Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
File: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json)
Hash identifier: MLZ43DsfFRMkN5Lbj3HOXbkoazEJsnWV3MzzmhvvwZo=
Subject key identifier: 71:9B:5B:78:6E:9E:72:8D:A6:3F:64:AE:1F:57:44:42:5E:00:0F:5A
Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
Certificate issuer: /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
Manifest number: 5A
Signing time: Fri 31 Jan 2025 06:09:27 +0000
Manifest this update: Fri 31 Jan 2025 06:09:26 +0000
Manifest next update: Fri 07 Feb 2025 06:09:26 +0000
Files and hashes: 1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: 5sXlsZZOnkjSQ4n070NUD95+gGAfemMPbSNp5v0WK6A=)
2: F47CB05C5AE011EFB4CD7428C4F9AE02.roa (hash: dP/ms8awhu5P0L5X1kq3UaHwPpJfEdsfRvw8IFgrpFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Validity
Not Before: Jan 31 06:09:26 2025 GMT
Not After : Feb 7 06:09:26 2025 GMT
Subject: CN=679c6916-108a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:93:09:b2:5b:6e:38:35:15:6f:20:66:85:
3d:d1:74:88:ab:6c:67:a4:a1:68:c8:14:4f:5a:91:
99:fa:4c:e2:d7:2a:ed:1e:41:6b:2b:f1:c9:9a:b0:
a7:57:ed:51:bf:87:bc:63:22:96:ff:93:f7:59:8f:
99:e0:4c:06:0d:41:05:7a:7b:1f:ad:30:04:a2:99:
97:3f:f7:38:af:d1:96:6b:91:6c:5b:37:11:1c:9c:
f8:38:0a:d4:f9:6d:6d:e8:c3:3f:9f:0a:70:32:da:
83:e5:5c:ba:65:ab:a1:8b:ef:23:b1:ce:b5:a8:85:
9a:57:76:40:90:bc:e1:7b:4a:11:dc:ee:d5:4e:be:
b0:e8:23:f5:9b:7d:36:04:a7:2b:70:f6:bf:4b:08:
ba:60:29:44:25:af:ed:e2:4c:eb:2e:1d:50:06:34:
cd:2b:81:c6:f4:3a:db:d0:b6:1f:1e:11:0b:f9:3e:
08:3e:19:46:8a:16:27:9a:ff:bd:2d:3e:77:a3:5e:
70:7c:e1:00:53:3f:08:8c:85:58:da:48:60:03:d0:
fb:86:7d:f1:43:c2:d3:fb:4e:5a:bb:e6:e3:c3:3a:
3e:66:1d:83:5a:9f:bd:fb:77:09:31:00:03:d6:3a:
d5:2b:41:af:58:8e:f3:b1:0a:33:29:9f:61:bd:63:
f7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9B:5B:78:6E:9E:72:8D:A6:3F:64:AE:1F:57:44:42:5E:00:0F:5A
X509v3 Authority Key Identifier:
keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:62:cf:26:92:aa:ff:99:23:01:e3:09:4d:c7:b6:4b:59:
4b:cb:de:71:db:95:c8:a9:88:f9:1b:e1:db:32:74:bc:ca:9a:
b1:c9:92:ee:e5:7b:ff:26:d6:5b:fd:0b:df:c9:1c:01:00:7d:
93:5c:80:7b:30:f6:66:36:54:54:f4:a1:6b:bd:1d:63:8f:32:
9a:1b:99:1b:16:23:09:6e:85:2b:d3:5e:26:0f:73:e5:a3:48:
c6:da:d1:5e:51:29:7b:df:85:31:a1:bf:7f:9d:4d:90:0f:9a:
7d:55:a2:1a:29:a1:d7:de:9a:85:d1:72:99:1a:b9:7d:20:be:
38:58:47:73:ff:4d:00:dd:a7:e1:01:8c:37:a3:e9:5d:52:b6:
dd:ff:5a:ed:02:39:4e:99:31:81:86:4a:dd:79:ce:8e:9c:8d:
6c:38:bf:84:20:8b:7e:7b:ef:a0:0f:a6:e3:d2:d6:43:de:fa:
da:9a:a2:ac:66:63:3f:c8:bc:0d:78:4e:fd:ee:54:86:fa:99:
f7:e0:84:8c:10:fb:ac:bb:60:40:53:aa:90:64:3b:7e:57:64:
d3:2b:96:c7:30:bf:85:7e:0d:5a:9e:0b:f8:79:dc:d1:34:8b:
ea:ba:02:59:cd:fe:39:3e:c3:6b:27:47:07:2c:00:b4:80:15:
38:7b:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:43 2025 by rpki-client