Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json)
Hash identifier: k9iowTkAbtY7n4uptn2OI3Ffk+BgK1fr55Ef+cWeroQ=
Subject key identifier: 78:ED:E2:15:20:FF:04:D5:34:90:BA:69:3D:FA:9F:D9:C4:18:5C:D9
Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Certificate serial: 0C1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
Manifest number: 0C0E
Signing time: Fri 31 Jan 2025 18:27:26 +0000
Manifest this update: Fri 31 Jan 2025 18:27:25 +0000
Manifest next update: Fri 07 Feb 2025 18:27:25 +0000
Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: W+xmqdIdglJ7IbMABJU8r18RjMpQ2hQHq+Q2IzoC8HQ=)
2: F3529CDCAE1511EE92D99E46C4F9AE02.roa (hash: hTD7DjMK2EnPCWqJypUdiJk7jUHRPt10GcfYU8sN4po=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3099 (0xc1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Validity
Not Before: Jan 31 18:27:25 2025 GMT
Not After : Feb 7 18:27:25 2025 GMT
Subject: CN=679d160e-604c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:89:64:e4:f3:44:37:d3:19:3c:00:3f:90:
1f:ed:b1:a5:95:a5:df:b2:d4:e6:5a:4c:05:7c:a1:
80:81:8d:97:4a:78:5f:71:b7:be:73:ac:ce:19:0a:
b5:90:92:f8:1e:95:2c:e6:e7:3f:e2:87:ff:12:27:
12:e8:de:e5:71:a4:6e:74:27:2c:42:5d:55:f3:55:
11:14:63:47:46:aa:84:01:d9:74:82:d8:2c:5f:9f:
2c:ff:e8:04:64:78:16:74:53:1a:04:e9:0b:8e:49:
72:2c:f3:fe:ff:b1:fa:4c:53:a1:b7:ed:c4:69:9c:
fe:9a:d7:8d:f4:5f:a2:c8:43:8c:2c:a1:97:cb:16:
0b:2b:90:8f:5e:e7:f8:8c:8b:da:0e:27:2e:64:e9:
05:f8:8f:02:0f:a1:9d:5e:ea:7c:63:86:e5:9e:67:
30:26:65:57:6a:3d:ca:d0:81:7a:99:92:96:45:65:
b8:59:96:e5:dd:69:2b:cb:59:55:a0:ef:ef:f8:0d:
3f:a6:08:4f:0e:17:3b:d7:84:d5:71:e4:d1:bd:46:
0f:8b:1e:f2:fd:90:6b:ac:90:11:aa:ed:a1:0d:49:
8d:ec:1a:9c:cb:01:dc:6f:e8:a5:26:38:d8:28:73:
8e:67:d8:a4:75:5c:74:92:0d:e2:dc:8a:09:43:16:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:ED:E2:15:20:FF:04:D5:34:90:BA:69:3D:FA:9F:D9:C4:18:5C:D9
X509v3 Authority Key Identifier:
keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:e9:c8:f8:1e:a8:44:97:82:21:13:59:1a:77:2f:83:cf:47:
dc:cb:b3:d4:b5:64:33:23:cf:06:73:30:36:58:5f:11:e9:58:
90:ab:5c:f4:c7:63:00:96:55:b9:99:a6:0f:0e:6d:49:db:fe:
3f:11:f4:4a:21:05:1e:ae:52:6b:e6:ad:56:f5:6a:6c:29:bb:
db:77:c0:2a:f2:98:51:c6:83:d5:53:57:4d:eb:e8:30:9b:ee:
57:d9:15:af:2e:f7:33:bc:56:e3:4d:3c:76:1a:31:db:d3:11:
89:21:a2:ce:a0:86:97:3b:48:74:2b:99:99:30:39:21:10:c8:
20:af:00:ff:9c:8f:58:61:4c:05:ff:3e:d0:47:1a:27:3b:29:
45:4c:ce:58:e4:d7:50:5a:1d:ce:08:30:df:5d:63:51:7e:d0:
d1:de:52:ad:54:6c:da:90:c8:f6:f8:21:13:1e:39:c2:47:b2:
ec:4a:f0:79:12:de:78:87:9c:37:6d:78:25:04:35:0f:f1:8c:
43:17:df:70:63:9d:6a:96:31:6d:e1:85:1e:56:11:bd:63:1a:
8c:ab:65:58:76:2b:53:84:76:0b:bc:08:49:da:fe:fb:1d:59:
1a:6a:38:6f:ce:35:d7:33:0c:29:4a:eb:fa:11:bc:2c:cc:93:
77:d1:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:53:39 2025 by rpki-client