Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier: Z5K+kOD5rpWyNA7dWX6M5XLMVICvss3ApLcI2MAY4Jk=
Subject key identifier: F3:05:D1:B9:C2:FA:BE:0F:32:76:A0:0B:C9:85:2E:CE:A4:9B:DE:4E
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 0439
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number: 0420
Signing time: Fri 31 Jan 2025 00:28:22 +0000
Manifest this update: Fri 31 Jan 2025 00:28:22 +0000
Manifest next update: Fri 07 Feb 2025 00:28:22 +0000
Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: 1Vfl/g3M0aV4++3fCeoRos5/2KDY/DNop77IClX2lgM=)
2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=)
3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Validity
Not Before: Jan 31 00:28:22 2025 GMT
Not After : Feb 7 00:28:22 2025 GMT
Subject: CN=679c1926-a321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:f4:fc:f6:85:43:cc:90:14:2f:ec:62:ac:
d4:23:b0:72:60:23:16:27:51:38:fd:c4:a8:3f:bd:
30:d9:e3:97:0b:ab:b6:0e:28:dc:f7:84:f2:29:bd:
e2:50:65:f4:af:51:2e:32:6d:1f:0c:74:50:6a:66:
33:53:da:1c:b2:3a:69:2b:6f:a7:97:d0:ab:a2:57:
14:0f:c7:2e:13:4c:84:d4:b3:85:97:30:25:91:8c:
35:e9:dd:fe:66:9f:00:8d:60:a7:35:67:0a:bc:ee:
c5:22:7c:15:9f:16:a7:d9:c1:3d:88:29:78:e1:0e:
0c:66:db:fd:a4:98:e9:5d:61:1b:cd:7b:ed:ed:ba:
68:dc:3e:2b:7b:41:22:8d:91:3f:98:39:d4:a8:70:
ba:8d:46:9e:32:36:30:91:fa:5e:53:84:7d:55:b9:
a0:bf:38:77:fc:b8:9c:f3:0d:ab:b5:1b:28:38:7e:
89:18:00:b7:5e:2c:6e:0b:73:ca:94:76:b1:b3:cd:
09:58:c4:0c:8c:d3:55:2b:94:15:5a:6b:03:e6:ad:
dd:e6:45:bb:b0:f0:bd:2d:39:8f:e3:16:5a:1c:82:
0b:67:65:95:a9:14:a5:c1:1e:bc:f6:56:83:9a:f0:
61:f3:56:bf:52:e3:f8:9e:5d:1e:7a:0b:3b:6b:cb:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:D1:B9:C2:FA:BE:0F:32:76:A0:0B:C9:85:2E:CE:A4:9B:DE:4E
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3b:f1:13:50:bd:3a:4f:8e:59:6e:b1:38:aa:c5:e4:a4:1e:
ec:e3:22:e6:02:c4:5f:92:8f:a3:97:93:d3:f1:92:b9:34:59:
be:a0:4f:a7:65:95:7a:bc:7c:44:1d:98:4e:52:ef:7d:bb:0e:
f5:2c:82:9e:30:4c:6a:22:9e:aa:5f:99:c1:e2:ba:32:25:6d:
6b:07:e0:56:b4:e7:b0:36:47:c8:2d:29:43:1e:c5:84:85:5b:
ad:61:6d:54:47:66:77:46:ed:4d:4f:c2:41:7b:7c:88:56:f5:
83:e1:38:31:11:19:dc:f4:0f:45:8f:ad:16:70:3e:95:05:4b:
6c:ef:28:66:e4:85:9f:e1:05:c8:a1:78:7f:9b:54:a7:f0:f8:
99:1d:b7:2c:5c:81:47:36:26:75:7b:71:69:8c:9b:26:3a:ef:
da:74:92:0a:f9:5a:ea:31:41:d0:40:7b:0e:31:da:70:43:51:
57:72:59:dd:2e:77:06:da:17:24:cf:f4:2b:9b:df:3e:d5:19:
5d:f9:91:e2:14:27:95:4a:c2:0a:28:bc:6b:06:e0:e5:44:e7:
5c:b3:c1:a9:4d:06:5a:55:23:81:05:c4:23:2b:9f:2d:d7:c0:
89:89:c9:b5:bb:29:16:f3:2e:32:9e:84:8d:60:17:d0:7d:84:
52:c8:bf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:03 2025 by rpki-client