Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
File: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json)
Hash identifier: YiNprPSg+nRzUxS83LZortOlFDSIYOSYeRbNOs2BuMI=
Subject key identifier: 70:97:73:91:B5:74:72:34:14:9E:62:D5:8C:2F:7F:54:E8:AE:13:E9
Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
Certificate issuer: /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Certificate serial: 04CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
Manifest number: 04C9
Signing time: Thu 30 Jan 2025 23:53:59 +0000
Manifest this update: Thu 30 Jan 2025 23:53:59 +0000
Manifest next update: Thu 06 Feb 2025 23:53:59 +0000
Files and hashes: 1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: 5XQpGz2ZcQjOjljbZx9Zc7NIe3c6ko5cLYG9a8yM1lU=)
2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: 9KrFu8rfuzGcElTJ+SW1V8KTmVUFQFDwJgp8Mmol+WA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Validity
Not Before: Jan 30 23:53:59 2025 GMT
Not After : Feb 6 23:53:59 2025 GMT
Subject: CN=679c1117-ea90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f3:e5:86:4e:d6:98:25:4f:5e:50:48:fb:fa:
3e:2a:75:ce:f2:03:96:d5:c3:3e:aa:73:d8:5d:53:
0f:37:94:b2:55:8c:11:4f:71:a4:e7:6f:9c:5f:b3:
fa:a3:bd:33:bb:da:93:55:a9:4f:6d:8b:41:14:a8:
52:f4:5d:f5:6a:c4:8a:17:30:f0:59:9c:f2:6d:1f:
d4:a9:b9:e4:2b:db:a9:ea:ab:02:6d:3b:70:6e:72:
ef:49:83:6e:07:33:c8:f2:a0:9c:e3:b2:b0:36:ef:
26:27:05:fe:d7:c1:22:fc:fe:9a:05:ba:4d:28:2d:
a4:20:f0:bc:6a:3e:7a:ca:7d:c8:52:26:9e:6c:b9:
e5:b6:2e:f8:b4:38:4f:9f:e1:5f:e7:dd:86:5c:38:
09:9d:2a:c2:59:94:c4:62:c8:e8:c3:b5:77:ef:c2:
90:19:a4:bc:36:77:1d:4d:25:42:6e:8e:88:01:42:
b4:b1:d3:0d:a2:0d:ff:5e:e0:fb:e5:d7:c6:a4:f0:
65:ed:3d:0a:06:16:d6:9f:1f:8d:c1:aa:38:99:53:
f1:3f:a5:88:2b:74:3e:87:8b:a2:4a:a2:cd:67:e1:
5f:61:e1:15:fb:f3:e2:d6:68:ab:b2:fc:3e:3a:32:
af:c4:91:1e:13:66:71:e1:38:cc:43:cf:c9:c4:50:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:73:91:B5:74:72:34:14:9E:62:D5:8C:2F:7F:54:E8:AE:13:E9
X509v3 Authority Key Identifier:
keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:bf:00:33:5c:34:24:90:1a:50:32:48:02:2c:f2:38:ce:20:
d9:ae:0b:86:82:04:27:50:8a:78:07:ff:cf:d4:61:3a:3b:80:
3f:cd:54:9e:6f:60:53:90:7b:30:05:18:df:33:c0:35:d6:b7:
ea:e6:a1:6a:d5:4f:02:e4:cd:13:2d:6f:8f:17:2f:54:c9:f0:
3b:f4:0c:98:fe:4a:2b:e5:7e:34:b3:43:fc:d0:57:f5:34:51:
07:db:27:30:ae:9c:4d:b4:d4:57:dc:2c:0a:10:9d:24:66:66:
63:37:82:bb:5e:09:25:3a:3f:60:77:93:10:d6:65:dd:e7:db:
84:36:e1:78:ad:36:c8:2b:e2:76:8f:01:81:28:eb:45:07:1f:
da:91:3b:cc:e6:b2:6f:ff:b4:ae:f5:4b:fe:ad:0f:61:02:8c:
72:bf:b6:36:0f:70:0e:0d:65:4f:d0:7f:42:01:f5:9c:02:53:
66:3b:ae:a6:6b:99:7c:8c:1f:84:0b:6d:6c:82:59:80:dd:8c:
32:be:ed:dc:63:7f:9c:5d:23:6a:1c:00:d5:37:8f:49:fc:f6:
d1:d5:1b:7e:fa:8b:d8:f9:0f:66:7a:9c:54:7e:d4:1f:76:c2:
57:7d:05:ad:e0:85:d7:08:8d:76:ad:b3:f0:e4:46:80:ba:a2:
37:31:da:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:12 2025 by rpki-client