Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
File: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json)
Hash identifier: rrI/w1kwo7Dxom8T0Qiwk5borpIC21QB4StWJ0qPd3o=
Subject key identifier: 2E:37:EB:87:CE:F8:40:1D:2F:94:45:00:AB:93:AF:C0:71:2B:59:0F
Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF
Certificate issuer: /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
Manifest number: 75
Signing time: Fri 31 Jan 2025 05:47:53 +0000
Manifest this update: Fri 31 Jan 2025 05:47:52 +0000
Manifest next update: Fri 07 Feb 2025 05:47:52 +0000
Files and hashes: 1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: 5rWK4gfkmpPSXkY5i8YmeMycWcGpmB++kMOlcisAMX0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
Validity
Not Before: Jan 31 05:47:52 2025 GMT
Not After : Feb 7 05:47:52 2025 GMT
Subject: CN=679c6409-a6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9f:cb:ee:76:e8:6a:79:fd:3e:13:4a:6a:fa:
70:00:d3:37:5a:1b:a0:5c:35:8e:25:01:1a:31:e6:
0c:0a:fb:f4:bd:4e:b9:c6:14:61:df:4b:f0:ef:d6:
ea:fb:26:b0:23:42:7c:07:64:f0:58:1e:59:06:b8:
ff:dc:da:53:28:d8:61:89:25:01:5d:3f:bf:1b:cd:
50:0d:d7:03:f0:41:5b:49:cc:9c:eb:82:31:92:29:
7c:64:4e:4c:5d:b7:72:62:fa:8d:df:f8:34:64:b6:
0c:fc:41:c8:4c:92:80:ff:93:6d:29:51:33:7e:05:
a7:39:82:af:7f:ed:e1:8d:b7:26:a6:7c:22:c5:b8:
e9:8f:79:27:50:24:19:31:fe:4d:34:2e:78:b1:41:
31:9f:38:5f:f1:18:36:4b:59:ad:bd:e5:ec:f5:a1:
b6:12:23:45:a4:80:76:5d:4d:fe:88:b8:ba:09:8e:
99:af:f2:7f:c5:21:c2:06:f9:a8:d6:f5:b0:38:f7:
6c:85:38:a2:96:91:75:01:7c:4e:f5:17:ca:17:4a:
23:d7:3e:00:0a:64:08:98:99:38:a7:70:dd:5a:55:
bf:ec:59:53:6b:d4:6e:40:4b:98:43:be:eb:1a:9a:
60:69:e2:00:d7:fc:48:cc:88:91:38:cd:a2:e6:18:
53:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:37:EB:87:CE:F8:40:1D:2F:94:45:00:AB:93:AF:C0:71:2B:59:0F
X509v3 Authority Key Identifier:
keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:8f:e0:4a:c3:f9:dc:24:4c:cc:3e:e0:d1:a9:5e:6e:98:13:
87:d1:c7:a7:70:5f:30:f1:f1:af:d2:8f:aa:ea:e2:86:60:8a:
4c:f2:15:b2:b9:74:0b:69:95:6d:8a:96:ae:e7:7f:ab:af:99:
3a:b5:92:3e:8d:6f:27:58:86:9f:19:b8:24:24:40:71:30:41:
7e:c5:cd:c5:dd:04:9b:eb:9b:23:24:5f:8d:be:74:70:e6:fe:
b6:e9:47:c5:94:ae:96:4e:8a:82:1b:1b:32:46:e2:11:eb:8b:
70:f8:9d:13:ee:8e:10:80:75:92:34:12:c7:15:84:9a:67:fc:
8b:40:a9:53:01:74:ec:5b:7e:fd:a3:0b:0b:c7:cd:a1:4c:67:
67:95:e7:67:56:60:21:12:1f:34:a7:6d:8c:b5:f5:e4:79:c0:
28:98:9e:74:d3:33:3d:6a:83:0d:98:2d:32:ad:4b:11:21:e8:
3d:5b:b9:b7:db:45:43:74:c7:a3:d8:89:da:7a:70:26:51:f2:
e0:72:50:a3:46:b8:4d:63:bb:c9:02:3d:37:ef:df:4a:27:a6:
78:18:41:66:e6:db:d0:31:76:85:2b:3d:6b:6d:5d:f6:4f:25:
72:21:23:c5:ea:c2:97:21:55:cc:a1:e9:6d:1b:1f:14:f8:02:
63:f2:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:43 2025 by rpki-client