Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
File: i0hqzK8SpnqVaI6NEb1ljAQcElo.mft (raw, json)
Hash identifier: VPmfW/3J00O1t1IadkfOrMAM7fZslLtBoujlIpyhBPw=
Subject key identifier: 43:8E:C9:7A:4E:EC:39:A5:E6:5A:AC:89:A6:C9:4E:49:23:62:95:7F
Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
Certificate issuer: /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
Manifest number: 4A
Signing time: Fri 31 Jan 2025 06:23:34 +0000
Manifest this update: Fri 31 Jan 2025 06:23:33 +0000
Manifest next update: Fri 07 Feb 2025 06:23:33 +0000
Files and hashes: 1: i0hqzK8SpnqVaI6NEb1ljAQcElo.crl (hash: ogLmVcGnk4UooD//LvWEBS6KZbPLoOviRymLZEU9rWs=)
2: F305F43270E711EF8573CF71C4F9AE02.roa (hash: aci5Spv/e6z609EwzRrCe3VebaHTH23V/kyd6t5TMtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Validity
Not Before: Jan 31 06:23:33 2025 GMT
Not After : Feb 7 06:23:33 2025 GMT
Subject: CN=679c6c66-ef13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:5f:98:14:bb:5d:fc:23:d2:95:1d:fe:84:
63:07:70:e4:d6:6d:7a:49:7b:e0:95:53:6d:9d:0a:
93:2f:0f:fc:7f:c0:b5:83:b6:f0:aa:c2:06:2f:50:
c5:18:d0:37:2d:d5:ff:a7:ce:1e:fa:b4:52:8c:1a:
0d:8e:68:93:92:de:ff:48:c3:d6:e5:54:62:78:61:
74:27:42:af:6c:aa:36:e2:64:bd:a7:13:12:65:f4:
95:ba:ff:16:14:ac:26:d5:b2:84:77:c7:51:f7:81:
87:c1:a2:95:26:e5:7b:e5:44:7c:3e:0f:d6:9e:ee:
dd:2d:0e:d9:79:4e:e9:13:46:e0:fb:8f:49:a3:37:
81:18:41:0b:c4:cf:4a:69:21:25:1b:7a:6d:e9:c8:
48:ed:59:05:99:50:70:cf:f3:19:23:42:4d:3b:9d:
9f:02:12:bd:4d:08:12:76:cd:b0:73:dd:7a:f4:d5:
f5:3e:9f:f0:8b:31:14:bf:43:22:1a:36:05:18:fd:
e0:02:33:75:5a:4a:8f:dc:4e:ee:c7:bf:1e:8b:fd:
be:c7:7a:44:7a:8a:00:17:a5:de:d3:6a:cc:c5:b1:
56:78:bf:74:b0:92:f5:9b:e6:58:71:e7:cc:7a:b0:
05:73:63:38:e6:f2:f3:c3:9c:ba:a9:87:b2:1b:8e:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8E:C9:7A:4E:EC:39:A5:E6:5A:AC:89:A6:C9:4E:49:23:62:95:7F
X509v3 Authority Key Identifier:
keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f4:96:6d:03:c7:04:5d:da:0a:6c:42:35:74:cc:69:36:02:
fd:70:ab:eb:e0:ef:ff:8a:76:8e:0f:42:c1:0f:1f:5e:e0:74:
c5:f1:66:6a:7a:d1:61:32:55:d6:cb:27:ee:29:45:51:a6:0a:
09:75:6b:d1:17:32:fd:09:d2:ca:a5:e6:a7:48:12:f6:45:0f:
b8:32:84:93:82:99:bb:fd:96:47:5c:2f:74:42:a2:2e:5b:95:
54:50:48:ec:aa:46:22:7d:5c:69:2f:06:e1:8c:33:c4:33:10:
25:6c:8b:b2:3e:53:30:b0:3f:c9:ef:55:ef:b3:2c:72:2f:e8:
ae:e3:09:58:8e:41:52:f0:06:b9:d7:52:2d:a5:45:2a:61:46:
d0:16:49:30:76:28:bb:07:a5:21:bb:f8:4b:8d:0b:ce:ce:0a:
40:24:b7:1d:12:a6:37:70:7d:3a:2c:39:c0:05:f1:05:58:a0:
5c:90:fb:6f:ca:de:3b:55:5c:86:fc:13:3b:9c:40:a0:a0:67:
15:62:c0:26:3d:0a:87:f8:0c:b1:98:b9:8b:33:f0:f8:94:76:
80:5d:da:aa:28:bc:7f:18:fb:8a:26:d6:5d:0b:2c:b3:6b:82:
78:51:69:b7:78:20:c5:84:14:e6:1f:86:81:dd:2b:74:ab:71:
92:2a:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:18:08 2025 by rpki-client