Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
File: IAAAWsWhdEBL07_CmUMyPpYGJbk.mft (raw, json)
Hash identifier: JKEMAT9Jt+YPR+8yfFq2nc6W1BHvWxknxsMAqcGgAFw=
Subject key identifier: 1E:62:31:F8:14:66:84:D3:58:EC:3B:01:E5:4C:9B:3D:3B:F5:29:F2
Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9
Certificate issuer: /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9
Certificate serial: 030B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
Manifest number: 0304
Signing time: Fri 31 Jan 2025 01:19:45 +0000
Manifest this update: Fri 31 Jan 2025 01:19:44 +0000
Manifest next update: Fri 07 Feb 2025 01:19:44 +0000
Files and hashes: 1: IAAAWsWhdEBL07_CmUMyPpYGJbk.crl (hash: 6/ZGRCtntd+uY4ro6Urow7dAND+LjCi291GA5whRz1Y=)
2: 09E46A74C07F11ECB0707F18C4F9AE02.roa (hash: fKQvUorpCo1+t6j4CpNdFsIqffZ/KOuD0j+HaDJA0Es=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9
Validity
Not Before: Jan 31 01:19:44 2025 GMT
Not After : Feb 7 01:19:44 2025 GMT
Subject: CN=679c2530-10a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:64:65:52:8c:e0:e2:24:af:f0:ce:30:f2:
af:d8:b8:78:29:2c:96:81:cb:64:df:72:54:61:2d:
23:92:29:75:d0:91:75:64:be:e4:b4:d0:50:3e:b0:
13:21:9c:27:cd:d5:c3:2d:e2:1c:aa:3a:d6:dd:e5:
6d:bc:43:04:92:fa:42:36:bb:cc:e0:c0:90:32:26:
66:ea:a0:9a:be:54:16:d6:19:94:65:59:d7:3e:27:
87:b1:e6:91:13:12:55:6e:1c:d1:06:1d:90:0a:11:
a8:a4:ac:82:23:5c:ce:6c:d4:0a:62:2c:ae:93:f7:
78:a4:38:3f:41:eb:b2:32:96:db:e7:09:1a:93:52:
b8:44:53:c4:6e:27:88:ad:52:cf:71:be:8c:0e:a3:
f6:cc:05:18:81:8c:1c:24:5e:44:91:d7:50:f9:cc:
f7:12:10:ab:e0:da:a9:3a:3d:c1:32:7a:36:b0:cb:
2a:9a:6f:b6:f9:80:14:6f:bb:01:43:58:8b:26:ec:
cb:ed:dd:84:2e:81:48:70:e4:39:d6:97:0b:03:f9:
73:84:2b:78:2e:41:96:b0:d6:f3:d0:9e:bd:d1:e9:
b9:c8:b1:ed:ce:43:b1:69:ce:ea:e9:7c:aa:30:38:
17:78:34:d0:bd:0f:e2:1e:b8:00:ab:14:34:26:1d:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:62:31:F8:14:66:84:D3:58:EC:3B:01:E5:4C:9B:3D:3B:F5:29:F2
X509v3 Authority Key Identifier:
keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ff:98:e4:fa:64:52:54:2c:12:70:db:fe:33:89:4d:6e:f2:
fb:89:7a:fb:40:e2:5a:0e:ba:2d:68:fb:cf:71:89:79:88:82:
0c:50:56:39:d5:20:d8:0c:e0:a3:24:f4:d0:87:63:20:ec:b1:
04:c5:61:0d:8c:09:82:e7:5e:ec:5d:b0:1d:4c:47:07:87:36:
4c:49:3d:8f:a4:22:10:1c:e9:12:e7:4d:3b:ee:ee:b9:ac:19:
a5:f1:cc:01:9b:59:3d:76:bd:dd:fd:d2:be:7a:e9:c7:9e:fb:
4c:be:22:2d:f8:f6:cf:b2:51:5b:43:30:17:38:2e:fb:ff:f5:
2c:5b:dd:08:24:b7:74:de:5b:53:08:bb:f0:34:cb:ab:00:0d:
2d:51:5a:d3:a2:13:da:9b:3b:8f:97:b3:e2:d9:bd:70:fb:fb:
45:6e:c8:00:b2:d0:90:fc:d5:f3:bf:76:c3:10:9c:b7:13:34:
ff:9c:9c:7f:ff:9c:c7:a2:1b:f6:dd:86:d4:2b:63:aa:fd:ed:
87:4b:6b:a9:d6:03:c5:45:25:91:6f:fc:a4:41:7e:9a:75:b8:
4a:a9:45:e5:7f:49:4a:35:36:11:0a:8b:f0:b5:d1:4a:16:9b:
c1:d6:21:95:d4:13:4a:0e:fb:39:51:f5:66:2e:75:78:e2:df:
97:17:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:04 2025 by rpki-client