 02FC3E3C82A511EEA1F2710DC4F9AE02.roa (hash: 6W6Gywd7YHiIdjjDyCFNskNZyB3wgY++Ir7hfO/X2TY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928
Validity
Not Before: Jan 31 04:32:18 2025 GMT
Not After : Feb 7 04:32:18 2025 GMT
Subject: CN=679c5252-ca9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:c2:ee:5e:1e:39:c6:51:58:99:a7:57:ac:
ee:15:96:31:01:ca:41:00:68:ac:d4:f7:89:f5:91:
ff:d0:ab:59:5c:df:18:c5:0c:df:5a:73:d9:5c:ff:
bd:18:99:2a:0c:56:6d:9e:cc:88:89:81:c8:d7:3b:
98:9a:70:63:5c:09:27:2c:cd:14:ba:34:4d:9e:fe:
f0:71:28:5e:48:7a:ec:46:ef:c6:06:78:ab:f3:84:
67:b8:07:fd:f3:cb:67:25:35:37:5c:72:71:25:50:
b2:46:b8:26:1e:bb:33:9f:84:68:1d:ef:30:39:d9:
7d:a7:c9:2a:8c:58:89:5f:11:f1:38:b4:3e:a6:4e:
a5:60:cf:4d:29:bd:95:8f:38:00:ee:39:bc:f9:40:
f5:a8:90:d1:92:02:22:7f:46:72:53:0d:ed:36:72:
72:bd:d5:5a:be:cd:89:3c:01:70:94:39:b3:67:44:
f8:88:a6:2c:29:4f:26:a5:38:76:45:61:c6:c4:68:
60:8a:93:d2:37:bb:e3:59:d2:75:d5:60:e6:14:40:
f9:e7:23:ad:28:55:b5:71:f7:0d:18:b6:f2:72:ff:
45:5f:40:1d:0b:43:46:00:b7:9a:9d:48:ee:5b:59:
dd:40:a6:56:de:68:5d:5f:5a:fa:0a:6e:f5:fc:50:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0F:01:7D:4A:47:23:1A:58:08:DA:01:9C:BD:24:17:52:E7:70:29
X509v3 Authority Key Identifier:
keyid:30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:63:cc:b6:fc:5e:7e:5f:ff:9b:7c:23:7a:93:08:32:1c:58:
fe:ca:e8:54:7d:d2:75:8e:01:df:69:10:70:58:7f:db:fe:52:
28:65:87:80:7b:c2:e7:05:5a:0b:43:92:b6:9f:dd:88:4c:0e:
f6:57:f2:fc:84:9a:3d:0e:bb:25:5d:6b:91:0b:fd:09:00:df:
e1:39:cd:ca:06:28:d1:1e:cc:2c:65:3a:8a:05:f8:cc:db:e4:
43:21:bc:89:70:20:94:71:34:57:08:8d:3b:51:12:d5:fe:98:
d9:5f:cd:09:cc:3e:86:1b:7a:7a:bd:be:80:e9:c7:6e:40:06:
33:a0:b6:a5:ab:9b:31:df:42:5a:93:c5:96:ba:07:46:01:7c:
df:64:04:61:94:17:6b:c1:9f:40:7a:6a:56:f9:96:fb:a9:1f:
74:f8:62:78:ee:08:2e:5d:56:2e:00:ce:9d:c6:c9:64:10:1b:
f9:fc:ab:57:cb:a1:7b:22:8e:49:8f:64:2d:2d:a0:68:3d:90:
bd:4c:ee:e9:18:5b:72:f7:b2:a5:e1:a2:ae:60:52:62:27:0f:
62:12:52:fd:47:e8:d2:d4:80:c4:0b:98:cb:2e:b7:1f:9d:ff:
c4:72:6f:b7:24:ed:bd:d0:ab:d7:f3:f7:b3:39:72:bd:94:3d:
d1:c8:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:56 2025 by rpki-client