Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
File: bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json)
Hash identifier: Gl5B6Ha0Im4vSntrrMTj8YTJKq2NCshPLS4d/+cwDsM=
Subject key identifier: CD:EB:87:44:D5:48:DE:F2:16:D3:4C:FA:C6:0D:15:30:30:2B:24:F5
Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
Certificate issuer: /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
Manifest number: 94
Signing time: Fri 31 Jan 2025 05:36:36 +0000
Manifest this update: Fri 31 Jan 2025 05:36:35 +0000
Manifest next update: Fri 07 Feb 2025 05:36:35 +0000
Files and hashes: 1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: QbwExsDZDex0I3K2eLCA6l7DtBDJY3En5tL6reJ/9/4=)
2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: hJsUf4TXH8x/dBCx0NqRGC8PLycMzLRzxEAEp3v9Kv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
Validity
Not Before: Jan 31 05:36:35 2025 GMT
Not After : Feb 7 05:36:35 2025 GMT
Subject: CN=679c6164-70e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:d4:42:82:31:a1:0b:81:86:41:e1:6e:80:
2b:83:50:b8:79:0c:0e:15:83:21:75:f9:17:51:95:
d3:bf:b7:24:70:4d:96:7a:2a:c2:de:28:2c:0b:81:
22:1a:a2:bb:90:6f:12:ae:89:14:8d:19:4f:3e:fa:
90:0a:e8:12:45:56:95:e4:55:52:b8:d2:8b:8f:23:
f8:47:63:39:0b:63:13:80:1f:01:2e:28:ec:bc:dc:
31:14:be:1a:2b:49:0e:f0:d1:95:3a:26:41:bb:61:
7c:bd:25:7b:b3:50:d6:6d:93:4a:b4:cf:24:d7:32:
f3:1b:95:2a:6c:fa:2e:4d:ec:90:69:f2:76:24:c7:
7e:bb:64:f0:4e:2d:87:dd:a1:53:58:12:63:f2:bb:
a5:04:42:f7:7e:09:68:cf:bf:70:7d:ec:d5:e7:33:
39:58:e1:f4:c9:04:98:f3:55:f1:ca:1d:a4:d5:36:
d7:ef:08:fc:0f:76:2d:fe:6d:25:87:3c:80:a8:a4:
4a:5b:03:53:12:c7:e2:b2:59:4e:01:81:8e:28:95:
f8:1a:eb:8a:5b:d5:72:10:76:c4:32:c0:d0:77:74:
83:82:b0:7d:4b:57:b5:44:51:56:51:34:26:4e:11:
c3:77:7c:50:09:be:6d:30:9a:99:27:25:9c:27:5b:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EB:87:44:D5:48:DE:F2:16:D3:4C:FA:C6:0D:15:30:30:2B:24:F5
X509v3 Authority Key Identifier:
keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:71:ef:a4:5c:b1:a8:69:8c:08:7c:21:0e:08:ab:86:fb:02:
16:0f:77:9e:32:bb:8e:da:1a:ea:81:5f:52:52:68:df:b3:6a:
fb:48:dc:8e:49:af:0e:25:15:b5:9b:30:38:59:0f:ce:75:57:
93:32:12:e3:b0:38:05:48:b5:a7:69:59:b0:c9:90:98:96:f9:
86:8b:eb:4f:a7:9e:18:a1:c3:40:79:04:ca:37:1d:52:2a:e8:
8d:5c:4f:e0:20:b9:54:35:a3:36:b1:c7:c3:ce:4a:c5:4d:76:
cd:8a:1f:3e:bd:74:7a:62:89:e5:cc:e7:70:d2:b8:dc:97:92:
e7:ec:4b:99:bb:70:2c:52:eb:9b:8e:15:c4:ed:f9:26:09:06:
a9:c0:e5:a2:9b:73:0b:e9:f7:f5:e5:d4:44:35:11:fb:b2:9f:
03:e1:1c:b4:ba:aa:a5:07:a0:ca:28:e6:9c:56:d1:51:ad:af:
9c:a0:69:4e:fc:6e:f0:b1:cd:49:9f:a2:d5:40:7f:a1:47:00:
a2:10:39:d9:2e:a0:e2:75:f4:c1:df:8f:2a:8c:18:8a:05:55:
15:39:aa:aa:0c:4a:10:72:9d:1a:f9:81:be:7f:b8:59:84:c4:
e4:81:d8:78:58:24:d4:d6:25:8f:7c:ba:1d:10:f7:28:c7:19:
38:b8:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:34:49 2025 by rpki-client