Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
File: x52oqmnxJno4UemSoGnAL1DoArw.mft (raw, json)
Hash identifier: U4dO4zEzHLMOxMQld4NQilkRv78WitT7vp1lHtk1buc=
Subject key identifier: 8F:67:81:DC:01:FB:24:9C:A4:F6:1F:17:2A:AC:70:F7:77:A5:B3:76
Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
Certificate issuer: /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
Manifest number: 011E
Signing time: Fri 31 Jan 2025 03:53:22 +0000
Manifest this update: Fri 31 Jan 2025 03:53:21 +0000
Manifest next update: Fri 07 Feb 2025 03:53:21 +0000
Files and hashes: 1: x52oqmnxJno4UemSoGnAL1DoArw.crl (hash: 45moDaCDg5iQsNxdPTRLRIT9LxHy5X/xQpZ/7Iy4djc=)
2: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (hash: ljYZPmOEJ2gVmqt+FLp/8ARO8gytp4GPuoxvLwL03ls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC
Validity
Not Before: Jan 31 03:53:21 2025 GMT
Not After : Feb 7 03:53:21 2025 GMT
Subject: CN=679c4931-5899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:3d:1a:99:5f:57:34:28:1a:b3:d5:c7:b0:
c9:42:a0:bb:20:c9:b4:39:d6:56:ea:97:cf:59:4f:
66:21:44:c6:c5:68:fa:dc:a4:ec:d4:26:07:04:e8:
34:85:20:aa:9c:58:36:2f:4b:68:e4:c3:f6:a4:8e:
06:55:6e:86:aa:61:75:ac:5d:1e:ad:0f:f1:71:6e:
32:7f:42:84:84:89:c2:7d:f2:b2:6d:7d:99:f9:e5:
93:be:24:6e:3b:bc:cf:b7:51:cf:ba:d8:bb:68:3a:
8c:9a:72:3d:46:61:0c:72:dc:1a:e8:1b:87:1c:22:
e6:4a:ea:08:47:f6:eb:aa:ef:c3:9b:44:76:96:70:
b4:c0:f1:b7:ea:31:52:57:1b:65:e3:be:51:fa:c0:
fc:4d:e9:84:f3:73:7d:fb:1e:73:90:a5:52:ac:8c:
35:f1:d0:64:22:2e:93:51:b9:e3:f9:99:6b:04:7b:
84:a6:8b:a4:82:5b:ed:be:05:15:f0:27:65:83:5a:
26:29:d4:9d:88:6b:ad:0f:be:4c:8a:e2:d4:da:66:
20:a3:d8:f4:2c:84:0d:0e:a7:41:59:45:05:c9:3f:
d3:06:cf:c8:53:1e:13:9e:6c:19:42:09:9a:42:9f:
b8:60:dc:f3:7f:27:c4:be:99:d8:3b:32:67:be:26:
b4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:81:DC:01:FB:24:9C:A4:F6:1F:17:2A:AC:70:F7:77:A5:B3:76
X509v3 Authority Key Identifier:
keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:8c:5a:39:ae:ab:e3:19:33:fa:62:75:0b:73:6d:84:37:0c:
31:f6:5b:21:17:aa:11:93:26:d5:aa:7c:41:97:3f:d6:eb:b7:
1e:5c:35:91:fd:c3:b4:4a:18:2d:0e:48:05:b3:ab:69:10:af:
9f:30:f6:f4:1e:31:79:bd:46:c0:3b:44:fd:b0:ef:ab:7d:d3:
8e:67:cc:6b:02:f6:25:28:6f:04:85:01:4f:a7:97:70:39:46:
21:0d:be:b7:4b:3c:65:12:b5:5b:b3:bc:88:27:dc:f6:90:c8:
14:fa:ea:94:96:7c:35:d6:88:e0:48:13:6c:f6:13:6e:a7:34:
66:27:05:f1:22:ba:46:b6:7c:83:9b:14:2c:c6:3f:f4:fa:26:
c2:8f:51:02:53:d5:5a:fa:2c:4d:70:44:b6:31:a2:13:25:eb:
b0:da:4e:46:d9:a3:e6:dd:3a:57:f0:bf:71:60:b7:50:47:64:
53:9e:73:d9:ed:f9:ea:5d:cc:c1:b3:d2:26:66:e9:ae:60:12:
da:6c:65:57:49:6d:3c:88:ec:52:fc:21:1b:73:a7:ad:24:64:
b8:6b:bf:45:0b:4d:0e:b5:77:fb:20:80:76:da:5e:9f:69:e1:
b1:11:2f:18:6c:58:25:02:b7:20:14:1f:c3:c2:b1:2a:3f:33:
ce:e9:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:20 2025 by rpki-client