Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json)
Hash identifier: g21UyJj58ltb+AiWbHdvkRPMWXmOS3d1WSCwBFmhwQM=
Subject key identifier: 13:5F:50:11:B7:0F:4A:93:BA:58:1D:E4:CD:F0:06:79:73:45:5F:41
Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Certificate serial: 11D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
Manifest number: 11CE
Signing time: Fri 31 Jan 2025 17:10:37 +0000
Manifest this update: Fri 31 Jan 2025 17:10:36 +0000
Manifest next update: Fri 07 Feb 2025 17:10:36 +0000
Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: i+hyU+l5FSyk7BAB9yL43BQOIlhMeme0u34mN/9JsjE=)
2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: nEHygU0iQ55kYxCvR5kzgzTy6GI2Ua1TfbgvO9Q4FhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4565 (0x11d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Validity
Not Before: Jan 31 17:10:36 2025 GMT
Not After : Feb 7 17:10:36 2025 GMT
Subject: CN=679d040d-1371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:0a:f1:50:cc:b6:ce:66:bc:f0:54:c6:09:
85:16:31:1b:b1:e0:74:69:c5:3f:5e:37:cf:c0:cf:
84:89:5d:3e:5f:fe:37:cc:50:ff:a7:95:92:89:53:
52:78:0c:c1:f6:f9:1c:e1:53:93:07:88:7d:e0:8f:
cf:9e:14:8d:53:c4:99:35:0c:df:9d:0e:cb:68:55:
88:96:52:3f:f5:20:92:19:5d:71:e5:2e:d2:91:97:
0b:95:bc:c2:4d:c9:04:8b:cb:89:bc:dc:81:2e:44:
77:46:a4:83:f0:a8:ce:c5:c9:81:86:ae:bf:72:30:
47:76:0c:2f:bb:45:a4:48:6b:4f:14:c1:ac:69:91:
f9:1a:33:29:2f:ef:9f:37:ff:93:e4:82:fa:54:12:
57:ce:9a:4c:46:c8:a8:d1:3b:f5:32:58:45:1d:9e:
b1:be:08:5f:b6:d7:f2:c1:77:15:1f:f3:dd:5e:15:
40:82:ef:0f:08:b4:a8:a4:b3:b6:37:99:1f:1d:e5:
ba:7e:83:9f:b5:b2:c6:9e:9e:19:73:c6:c3:bd:9b:
f4:63:0a:0e:dc:15:6b:ae:07:0d:2b:ff:1d:33:d2:
56:17:20:10:53:63:65:b3:cf:c2:79:13:42:de:2f:
d6:8d:77:bf:0c:6e:41:82:07:10:d5:3d:4e:65:ec:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5F:50:11:B7:0F:4A:93:BA:58:1D:E4:CD:F0:06:79:73:45:5F:41
X509v3 Authority Key Identifier:
keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:53:26:ce:7f:a5:75:69:d5:0c:ca:8f:02:d0:5d:aa:18:65:
83:18:ee:2e:62:27:95:08:5d:41:bb:38:7d:4c:42:89:f3:ae:
83:35:1b:0d:d0:65:fc:24:1c:10:0a:a5:06:a1:16:b6:b2:77:
99:36:3b:46:af:04:5f:49:51:3f:ed:6e:24:d6:b8:cc:fc:44:
af:42:e9:72:88:67:2e:d0:43:ec:32:b2:bd:14:77:02:1a:bb:
e4:69:c9:d7:ed:e7:37:ee:20:07:d7:6a:93:de:99:71:fc:8f:
0e:85:db:be:b2:48:ea:f8:79:84:eb:4a:27:c6:fd:2c:5d:96:
40:3f:21:23:1e:82:bb:c7:96:f0:92:f0:1d:08:9e:6c:53:1c:
19:e3:de:74:fc:af:2b:e0:f5:a6:86:25:56:7e:76:a3:f5:f1:
f2:a1:f6:2b:3c:c7:ba:41:ae:97:37:8c:64:31:70:5e:d3:5f:
c7:b3:8a:7e:18:b9:a3:3c:18:b6:bc:f9:08:c9:63:ca:4c:9d:
ad:7e:46:05:dd:21:2f:d5:c4:9f:ae:09:1c:f5:00:4f:a7:0c:
b9:6e:c0:e7:ef:f9:b2:4d:23:ad:f0:d0:48:00:39:03:c0:69:
be:61:33:20:2e:6f:a8:32:50:30:a5:d2:52:92:93:ef:a7:ca:
79:48:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:12:44 2025 by rpki-client