Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json)
Hash identifier: cBjSNhxZKwDi7gHt00jF1lyV7ejpqAfcvzd6d/Kinmw=
Subject key identifier: 9A:9D:BB:53:44:51:9C:5B:9C:9D:ED:FF:9A:AE:CB:40:21:BD:6D:44
Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
Manifest number: 5A
Signing time: Fri 31 Jan 2025 06:08:56 +0000
Manifest this update: Fri 31 Jan 2025 06:08:56 +0000
Manifest next update: Fri 07 Feb 2025 06:08:56 +0000
Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: uEvj958Fmjd0QSRn/z/lG2qkywv/PlKUYb2/Hjk8sMs=)
2: 36C627945ADD11EF80893A3FC4F9AE02.roa (hash: SmnJr3cmtzrwi435sl7t5/Qk1K3MbfKQ5zVZNYo5M50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
Validity
Not Before: Jan 31 06:08:56 2025 GMT
Not After : Feb 7 06:08:56 2025 GMT
Subject: CN=679c68f8-1e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:29:db:fd:e2:c3:f3:d1:47:77:f3:bc:d0:
97:44:a2:92:c4:25:9b:f9:f1:1a:0f:83:c5:bf:55:
5b:ca:2c:45:a2:a5:2d:18:01:bb:86:25:15:c0:e2:
01:8c:0c:18:de:34:0e:94:76:e4:b7:fc:cc:94:5e:
8f:a5:44:07:78:06:68:98:40:e9:7c:a3:fa:53:19:
c1:da:04:30:78:7a:aa:fa:3e:07:95:ae:59:a1:11:
0a:a0:40:82:b7:e8:a3:77:ae:f4:45:f6:df:6c:0e:
50:4a:59:74:b5:0e:aa:71:37:9b:74:bb:25:99:da:
e5:b9:75:a6:df:da:76:21:da:24:8d:5d:9c:78:a4:
78:14:91:ae:95:ca:ab:be:41:db:ec:b5:2f:10:ae:
b5:c4:27:42:a0:8e:a4:03:25:53:92:27:15:09:7c:
03:69:b1:76:0d:b3:1d:99:b6:12:be:b5:cf:69:2a:
2b:b3:c4:bc:67:2b:08:65:80:f5:48:d2:db:ad:7c:
a0:53:64:b6:67:f6:df:8f:f8:fa:a0:97:09:40:8e:
cb:23:4f:9a:d8:0f:f8:e8:4d:b1:73:e8:6e:9a:a1:
61:d7:d3:e0:56:0c:c8:aa:fa:fc:55:22:18:12:37:
25:12:32:c1:00:e2:d3:22:b9:fe:42:99:5f:3e:45:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9D:BB:53:44:51:9C:5B:9C:9D:ED:FF:9A:AE:CB:40:21:BD:6D:44
X509v3 Authority Key Identifier:
keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:c5:86:9c:d6:a7:e4:8a:cd:88:4a:f9:11:9e:70:e7:37:9b:
9a:9d:7a:ac:be:56:38:cb:27:00:15:bf:57:0e:42:c0:a4:97:
d9:73:6b:a7:23:42:63:a7:68:ff:b1:22:03:aa:59:cf:b9:ed:
0a:da:d7:ef:38:52:ea:b0:ea:77:1f:ab:00:62:12:b4:ce:ea:
69:84:54:cf:77:21:46:cd:70:fc:eb:07:ca:bf:93:15:a7:b2:
ad:7f:eb:98:b0:83:1d:de:e2:7c:86:57:ff:c7:7e:71:17:1e:
59:84:1e:a1:a2:1a:71:3c:94:84:39:11:1c:1f:da:d6:38:12:
2e:09:fb:cf:3e:38:c8:f5:b4:cc:59:01:35:06:dc:ff:09:9d:
78:85:4d:83:32:83:01:44:45:c7:cf:23:41:d7:e1:09:ec:f5:
3a:e6:b3:1a:96:ac:0a:c8:9c:a1:34:1d:d7:e0:95:a3:ca:36:
ac:eb:15:2a:00:b8:bd:c5:6a:7d:35:50:97:01:8d:4a:19:39:
b1:99:30:11:a7:a0:0a:e4:a5:72:c7:df:58:69:4a:9e:a9:5b:
40:a9:5e:37:be:d5:88:ea:dc:f9:d3:c5:d8:3d:b9:91:4d:9e:
c4:58:38:89:1d:6e:86:f8:20:52:a1:0a:8d:b9:a0:0a:93:83:
e2:0c:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:08 2025 by rpki-client