Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json)
Hash identifier: C3+THM1KOHDSY9Hz/MfuUn2oTfi808BIMwTCRUmj++8=
Subject key identifier: 47:4C:72:D0:B1:97:F9:B0:DE:EE:4D:DD:17:E7:A5:2A:4B:9B:16:C6
Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73
Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
Certificate serial: 0C73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
Manifest number: 0C66
Signing time: Fri 31 Jan 2025 18:12:18 +0000
Manifest this update: Fri 31 Jan 2025 18:12:17 +0000
Manifest next update: Fri 07 Feb 2025 18:12:17 +0000
Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: jmKZwdBU5TxIzQxY9rH5gkVRK7iwS1bgl+fIWuaI2Wc=)
2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: chBs/iSmoBtAd9EtvA3mnCGyh8XU8yYYJZGBD7EHNow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3187 (0xc73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
Validity
Not Before: Jan 31 18:12:17 2025 GMT
Not After : Feb 7 18:12:17 2025 GMT
Subject: CN=679d1282-bf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:df:f8:6d:bd:69:8c:c2:16:16:f9:68:8a:02:
d0:f4:f7:45:7a:1c:41:ca:4e:7b:45:53:91:7a:06:
8c:ca:02:4d:01:d8:23:a8:bb:34:c1:03:fe:c9:9f:
52:13:3a:19:61:0e:2e:9c:d1:7a:2f:4c:44:39:f7:
bd:4c:97:75:8c:64:69:9f:74:55:02:16:7c:69:71:
ff:33:e4:7f:f3:9b:92:ef:f2:17:69:d7:42:14:0f:
f1:cc:5e:32:59:43:6a:c6:fe:a6:c9:69:b4:b0:3e:
e9:69:a3:52:12:92:99:25:9e:43:1b:7a:86:84:87:
98:5c:bc:28:1b:6a:d9:73:4d:5a:0b:d6:a1:83:90:
a2:f4:7d:d9:7a:97:a6:e9:60:e8:22:22:ac:d4:da:
fc:44:a0:17:f3:12:18:d1:95:02:6c:0d:a5:7a:de:
72:4b:00:3c:f4:5b:ee:4b:39:40:c0:66:2e:97:81:
cb:5d:00:de:81:d4:d0:ee:3f:b1:86:98:ce:d9:e4:
7c:73:48:21:b4:2a:a4:56:69:e7:d8:90:ca:ec:93:
a8:28:50:b4:f3:36:5a:04:21:26:34:46:0e:e9:e5:
e6:19:74:ce:ca:51:a1:44:f0:f8:cd:c0:60:8a:22:
4c:3f:00:95:4b:32:94:5f:47:f4:ee:b9:02:67:65:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4C:72:D0:B1:97:F9:B0:DE:EE:4D:DD:17:E7:A5:2A:4B:9B:16:C6
X509v3 Authority Key Identifier:
keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:96:94:8d:5e:21:49:2e:4f:db:7f:ed:c0:6d:6e:f0:17:3c:
93:71:01:e9:03:bb:62:8c:6d:2c:cc:cd:f4:2d:a9:b7:63:13:
76:be:9c:91:b6:a7:f1:39:41:75:82:44:66:6c:f2:ee:b2:d8:
f6:77:33:05:23:06:1e:b7:2e:2e:d7:4f:22:dc:52:26:27:26:
fc:04:13:c1:6b:4d:08:69:db:3b:50:e6:9b:e2:2a:ce:de:e0:
15:63:ef:e8:6d:61:8f:ab:da:0d:20:32:a9:1d:a2:0e:d9:8b:
a8:67:97:7e:2b:f2:d2:0a:ff:6c:45:59:0d:31:c7:3f:4f:75:
37:2a:14:c9:2b:7d:f1:34:85:b0:03:c5:b2:8e:19:ba:03:9f:
a2:c1:43:e1:9f:e5:a6:63:86:bb:45:ad:b4:c0:75:73:72:97:
d9:f3:6f:83:52:97:38:b0:27:3c:05:88:a8:58:6f:ca:12:d8:
b3:5c:40:1c:75:68:82:64:ee:25:f5:fb:e8:3a:e7:41:f4:69:
ab:16:85:e0:73:3d:d2:5a:b8:ed:6d:01:1d:9d:fd:98:cf:4f:
79:c1:5b:e4:ef:6a:14:e7:e1:1f:87:7b:ab:69:ea:7d:e7:db:
d2:9d:56:9f:37:0b:a7:2f:a1:52:42:01:dd:40:3b:03:a7:71:
a8:44:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:17 2025 by rpki-client