Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
File: mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json)
Hash identifier: vge+vvgaNg9IqcJ55fJRHeHAN0PGDdrXMkUEObJfRKg=
Subject key identifier: E1:95:DA:14:AA:CA:C0:84:26:4F:FD:C2:94:31:03:7A:C3:E6:E6:53
Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47
Certificate issuer: /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
Manifest number: C4
Signing time: Fri 31 Jan 2025 05:08:27 +0000
Manifest this update: Fri 31 Jan 2025 05:08:27 +0000
Manifest next update: Fri 07 Feb 2025 05:08:27 +0000
Files and hashes: 1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: j1Va3yYLp+SgmKKrdFw79r727OSKd2QvHXnhVHWv5no=)
2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: tThNJYbUDEGX7l9BePqZBqRS3H5vx42AJaOXqIGJAP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
Validity
Not Before: Jan 31 05:08:27 2025 GMT
Not After : Feb 7 05:08:27 2025 GMT
Subject: CN=679c5acb-fd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:51:58:7c:44:bf:9f:dd:13:79:35:07:2b:
45:c2:7e:a9:ec:06:cb:72:47:b2:dd:f1:37:5b:8f:
fa:22:15:fd:e1:34:d4:c2:1f:54:b5:19:f0:f3:f6:
ae:84:bd:00:cd:26:ff:c8:1b:f5:1a:1d:f2:11:af:
33:ef:59:b3:b1:2f:e6:45:79:af:e8:b5:32:ff:d5:
36:ff:bd:1f:d8:2f:66:d4:61:b1:a2:43:96:cd:93:
a4:d0:7a:ca:c4:d1:07:4a:20:d5:3c:42:f9:94:0b:
49:9e:a8:77:91:bf:94:6c:1e:1b:90:bb:00:b5:2d:
e4:16:c0:73:38:64:c1:c6:d8:a5:ee:f5:97:b6:02:
31:fe:c4:dc:a7:9a:0b:33:07:42:7e:5f:8f:53:60:
41:74:ad:78:2b:9c:e3:8c:eb:c1:ae:11:23:95:07:
31:fa:c1:6d:21:46:16:eb:07:af:32:2f:93:a5:cd:
5d:c9:3b:ad:a5:5c:64:c3:ac:56:aa:08:6a:54:33:
94:cb:ca:d2:04:d8:25:34:aa:71:db:68:31:a5:9d:
38:65:98:31:24:b6:6a:78:d8:af:81:b6:84:dc:06:
50:5c:c0:6b:50:c9:f8:0a:07:3b:4c:8b:b1:06:0e:
4f:d8:7f:e3:f7:34:cd:58:b9:56:99:ab:97:32:e1:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:95:DA:14:AA:CA:C0:84:26:4F:FD:C2:94:31:03:7A:C3:E6:E6:53
X509v3 Authority Key Identifier:
keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:01:15:69:34:49:69:09:15:d9:4b:33:66:4c:8b:3f:8f:ea:
08:85:3f:6c:ad:04:87:af:ab:3b:34:be:43:87:85:05:27:f8:
70:f2:e5:ad:dd:97:10:f1:f9:b8:1a:dc:70:e2:b0:87:33:5f:
cf:c0:53:5a:fd:d4:37:42:00:c9:38:65:6b:04:40:34:aa:85:
b8:12:48:f1:0f:63:3d:44:53:91:90:32:2e:57:09:91:13:91:
4e:c1:7f:6d:f5:37:59:e6:d2:dc:55:f1:db:cd:06:54:11:f5:
2d:db:6f:a9:b4:e2:7a:a3:c3:85:72:e1:69:b1:d4:36:82:d6:
dd:ce:59:b5:76:ff:c2:d1:f0:38:09:be:d4:5d:c4:06:12:86:
8c:29:5d:db:6d:73:b1:96:ce:b8:aa:fd:5d:4b:a4:71:84:23:
7f:1b:db:c4:82:0b:1c:84:82:8e:e3:f1:03:53:65:4f:e4:2b:
6f:63:77:30:53:de:05:3c:0b:e9:82:c7:4e:86:b9:ac:d9:3b:
d2:d2:59:63:3f:92:53:1d:79:0c:60:bb:37:91:2b:fc:d3:f6:
c7:bd:2f:2b:41:9a:53:2e:bb:60:df:bc:3e:92:2e:9b:f5:4c:
b4:3b:6f:d5:30:8c:78:0b:c2:fb:e6:6e:9d:40:21:ab:e7:d0:
f1:9a:1d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:17:21 2025 by rpki-client