Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json)
Hash identifier: xkr0bukTN/jooH0lcRfHJ7lcB+KDPZ3guZ0DUSZtnNQ=
Subject key identifier: A1:00:42:E5:FC:5B:68:BB:EB:60:6B:82:62:94:5D:98:84:23:FE:AC
Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
Manifest number: D5
Signing time: Fri 31 Jan 2025 04:53:09 +0000
Manifest this update: Fri 31 Jan 2025 04:53:09 +0000
Manifest next update: Fri 07 Feb 2025 04:53:09 +0000
Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: Dg/vpK3fKXRRrABUSHzpaCD3nAM5Vu0puND1oFo5yl0=)
2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: MXnU/QcuEmDKktg0CnuwolgKiFkbHbMHOSWdEnSOv5c=)
3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: S3mbIiQ1nO0L4Bz9sTuCjtwzB96XobjR5ufSof/xnsw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Validity
Not Before: Jan 31 04:53:09 2025 GMT
Not After : Feb 7 04:53:09 2025 GMT
Subject: CN=679c5735-6e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:cb:b1:f3:01:88:3c:67:8d:18:21:ce:fd:
5b:92:7d:90:4d:37:95:d8:a5:27:af:a0:59:36:9b:
88:4f:35:0b:0e:55:ac:6f:57:85:0a:4f:f4:f0:e7:
db:53:2b:9a:ac:62:e7:d2:c1:15:42:d2:84:e6:fe:
5f:c9:16:40:a7:d6:27:f2:b3:b7:e7:5e:13:25:4b:
dd:96:b9:bf:5c:4d:de:5d:f1:e1:ec:d8:59:10:f7:
d9:1a:c5:79:21:3c:ca:e1:ab:f6:f4:9e:1c:28:d4:
ba:c5:c9:e9:ca:7d:c7:f3:02:62:60:3b:9f:33:c2:
32:82:b3:f2:47:20:c9:f7:96:8a:91:30:4c:42:53:
0f:bf:07:06:2c:54:ff:e1:dc:05:26:5e:5e:0d:20:
9f:13:41:16:a0:7f:df:c1:a0:8e:93:b1:11:72:0c:
57:4e:ac:58:36:a5:18:91:49:11:12:60:28:0c:70:
cf:13:7a:6b:a0:93:79:83:d9:03:04:4c:77:01:f5:
ee:cc:9c:1a:b7:70:83:4b:f8:b8:ed:f7:33:f0:99:
7d:de:18:21:be:29:ef:d4:26:a2:96:9f:be:98:62:
24:69:86:7d:88:93:4c:4c:60:38:d3:68:a8:b5:0d:
4f:07:19:54:4d:c9:f8:6b:e5:b3:2c:05:47:8d:94:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:00:42:E5:FC:5B:68:BB:EB:60:6B:82:62:94:5D:98:84:23:FE:AC
X509v3 Authority Key Identifier:
keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:dc:54:17:23:33:21:7e:7d:4a:23:bf:bb:c7:d4:19:53:ca:
6b:af:dd:f0:6c:95:03:7b:a3:9b:ce:74:26:23:68:da:d3:88:
1a:1b:ea:a3:66:c6:8e:5b:1f:db:99:9e:b2:99:37:d2:3c:63:
88:70:d7:2e:0a:b5:f4:2d:03:fe:ca:4c:1e:57:ca:3f:93:13:
b7:99:3f:ad:b7:7c:f6:9f:5c:86:c3:a0:27:2f:f8:fb:e0:82:
e2:f6:c4:ec:3c:00:e5:6b:96:86:95:8a:2f:46:fd:33:9d:fb:
24:42:95:0a:67:00:86:ab:c9:2e:1e:90:29:38:1c:a2:1a:fe:
ca:b3:e5:f3:8c:bd:9a:27:5a:ce:c7:23:4b:f4:8b:36:2d:73:
36:ce:27:93:d6:60:7b:a4:a8:97:ce:cf:0f:6a:59:51:9c:87:
82:bf:ab:0e:ba:1d:f5:28:82:db:63:24:f8:f7:0e:b8:6a:a9:
f6:e8:c1:ce:92:11:e6:e7:2a:bd:bf:a4:40:a4:97:f1:9d:7c:
98:3c:11:39:85:ad:1c:64:b1:54:96:90:36:a4:dc:0a:1c:3c:
d8:6d:24:6e:04:a9:de:16:ef:7f:c4:88:d5:49:01:42:37:e3:
85:d5:22:2f:4c:86:f0:35:08:95:3f:05:4c:77:f1:b1:7c:bb:
bf:40:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:49 2025 by rpki-client