Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
File: 5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json)
Hash identifier: Ybka/WRzUhnhD+KAKSlBRIMwiRXqXXR+e7EIbGUdQhA=
Subject key identifier: D8:EA:BF:38:99:C0:A0:C1:AF:E7:77:BC:D8:1E:94:39:73:80:43:9F
Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F
Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F
Certificate serial: 039F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
Manifest number: 0393
Signing time: Sat 29 Mar 2025 01:04:25 +0000
Manifest this update: Sat 29 Mar 2025 01:04:25 +0000
Manifest next update: Sat 05 Apr 2025 01:04:25 +0000
Files and hashes: 1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: Yy+kZ9+X5cqzCjev93SYUEX7uG7IGAAPk/JMORu8EFQ=)
2: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: 0ekBq+u3qTtCrN1H3WBpcyEBXqtT/nmRB1wnzUy864Q=)
3: 06820D08961011ECA540626AC4F9AE02.roa (hash: AajhgEbZBOC20FRVNZHV44NbIbhPj9V3ePlv/pPgwT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927 (0x39f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E
Validity
Not Before: Mar 29 01:04:25 2025 GMT
Not After : Apr 5 01:04:25 2025 GMT
Subject: CN=67e74719-7ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:3d:e6:dd:5c:4f:67:f7:e6:95:36:ad:d6:
7c:39:bf:e6:73:7b:00:0f:c0:69:de:6c:e0:c2:ed:
dc:21:d9:74:b4:1d:a6:a9:08:da:ac:0a:95:41:6e:
d1:44:77:a0:26:75:e8:2d:db:9b:8e:3b:3e:b6:63:
52:b8:d5:e4:6a:2a:f2:81:40:73:52:74:a4:32:4a:
d5:ff:81:fb:3f:c0:2e:e5:72:fd:91:c4:55:6d:b8:
fe:1b:6c:cc:51:94:b9:a0:88:cf:5b:1a:a5:d8:b9:
3c:25:71:7e:e7:3f:34:86:f1:e9:7a:51:96:1e:40:
09:00:dc:62:6d:14:af:25:a8:bf:8a:96:29:63:0b:
99:de:1f:73:2b:37:54:3f:19:31:f2:bd:c9:99:9e:
49:ac:89:b9:d4:be:4d:67:6d:98:96:57:ca:ff:80:
95:60:79:b6:5c:c4:05:38:87:1a:4f:a3:4d:4b:99:
87:9f:41:ac:a9:d2:ff:ed:b7:78:0d:59:d9:2b:f9:
0c:ee:78:9e:ed:42:6f:25:38:3a:65:1e:cd:c8:2b:
f3:12:f3:be:a8:a1:cb:fe:86:13:49:4b:c0:bf:da:
47:a4:ad:52:90:68:2d:2e:fd:d9:40:10:52:28:64:
ea:43:2b:f3:ee:12:00:7d:dc:e3:72:0e:83:c7:25:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EA:BF:38:99:C0:A0:C1:AF:E7:77:BC:D8:1E:94:39:73:80:43:9F
X509v3 Authority Key Identifier:
keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:da:6f:25:22:6d:84:eb:5d:69:ab:9f:f8:45:b1:4b:9a:b5:
35:98:1e:b6:b4:ad:b6:f3:4c:ee:63:45:f7:78:52:09:46:21:
97:c3:cd:34:35:58:a2:1f:08:06:b6:e1:f5:49:af:d9:4d:1f:
4b:20:e3:f0:5a:bf:4a:fb:cd:09:1e:c7:f6:10:54:b0:aa:31:
04:f8:bc:ec:2c:e2:a7:2e:b4:7e:7c:db:52:bd:08:7e:53:bc:
fb:d4:30:e3:06:68:cb:13:e5:d1:8c:79:32:d0:bc:59:97:e9:
18:fe:89:50:47:d2:5f:6f:a1:f1:cb:7d:74:c5:58:f6:f5:5b:
26:b8:66:7d:9f:89:19:a2:13:75:80:6c:3f:2c:cc:9d:43:74:
a0:c3:de:40:c0:6d:a0:a1:b5:5a:25:b6:c4:09:91:11:fb:cd:
cb:00:0a:c9:80:9b:0f:fb:b7:07:77:09:1a:1a:f8:87:e5:c0:
9f:b5:a3:00:d5:ff:4d:6d:f6:0e:b8:a9:99:a1:49:be:d8:45:
65:de:6a:f8:b2:50:d1:d6:4f:8e:37:e8:0d:f5:c2:20:aa:a6:
c1:75:03:6b:36:6a:79:a3:b0:4e:05:22:d3:d1:95:33:fa:82:
5d:6d:dd:87:c5:10:d3:7c:6f:04:6d:21:bb:e2:d0:b5:c6:60:
dc:12:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:16:13 2025 by rpki-client