Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json)
Hash identifier: 5BJNWkInhU2EoDDK3fLx+wfx33aq4crVnjJypH+lGfg=
Subject key identifier: 67:C3:8E:27:BC:CC:1F:75:ED:C1:E6:E5:7D:E8:49:81:E2:BA:30:2B
Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C
Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C
Certificate serial: 0467
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
Manifest number: 0463
Signing time: Fri 31 Jan 2025 00:11:54 +0000
Manifest this update: Fri 31 Jan 2025 00:11:53 +0000
Manifest next update: Fri 07 Feb 2025 00:11:53 +0000
Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: W8BGEQk0VfeWVgujAfLozGLLhYU0kSk0Hqtv0ctV1rg=)
2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: 8D/20Uwr6gsdj74w8re/Pl0pD6S5jZ4kXrR8EA86scs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127 (0x467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C
Validity
Not Before: Jan 31 00:11:53 2025 GMT
Not After : Feb 7 00:11:53 2025 GMT
Subject: CN=679c1549-2ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:4d:b4:1a:33:41:d6:30:e5:86:9f:f1:0b:
b8:81:69:df:81:25:a9:90:9b:f8:bb:87:ec:88:8d:
03:ae:82:74:3c:9d:71:5c:d9:ff:f0:f5:01:46:30:
14:46:3a:52:e1:e1:7c:ca:3f:4d:a3:d5:72:5d:9e:
da:6a:82:62:98:c5:3c:db:c2:2f:b8:4f:9b:cb:d3:
24:5d:88:f8:28:43:34:50:9a:62:f5:14:1f:08:78:
28:a6:55:55:0e:13:e8:bd:91:2a:16:2b:bd:1c:2e:
d5:d1:f7:55:75:4d:64:c1:cd:c2:3b:f8:b0:22:05:
f8:1c:d7:d2:71:0c:f2:e6:3c:8a:1d:26:ab:64:db:
ca:d1:d7:dc:a4:4b:3c:68:ad:50:3f:9f:28:b0:3b:
f8:34:44:9b:20:e7:af:96:0a:2c:b0:8b:68:14:c6:
22:60:27:7b:1b:a4:d5:1a:f1:1c:d5:9f:b1:a7:98:
ee:01:47:57:18:32:07:d2:df:f3:de:f1:ee:cc:0b:
99:da:c5:b7:4f:c5:3f:4e:73:f2:24:56:c6:80:4d:
13:10:8e:48:b9:4f:24:3d:f9:b3:c3:73:6d:46:80:
4d:18:aa:8e:2e:c1:54:64:1a:16:df:e6:40:7c:7a:
ae:17:33:96:e1:a6:ad:1f:a6:62:94:75:62:6c:80:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C3:8E:27:BC:CC:1F:75:ED:C1:E6:E5:7D:E8:49:81:E2:BA:30:2B
X509v3 Authority Key Identifier:
keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:be:29:c0:06:2b:fe:ea:4a:e0:cf:c8:e6:e5:c7:b4:5e:2f:
e6:ce:81:cc:0b:9c:38:83:11:a3:d9:40:54:db:cd:c4:1c:c2:
50:7f:db:0d:f5:d7:6e:6e:31:59:c9:02:72:2a:93:38:f8:f0:
a3:ec:22:1f:8c:25:5d:29:e0:20:5c:1c:9d:be:98:c8:a6:69:
2c:ec:eb:2f:7b:47:75:98:76:9d:6c:d6:73:d7:9a:39:4b:7a:
dd:7b:fc:d7:64:f4:65:9d:db:87:2d:b4:6d:ab:12:cb:c4:05:
fd:af:cf:a6:bd:89:d9:f1:a8:4e:46:05:45:f9:26:b8:4a:32:
6b:ee:08:6a:5a:f5:80:ff:f5:ee:c8:5e:53:07:a9:a9:69:76:
07:62:86:6a:6e:40:43:ca:6e:66:2b:4f:76:b5:bb:20:2c:84:
4b:13:1d:8e:58:5e:65:3d:13:e2:4d:de:15:ea:aa:9d:3f:f5:
ea:a6:9f:34:d0:0d:ea:84:2d:51:36:e9:d8:fe:fe:e2:aa:cf:
89:82:b5:9a:c3:70:4d:4a:8f:82:2d:a0:fa:a7:47:91:9a:99:
7e:6c:fa:94:81:a2:f0:64:8c:21:2b:21:c0:7d:b0:48:c0:eb:
d8:9b:03:d1:f5:ff:1f:2a:d1:74:63:de:0d:22:53:ff:97:2d:
91:06:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:57 2025 by rpki-client