
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
File: uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft (raw, json)
Hash identifier: x8MfR2remlOOll7dG1dy5GkDjrkR6HZBV3dgtYIZmNs=
Subject key identifier: D3:E3:A4:38:B4:29:4C:0A:E6:A6:0A:D2:80:1B:A2:9C:68:96:3E:7C
Authority key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74
Certificate issuer: /CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74
Certificate serial: 0354
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
Manifest number: 034C
Signing time: Fri 31 Jan 2025 01:08:12 +0000
Manifest this update: Fri 31 Jan 2025 01:08:11 +0000
Manifest next update: Fri 07 Feb 2025 01:08:11 +0000
Files and hashes: 1: uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl (hash: KWzxGVPNC+uCLMIjIR3+x1qy5R9WmyTl5qxaE8Y6wkI=)
2: 931A51C07F5811EE82ECE456C4F9AE02.roa (hash: 3ujH7nfRItY8BxT80xm2zxGd128K9q6N1aAV7Q13w4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 852 (0x354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74
Validity
Not Before: Jan 31 01:08:11 2025 GMT
Not After : Feb 7 01:08:11 2025 GMT
Subject: CN=679c227c-9c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:cd:fc:28:10:c4:bd:a1:96:e7:87:a8:fc:
2e:b2:18:fc:3c:8a:55:71:1f:65:f1:57:8c:64:39:
89:c8:3d:11:5e:c6:da:b9:73:80:6b:7a:70:01:6d:
7d:d7:5e:5e:27:fe:6e:6e:bc:8c:7f:ac:86:bb:53:
cf:0b:91:41:cc:33:08:f5:31:20:6f:b2:a4:da:ca:
48:a7:c3:4f:cd:22:f0:0b:50:ab:b8:f6:7d:1b:8d:
cb:74:7a:3b:40:c9:a0:76:74:2f:34:9a:e9:57:15:
81:58:bc:8f:0d:92:06:7d:7f:dc:48:68:03:42:1d:
ef:01:06:c2:00:09:2c:59:df:8c:e7:11:a6:8e:2f:
be:f4:f2:1d:e8:ee:f6:5e:aa:d5:b9:cc:ec:17:74:
a4:06:be:b9:31:12:6b:ac:0f:e4:d7:38:c0:d5:1f:
6b:6c:90:de:7a:52:ee:07:5e:d1:52:95:64:63:a7:
fc:0b:7e:08:88:c7:9b:6a:91:b8:98:d3:7b:70:03:
f4:8d:46:23:f7:44:fe:fe:a1:f1:e0:42:e9:bf:1e:
b4:45:42:5b:3a:89:32:55:65:89:54:3c:dd:14:87:
44:dd:c0:a3:25:cb:2f:9a:68:e4:d8:84:a0:e8:d8:
ad:8d:ab:5b:e5:15:8b:aa:02:ea:79:a3:06:8d:b3:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E3:A4:38:B4:29:4C:0A:E6:A6:0A:D2:80:1B:A2:9C:68:96:3E:7C
X509v3 Authority Key Identifier:
keyid:B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ff:d3:a4:bb:55:3a:71:6f:05:61:81:b9:d7:68:50:4a:a2:
7a:e8:ab:c5:28:18:31:e1:2a:91:e1:bb:af:7b:26:83:4d:d5:
b6:91:ce:3d:b7:c6:58:7e:2d:b8:1c:00:d7:ec:e3:b1:74:98:
bf:fe:99:b7:ab:33:b6:ae:1e:10:dd:dd:b6:c9:e7:cf:06:33:
7d:ac:80:cf:c4:62:49:e8:37:00:e6:24:fb:a2:a5:6f:37:da:
d5:f0:cc:ce:a8:06:94:0c:84:2a:b7:fa:e6:9f:0d:16:a3:47:
70:b1:38:95:f3:3e:d5:e0:1c:60:8a:60:0f:06:78:52:7f:56:
08:7e:af:9b:af:24:86:6e:ba:b0:f5:02:0e:ba:ba:5e:71:a8:
3b:b8:bd:8d:e8:ec:46:25:62:bf:58:8a:1b:69:3d:ce:b9:07:
14:75:87:d6:05:66:90:ec:0b:34:97:58:1b:24:47:42:97:db:
a5:cd:22:23:4b:48:97:4f:9b:06:4c:a8:92:40:13:1c:e6:a3:
58:1e:00:12:23:2b:94:09:73:17:06:a5:1a:a7:3c:0a:93:6c:
7b:a5:53:88:38:28:b5:2c:65:ff:b8:bc:ac:23:99:13:74:34:
cc:c7:72:26:37:8c:56:8a:c9:fd:5a:bf:6b:0d:f0:79:10:85:
1f:14:cd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:20 2025 by rpki-client