Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
File: S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json)
Hash identifier: m1H8noOFWZmkZX3W2GsG3xkkLxEfuiUiS7HRlgrJJoI=
Subject key identifier: 78:DB:3B:41:EC:B9:D7:79:21:2E:7E:0B:70:4F:DA:19:1E:57:E0:DD
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial: 05BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
Manifest number: 05B1
Signing time: Thu 30 Jan 2025 23:09:42 +0000
Manifest this update: Thu 30 Jan 2025 23:09:41 +0000
Manifest next update: Thu 06 Feb 2025 23:09:41 +0000
Files and hashes: 1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: 3XOGigXyhTbkiMSFsZ/ip8nfdVcmVX8cfl0EQXiIxms=)
2: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: WalTM0heTU/pB4x2h5BFYPYTixxcx+WNC43Aop8+j9U=)
3: 65D38F7CC44111EF8409C156C4F9AE02.roa (hash: f9AHjTbNbqSt8k/eMNuMhNVjcuM6wjeLwT4q/khUyEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1471 (0x5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Validity
Not Before: Jan 30 23:09:41 2025 GMT
Not After : Feb 6 23:09:41 2025 GMT
Subject: CN=679c06b6-85c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:3d:9a:73:dd:0a:2a:d3:13:e4:6f:ef:c5:
eb:d4:18:7c:d5:4c:b7:ac:dc:dd:11:ba:a2:8b:13:
7b:6a:fc:bb:36:6b:3d:8f:65:ce:43:01:90:81:ea:
fb:26:67:61:5c:8e:ec:ff:bd:cd:e9:7f:6f:24:f8:
bf:bf:ce:c3:c5:24:de:58:80:5f:d3:5e:9a:78:93:
92:e1:ef:50:42:90:c4:8e:52:b3:2a:9c:7e:f2:30:
eb:f4:e8:b9:7f:27:1a:54:69:65:d6:69:41:3c:b3:
e1:11:f8:0b:ad:9f:bd:da:9c:1c:4b:4d:90:7b:b3:
fa:7f:38:08:88:43:f0:01:d0:4c:bf:3c:ed:d3:5e:
14:88:73:91:0c:89:f2:4c:a0:fe:3b:d7:42:cb:a8:
f3:e0:6d:7b:72:d1:47:24:3f:b8:28:be:6e:73:60:
29:cf:d7:e1:cd:84:c1:f5:13:75:71:c5:f5:7b:65:
e6:de:c0:e9:66:d9:c0:a2:0c:62:33:6b:12:00:f9:
37:e6:93:25:6b:5f:4a:51:9a:c9:a7:e0:f4:bb:8c:
8c:3b:58:b9:ab:98:e2:29:22:ee:9b:e9:a7:e3:96:
84:dd:c7:84:98:41:7f:b5:c6:5c:16:a4:79:19:41:
c8:27:e1:0e:c1:18:c5:7f:96:8e:bd:f5:e8:ad:28:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DB:3B:41:EC:B9:D7:79:21:2E:7E:0B:70:4F:DA:19:1E:57:E0:DD
X509v3 Authority Key Identifier:
keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6a:65:b5:10:17:e2:0b:8d:e5:f5:09:4f:5c:f4:79:73:4d:
0d:9d:01:a3:88:e4:9a:bc:9e:c8:d5:81:c5:1c:3b:4e:04:01:
7f:3b:23:c9:39:c5:c4:7b:91:ee:ae:a8:9f:9a:fd:45:14:6f:
d8:f3:9f:63:64:19:dd:1f:15:3c:d8:35:e8:5d:59:ef:7b:07:
c4:59:9f:54:ec:7f:b2:21:00:45:d4:b5:a3:e9:ee:a5:4c:0f:
36:17:fe:c8:ff:5f:dd:74:4b:87:62:f5:97:1c:05:96:da:99:
8b:c2:19:d5:c4:b0:1c:b1:e5:35:f7:d5:18:8f:3a:ca:9d:c3:
90:49:2d:79:99:7a:cd:3e:ab:ac:a3:62:cb:da:fd:a2:b6:39:
01:47:e7:b9:cd:bd:95:93:27:a8:2a:af:70:d7:df:7e:89:74:
b9:c8:73:40:c8:76:0a:57:c3:65:21:97:13:2f:f7:c9:36:5e:
70:e6:05:7c:7d:f9:65:50:8e:db:00:b1:05:fa:c3:94:a2:f0:
f6:30:b0:db:69:2a:39:6f:68:cf:1f:51:ad:2d:3f:37:16:48:
e6:85:34:54:6f:ce:be:be:6d:27:e3:ff:96:fa:33:4f:1a:19:
a8:8b:bb:b3:28:27:40:1b:c4:0e:b2:c1:57:7b:7b:6e:92:06:
48:43:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:51 2025 by rpki-client