Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json)
Hash identifier: 1F/9Ds/KjaDXVLGwLqR1Wb4CGvb4SdUSXyL41Vu+iPc=
Subject key identifier: F4:80:0C:70:BE:D0:1C:6B:82:4B:1C:13:E4:2E:A0:CE:C3:7F:A2:13
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial: 1281
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
Manifest number: 470A
Signing time: Fri 31 Jan 2025 14:20:47 +0000
Manifest this update: Fri 31 Jan 2025 14:20:47 +0000
Manifest next update: Fri 07 Feb 2025 14:20:47 +0000
Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: mPwEmNVSg5z4VLFooiwwt6QmIn8Vj+yEdte0PASZHd8=)
2: C5FA430E179711EDB9008D18C4F9AE02.roa (hash: GHnN7IPBztwTSkz/5T1Pzn2mpFjuZRSGTdYW2a+IpUM=)
3: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: idks1lefYLO6nPenvXoGS0zMdLXoYOwMfOiIKkDlkB8=)
4: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: gZAAhBS7lDX/ARKaEp+quX+YnSdkN0XwL2ShlYH1ilM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4737 (0x1281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Validity
Not Before: Jan 31 14:20:47 2025 GMT
Not After : Feb 7 14:20:47 2025 GMT
Subject: CN=679cdc3f-32b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:3d:e9:12:84:89:43:b5:56:e1:96:50:f6:
16:75:ca:95:5b:f0:1e:f4:a7:93:76:28:0d:ab:bf:
d1:57:4c:2c:a3:14:53:78:6f:a9:1c:4c:3a:5b:31:
e9:18:63:0a:fb:10:5b:ed:29:6a:98:99:48:10:1d:
19:ff:e4:fa:fc:cd:bc:6f:95:8e:a1:cc:24:5f:54:
4d:ef:1d:ca:3d:03:e1:67:50:55:b0:7c:df:56:a2:
14:37:5a:30:e1:b2:83:e3:99:17:10:57:57:9f:e8:
62:77:7a:58:77:18:fc:df:49:29:b2:fa:f9:95:72:
38:af:00:82:99:33:ca:6c:e1:79:54:2d:83:03:9b:
02:82:61:64:68:ca:03:0a:cd:22:e0:85:2c:e7:4b:
73:7a:e2:29:fc:1d:16:62:0c:3e:c1:9f:c6:e4:aa:
45:19:83:05:d9:8c:14:8f:05:51:84:36:59:a3:47:
d2:01:d0:80:c0:fb:88:46:b7:b2:cb:cb:28:03:f5:
84:38:15:00:e0:7f:f6:d5:e1:69:47:53:cc:96:e2:
54:98:b9:4c:dc:c0:25:af:a6:68:37:65:a7:fc:7b:
75:b8:30:28:81:bc:e4:c1:57:a0:ac:94:86:79:cf:
db:b5:a5:e9:78:9f:97:ef:e6:c6:6d:b8:7e:fe:cb:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:80:0C:70:BE:D0:1C:6B:82:4B:1C:13:E4:2E:A0:CE:C3:7F:A2:13
X509v3 Authority Key Identifier:
keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:aa:ed:10:61:e2:6c:93:3d:f2:16:7b:62:b2:62:1c:5a:26:
c5:76:cc:fa:cd:e0:c1:7d:f9:1b:71:a6:d4:a5:ff:e9:d6:a3:
60:b8:e9:8f:aa:ba:91:7c:06:cb:f5:f4:7c:51:ac:1b:dd:38:
c5:35:c4:17:00:df:60:8a:8d:2c:5a:a6:f2:9a:06:58:8a:4e:
c9:f2:b1:b8:c0:ac:88:ea:e2:6c:c3:62:ae:41:0a:a7:9f:cc:
e3:21:cd:fa:12:4c:5e:da:94:76:80:2f:0d:08:91:0c:3f:49:
c7:eb:c8:7d:c5:24:bf:7e:6c:b4:d4:15:eb:bb:4b:28:5f:9a:
80:09:ea:e6:14:bf:f2:ef:52:31:b3:6f:b9:53:7b:3c:76:c9:
a8:c0:7b:db:22:13:eb:f0:02:9f:48:c7:35:2a:f1:aa:87:ab:
f8:b8:90:aa:50:ae:33:3a:32:dd:f4:13:74:f7:2e:ca:49:c5:
15:22:27:21:63:18:b7:ae:cf:13:81:13:bf:46:3c:06:ab:14:
5f:7a:6b:7d:de:cc:29:df:e0:4d:a9:ff:85:e0:f3:27:b3:5b:
db:6f:b9:e9:4d:dc:7b:7d:88:4f:24:b0:da:91:b1:ab:ae:48:
b1:49:26:37:29:91:93:74:11:44:f6:83:85:3a:da:78:bc:8e:
de:b4:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:49 2025 by rpki-client