Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json)
Hash identifier: z39q8sAWowCIsSANFo45Wks4rQNEjAw0UVkdqxl5/g8=
Subject key identifier: B3:6D:CA:4E:2D:BB:78:53:FD:E3:07:49:C2:EC:42:D0:B0:9E:90:96
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial: 1D7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
Manifest number: 1D59
Signing time: Fri 31 Jan 2025 16:08:36 +0000
Manifest this update: Fri 31 Jan 2025 16:08:36 +0000
Manifest next update: Fri 07 Feb 2025 16:08:36 +0000
Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: 5ex9ftI2mX/Wq3n8dUyVacVf2QBP1lUswoIQIjy1/gs=)
2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: kDT0M7EORsZ1+/t04l6akhen7QWghNIlq1HRmuoO7iA=)
3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: ZBnczf6i1Ft0AmNpKiJIV1DqYZIANTcE+WYR+xMSOmI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7546 (0x1d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Validity
Not Before: Jan 31 16:08:36 2025 GMT
Not After : Feb 7 16:08:36 2025 GMT
Subject: CN=679cf584-fd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:64:d9:64:e2:0b:60:5a:df:10:c3:00:11:
1d:a3:27:db:63:24:42:b4:00:90:00:e7:5d:57:dc:
75:62:f2:61:14:69:bf:fc:f6:5a:bf:03:9f:e2:b8:
cf:a6:9a:51:fd:a0:d9:ec:4b:9a:7d:bd:94:e0:fc:
a3:d9:76:13:32:13:b1:fa:b8:22:34:66:14:9a:83:
26:62:07:bd:7e:8c:04:70:f1:b0:bb:98:66:ac:62:
98:95:6c:97:05:32:54:69:27:18:0a:8b:de:c7:97:
23:db:8a:3b:02:22:3d:64:60:91:30:af:92:c3:ec:
7d:96:45:27:10:ec:c4:89:ef:65:b6:7d:a8:3c:df:
52:05:ea:ae:f0:ef:a7:6c:e3:62:2b:80:33:15:3c:
7d:5e:15:da:9f:c2:41:32:1f:87:0c:5c:dc:f7:94:
f3:2d:18:f8:32:33:b5:32:d4:44:9e:07:47:ca:44:
7a:49:6a:bf:ee:97:98:72:35:a0:f6:7f:93:3a:c1:
0b:27:7c:e6:36:db:a9:69:16:01:75:ad:25:89:f0:
e5:02:87:90:0d:cf:31:e4:a9:1a:9d:b2:0f:69:cd:
eb:0b:b1:7c:09:26:26:de:ff:2f:b3:c2:97:f1:d0:
3d:4a:5d:06:50:18:7a:5f:36:5e:40:6e:60:e3:ce:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6D:CA:4E:2D:BB:78:53:FD:E3:07:49:C2:EC:42:D0:B0:9E:90:96
X509v3 Authority Key Identifier:
keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6e:04:fc:35:ed:8c:5f:9e:ca:f4:9f:ad:df:c4:bf:06:a2:
1f:49:7c:94:92:ea:4d:34:b4:a3:9b:5a:8c:b3:68:15:53:33:
15:a4:c6:35:3e:54:65:67:c7:9d:03:f6:f6:f5:16:9a:a5:69:
76:ec:d2:54:35:af:3b:36:53:ce:a2:87:2f:5a:7c:1c:57:85:
80:2c:c3:10:92:82:5a:85:70:7a:1b:e0:a2:d3:3e:58:27:c8:
44:2a:d5:45:e5:4b:d7:05:99:3c:44:f9:fd:7e:bc:6f:69:7b:
d6:f0:39:f0:af:97:b5:46:50:85:f5:0a:fe:74:73:bf:4c:10:
97:f6:f1:7a:47:98:07:0c:bd:0a:06:ae:9c:f2:91:db:11:72:
36:3b:20:f9:65:17:87:ef:ac:aa:3b:ff:42:0d:e8:ad:eb:b1:
94:6b:35:f9:31:2d:9b:4d:91:7e:7b:3b:54:30:33:2e:f1:03:
37:a1:5e:cb:e9:d0:e0:22:89:0a:ed:a9:ba:37:aa:da:3c:c3:
17:5a:81:d2:f7:49:84:63:ee:8d:6b:ed:b2:35:53:c1:18:a8:
91:cc:91:ee:17:f8:3c:c9:d8:4c:4b:01:97:57:9e:54:16:68:
90:8c:22:68:4c:6f:81:a5:10:56:95:cf:5b:da:24:ba:d4:af:
9f:6a:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:30 2025 by rpki-client