Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json)
Hash identifier: sDNpwuB89/3PcZGcCIVX+qRHtL3y/D+axo1DbqsfSY8=
Subject key identifier: 3E:39:BF:74:60:31:8F:57:77:95:A0:AC:4B:D7:2B:9B:07:8D:BE:7F
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial: 0C71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
Manifest number: 0C5B
Signing time: Fri 31 Jan 2025 18:13:40 +0000
Manifest this update: Fri 31 Jan 2025 18:13:40 +0000
Manifest next update: Fri 07 Feb 2025 18:13:40 +0000
Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: v+Kc6+x+F4Lh3ruvJzZVTZY0yzIt7a9CeaJLd1eFqlc=)
2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: w5Dpoxz9EcTss3nAI8ZMtrwKEHayowiUIHwPNhpEFMM=)
3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: Fswv/F/vaivrwx2kQ/qe3AmxF+uS0o5WMUgISHj2Mxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Validity
Not Before: Jan 31 18:13:40 2025 GMT
Not After : Feb 7 18:13:40 2025 GMT
Subject: CN=679d12d4-a2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:06:97:e7:63:22:70:86:01:2c:ee:cf:c3:
d6:d2:18:b5:03:1e:ec:8f:ce:bc:25:be:a9:c8:6a:
e1:9a:6b:1a:2c:83:17:0b:a1:ca:a7:82:ac:a3:0f:
60:7c:fe:60:29:3b:2e:25:40:a8:3e:67:85:07:df:
6d:a6:8f:86:e5:c2:1a:52:23:74:27:b7:ac:25:c0:
36:12:41:dc:18:63:bc:a3:d7:20:39:a6:e0:5a:38:
05:45:6c:b8:a7:53:a9:d3:9f:fb:94:65:80:f9:a1:
20:a5:1d:f2:16:7a:11:90:ba:a0:a4:21:d9:5c:92:
9c:ee:15:24:b8:fc:52:59:55:90:05:df:7b:4e:59:
ac:4d:57:1b:96:b1:d4:78:d2:c0:6d:c6:8c:c3:e6:
ea:15:af:0e:b8:a8:3f:b4:30:b6:20:30:c3:db:55:
70:0b:ba:ba:29:ad:d2:93:8e:68:d5:f8:92:ba:b1:
52:d8:ca:5d:e0:9f:4c:a0:f3:1e:03:b9:bf:8b:eb:
7c:4e:53:5b:82:6b:af:6a:39:f3:45:5b:58:27:5f:
db:9c:3c:12:9f:04:f8:45:d7:de:bb:64:e9:62:21:
dd:0b:8c:69:48:81:b2:07:e8:6f:9d:84:0e:a8:2e:
75:7a:f5:c4:05:9c:cc:91:51:60:22:76:54:f9:f6:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:BF:74:60:31:8F:57:77:95:A0:AC:4B:D7:2B:9B:07:8D:BE:7F
X509v3 Authority Key Identifier:
keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:81:90:4e:60:3b:72:92:99:4b:72:ae:f9:41:a7:1f:a2:80:
b2:f7:8f:b5:18:93:70:92:4b:bd:2b:70:84:3e:a5:e5:76:b5:
7a:02:c0:4a:50:1d:44:58:cd:eb:53:25:3d:47:05:71:47:70:
bf:d9:fe:83:b2:f5:5b:cd:6e:a4:4c:cf:20:0f:31:6d:37:52:
33:fb:95:c5:6a:b3:9e:e6:7a:c4:da:65:8a:da:36:59:f3:c0:
70:68:64:02:34:ad:0e:b7:e8:40:2d:63:e6:8e:51:ab:97:4c:
38:97:2f:75:6e:2a:93:7e:55:5a:d2:51:ec:9b:20:b8:e0:25:
9f:b3:db:b8:b5:cd:55:3e:73:8b:21:22:e4:db:ee:ba:1f:86:
ba:be:1e:49:f0:75:e0:05:b9:e4:32:69:7f:23:76:a8:be:bb:
07:59:b0:b1:22:11:eb:33:59:5e:c1:45:f5:2a:3e:82:44:05:
be:86:12:75:86:e0:b7:ff:55:a8:b4:43:af:1b:7b:cf:13:1f:
b7:1b:17:2a:df:c4:88:bb:62:ae:87:b8:dd:5b:ab:d0:2c:57:
91:13:ed:e0:50:94:0f:c8:0e:08:35:6e:63:28:e9:de:9c:c4:
a0:07:72:36:a1:bf:4e:76:ae:03:91:cf:b1:68:1d:68:70:91:
a1:ae:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:30:53 2025 by rpki-client