Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json)
Hash identifier: h5CXjqHsGZCR4AjBb0xGMddIZKNdqtOEN+oc1kKIZwM=
Subject key identifier: 4D:69:3C:0B:90:79:D6:66:81:7C:EA:C1:72:2D:E1:24:4C:7D:99:56
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
Manifest number: 0187
Signing time: Fri 31 Jan 2025 02:57:45 +0000
Manifest this update: Fri 31 Jan 2025 02:57:44 +0000
Manifest next update: Fri 07 Feb 2025 02:57:44 +0000
Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: FjNcdPjAT6JadZlB/KlCoE6kxbuD8POF/Qy2tLluz4g=)
2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: xyd0ZZrH0VHNsmRtbjg/g57C4k5UyZ1DuB1/mljU4Qg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Validity
Not Before: Jan 31 02:57:44 2025 GMT
Not After : Feb 7 02:57:44 2025 GMT
Subject: CN=679c3c28-7f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:e2:e6:eb:11:47:8e:1a:87:d0:9c:90:f2:
ab:f0:59:99:2d:0d:ae:d5:5c:2f:f1:b7:29:0e:19:
04:39:de:14:2c:3c:a0:80:fd:6b:1b:27:ae:81:5a:
58:5b:bd:59:55:ab:5a:cc:da:70:53:70:30:67:20:
ec:e6:52:8d:1c:20:5b:c4:45:69:89:31:00:51:8f:
2d:86:0f:3c:40:6b:a3:7d:02:7c:64:24:59:b2:96:
65:e3:80:61:4c:8d:ed:2b:3f:0b:d7:f2:1d:4c:8b:
73:d8:6a:63:77:53:60:94:b4:6e:c2:d7:8c:8b:05:
58:aa:8e:f5:1a:29:78:08:cb:25:0d:f9:c7:47:7b:
e7:b8:9e:21:97:f2:d2:1e:8d:4c:fa:22:6a:a2:bb:
66:d4:56:e7:93:35:2a:2d:ce:2a:7f:5d:c5:43:00:
78:22:2b:80:6e:5f:8b:59:01:8c:99:ec:b9:0f:c8:
5e:63:87:00:76:56:7c:a9:05:61:1f:cd:af:d0:32:
c8:17:f9:ce:d7:11:c1:be:da:d8:57:1c:c1:1a:04:
f2:4a:af:96:55:6f:27:a3:01:57:e1:75:38:16:e5:
48:a7:59:a9:c8:81:75:d5:23:05:b2:61:82:f5:55:
f4:b7:80:74:00:b5:6b:7d:ee:96:34:34:5f:5c:2e:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:69:3C:0B:90:79:D6:66:81:7C:EA:C1:72:2D:E1:24:4C:7D:99:56
X509v3 Authority Key Identifier:
keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:66:73:71:ae:66:a3:88:f5:0d:be:b0:07:fd:e6:0d:df:60:
12:b4:80:5b:a9:fb:75:fe:d3:03:29:a9:18:31:dc:87:e9:57:
96:e9:8f:7c:83:8e:27:1d:97:bb:09:3b:22:9e:9b:4f:24:eb:
b3:52:27:da:57:4a:bf:87:f2:b0:6d:0e:1b:85:79:68:70:9c:
cb:55:f3:5d:23:7b:fa:81:a8:af:70:90:28:95:b1:46:d3:64:
57:55:2d:a3:22:ad:76:a6:83:3b:8b:ad:dc:34:ba:22:03:41:
4d:5d:3f:46:d7:e7:10:b5:33:6f:aa:79:36:ee:ff:84:21:0f:
e2:f3:bf:48:9a:a9:ca:5e:5e:2b:33:ca:54:cf:9b:5f:19:b9:
b5:cb:87:a3:aa:6b:61:99:b9:df:c1:93:cb:41:73:b7:2d:d1:
83:32:7a:c2:ad:0d:5c:d4:27:f2:04:0b:d1:9d:f9:56:f6:37:
a9:c4:62:45:c5:f2:f3:04:96:87:77:47:62:d7:83:83:f3:22:
32:ee:92:1c:de:f9:f1:47:a4:a1:d1:04:03:22:94:f6:1a:60:
f7:29:ad:1b:1f:40:85:14:aa:61:11:1d:d3:fa:7e:74:bb:a9:
35:cb:1d:65:ed:69:33:de:5a:09:31:22:e7:b9:22:67:88:bb:
90:76:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:00 2025 by rpki-client