Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
File: eKfTXvnEd150y6PRZrYbdZAkFSM.mft (raw, json)
Hash identifier: KbqEcw2pW4QvLSAUsrxddEOy/90pgBYaewBThOjLwH8=
Subject key identifier: 4C:31:04:61:F1:45:1D:67:87:50:FB:D9:B5:E9:80:C6:08:23:F3:83
Authority key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23
Certificate issuer: /CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
Manifest number: 25
Signing time: Fri 31 Jan 2025 06:52:13 +0000
Manifest this update: Fri 31 Jan 2025 06:52:13 +0000
Manifest next update: Fri 07 Feb 2025 06:52:13 +0000
Files and hashes: 1: eKfTXvnEd150y6PRZrYbdZAkFSM.crl (hash: QfMB/frgtz/pugrY69QyCH5T4xkBYYNHEm5skTVekso=)
2: 8DDD0D56A98C11EFAAC0F364C4F9AE02.roa (hash: yg1U4JyDYBAoLLqLQFnhNTd+uuZ0oKhea1PeFahobmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523
Validity
Not Before: Jan 31 06:52:13 2025 GMT
Not After : Feb 7 06:52:13 2025 GMT
Subject: CN=679c731d-8346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:5d:11:51:74:fd:9f:57:99:8a:39:77:09:
5e:6d:39:c3:29:d3:c4:c7:a7:db:01:0c:77:e9:8a:
78:e9:92:2f:27:28:11:7c:88:83:84:c6:34:1a:75:
5f:89:56:be:82:8a:8f:95:47:cc:0b:d2:aa:cc:87:
f3:55:ac:42:a5:f6:c1:7b:c6:44:30:94:d1:76:fb:
a8:1a:5d:9e:36:44:18:e6:8e:68:88:81:88:0d:6f:
a6:64:4c:e6:2d:90:b1:b3:d6:a4:34:6a:1a:c6:98:
a8:a0:14:d5:df:bf:47:06:86:50:34:fd:ef:aa:dc:
a0:17:d2:7e:a3:97:fb:46:04:32:e0:43:91:26:aa:
8a:ec:c0:07:23:fa:cc:53:7b:e0:3a:81:ff:ee:56:
27:c2:38:e5:45:b4:69:6e:30:b6:ee:55:59:db:9b:
c4:44:5b:b4:d3:91:7b:a1:c6:73:0c:10:65:3f:60:
33:75:88:8d:1f:4d:f9:8d:27:e6:74:47:6a:d9:84:
8b:92:13:fc:71:dc:df:7f:f5:d2:5d:aa:bf:bc:b4:
48:f9:58:8b:58:e6:d6:1f:67:0b:ee:d2:88:d6:a0:
3b:8e:87:35:24:bc:bc:5c:af:c2:83:dc:44:20:ab:
71:87:c1:7e:67:3d:57:9e:95:f2:9a:69:0b:b0:82:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:31:04:61:F1:45:1D:67:87:50:FB:D9:B5:E9:80:C6:08:23:F3:83
X509v3 Authority Key Identifier:
keyid:78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:14:a3:dd:d2:86:ae:4f:45:f9:0a:7c:12:b7:eb:f1:0c:fd:
75:04:4d:61:e0:da:b5:c3:04:c6:db:34:7a:7c:6b:de:b0:9e:
d0:8e:59:58:9f:33:ac:17:30:1c:bc:bb:8a:0f:eb:a4:9f:1c:
94:c1:8c:f7:28:fc:f7:b2:77:4c:5f:9e:21:8f:e9:92:23:78:
ad:0e:71:ea:7f:72:33:9d:87:25:89:73:07:6a:44:6c:81:83:
2c:e4:6a:7f:55:a5:6d:01:28:44:9e:ca:31:ae:81:c1:c0:ef:
b3:19:d2:f3:19:25:6a:b5:a7:7c:b1:52:13:62:99:08:f3:2d:
83:30:2d:b7:f7:6e:81:ee:8a:f1:2e:ff:71:c5:84:65:a9:cb:
2e:e6:d5:a7:54:b2:58:59:64:c9:01:8c:20:4b:80:92:ed:40:
30:fa:e6:91:a0:3d:0b:2a:3a:75:d3:c2:bd:0d:77:d2:53:24:
f1:42:a7:80:93:ea:b3:3d:84:e3:92:12:9c:69:a6:d9:d2:81:
be:1d:51:97:78:93:58:d6:96:42:31:9a:60:c1:2f:19:81:4d:
22:9d:a6:8e:e6:0b:81:e1:92:63:0f:04:0c:f9:96:03:c1:fe:
4f:6c:cd:ed:62:da:ef:67:cb:51:0c:b6:97:75:b5:11:45:74:
bb:4a:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:25 2025 by rpki-client