
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
File: U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json)
Hash identifier: elUXbXH/kybWMIZGYhADpkXRYhv0oNG8muUQsgGZx8Q=
Subject key identifier: 61:17:1A:03:C5:D2:5F:A1:D2:BF:91:32:6C:1F:14:48:E4:F4:CC:41
Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7
Certificate issuer: /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
Manifest number: 013B
Signing time: Fri 31 Jan 2025 01:07:47 +0000
Manifest this update: Fri 31 Jan 2025 01:07:47 +0000
Manifest next update: Fri 07 Feb 2025 01:07:47 +0000
Files and hashes: 1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: gdxQvmvpRyHk/jBlEepjVbKU5GKDmduUElEuxYKsnqY=)
2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: h1m9sLre/7LN5ad1i+1GbnT3wM3IJOvLq7MEJkLNy3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
Validity
Not Before: Jan 31 01:07:47 2025 GMT
Not After : Feb 7 01:07:47 2025 GMT
Subject: CN=679c2263-8ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:3f:a2:ca:2a:d1:fb:e8:05:70:8a:ed:4c:
50:c1:e7:e4:eb:5e:4b:fb:07:10:2d:b3:32:b7:f0:
d3:cf:00:01:fd:a4:2f:4f:98:3f:0d:af:11:ae:70:
0f:54:f1:18:12:f8:f8:5c:de:5f:05:f4:b7:9c:37:
66:73:f0:43:db:f7:b4:f7:d2:f9:02:2e:01:64:15:
9b:f2:27:32:74:7e:90:3e:8b:55:39:21:9c:89:50:
ec:a7:56:37:dd:0d:6b:95:97:dd:01:6e:e9:32:ca:
75:e8:76:f9:d9:f4:ad:01:4c:58:95:67:73:47:c3:
ef:90:e3:22:43:15:99:cb:a5:5f:b9:d5:eb:e0:2f:
4b:48:5f:ca:a9:d0:cc:89:7b:0c:b1:17:d1:34:20:
87:f5:0b:35:52:01:1a:c7:98:69:f6:c5:02:43:24:
ab:e0:cb:dc:2f:48:4d:30:4f:ee:56:32:15:d8:f8:
a7:8c:d6:2b:0f:c1:1a:60:d3:7e:50:ad:e9:bb:3a:
b9:d7:0d:c6:00:38:fe:a5:5b:54:6a:b2:38:1c:33:
d6:43:4b:fe:13:9e:35:86:64:bb:2e:da:76:32:7e:
86:c4:17:88:b9:69:26:d3:ac:09:c4:19:f7:91:0a:
2d:4a:75:56:de:51:ee:3b:3f:c2:d8:6a:e3:0d:77:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:17:1A:03:C5:D2:5F:A1:D2:BF:91:32:6C:1F:14:48:E4:F4:CC:41
X509v3 Authority Key Identifier:
keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:64:2d:12:2d:20:a7:ca:d3:9e:1f:5e:b2:71:86:75:6f:18:
1d:e0:b7:dd:f5:43:ec:8c:92:ce:6e:b0:5f:49:fd:1d:23:af:
12:fb:57:33:cc:5c:2c:9b:9f:b4:29:3b:b0:f0:56:4d:e0:a0:
b7:e0:96:64:be:14:19:e9:66:c0:df:b3:dc:4f:7d:61:de:5f:
c5:77:05:be:fe:ef:54:29:f7:41:78:13:6a:aa:2e:ed:f2:57:
e3:0d:a2:60:3b:33:d8:f7:26:50:e8:df:62:2e:b3:ed:88:18:
7a:56:07:95:98:51:a8:7e:5f:ee:1a:c1:3d:ee:71:d9:94:c6:
bc:0f:3d:08:82:0e:b8:8a:93:0c:d9:ff:7c:92:ad:fd:f9:a4:
99:8b:a3:d7:c4:20:ac:6a:90:ce:bb:10:0f:b4:cb:19:09:64:
7f:bf:9d:77:81:02:fd:51:56:d4:46:53:48:e8:6c:3a:46:17:
a6:ff:f0:60:c3:44:18:1d:c5:2e:07:98:6d:a0:2c:bf:c6:b1:
59:23:66:68:88:ff:e5:cb:66:5e:27:1e:02:b9:7d:21:4f:0f:
ea:e0:a8:3d:cd:c9:32:17:b4:eb:e0:52:c2:f4:2f:70:56:65:
7d:ef:63:56:93:09:aa:69:b9:87:0f:5b:fd:66:01:e0:51:a8:
c3:76:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:18:20 2025 by rpki-client