Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json)
Hash identifier: jO3paP1pjnqsYRxSYHfRbARfb81Q9FUPv7wo14jykXQ=
Subject key identifier: 40:FF:24:F6:11:CE:EB:A2:83:48:53:02:88:50:65:C2:49:CE:44:2A
Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1
Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1
Certificate serial: 0FAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
Manifest number: 1884
Signing time: Fri 31 Jan 2025 17:29:01 +0000
Manifest this update: Fri 31 Jan 2025 17:29:00 +0000
Manifest next update: Fri 07 Feb 2025 17:29:00 +0000
Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: NiLnZ3m+SziPAFLgdNFV0etqCUAx+nNkwn7z9sfLa1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4011 (0xfab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1
Validity
Not Before: Jan 31 17:29:00 2025 GMT
Not After : Feb 7 17:29:00 2025 GMT
Subject: CN=679d085c-183e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:c8:4d:72:b6:5b:04:1c:39:c6:5b:f4:35:
1c:0b:00:bf:3c:7f:42:2e:87:4f:da:d9:f2:b5:d8:
56:cb:09:4c:a1:af:ef:fc:cb:ab:fe:ac:0a:36:20:
06:a8:50:ca:69:cd:27:58:68:09:68:1c:15:2b:5d:
c9:c0:e2:1b:61:61:bd:98:36:f7:a4:a1:9e:b8:62:
f8:90:2b:d0:6b:a8:81:b1:d2:fe:32:01:c3:01:63:
9b:1c:31:34:6e:ff:95:df:81:18:18:51:17:71:87:
bf:c6:9c:53:e9:ed:cf:1a:d4:92:40:01:25:95:de:
e0:18:aa:19:7d:d6:65:c7:b7:95:fa:59:ec:47:99:
d6:82:8a:21:c1:a4:7c:89:0b:33:89:c6:f6:75:c4:
50:db:cf:04:18:75:3d:c4:77:96:ca:ea:7b:90:92:
2c:97:74:a8:b4:70:b3:ae:4c:45:8b:e1:65:f8:23:
66:33:28:f2:ec:55:23:af:5a:2b:94:e1:32:25:cb:
63:01:e1:ea:13:fe:f8:98:81:7d:75:2d:56:09:0a:
3e:df:25:65:15:a8:44:64:0b:90:d7:4d:9b:eb:92:
70:0c:a8:5e:06:48:04:9d:df:f8:36:72:b1:ec:bc:
fa:f3:15:b7:95:64:d5:ba:0b:46:63:2e:2d:63:c2:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FF:24:F6:11:CE:EB:A2:83:48:53:02:88:50:65:C2:49:CE:44:2A
X509v3 Authority Key Identifier:
keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:0b:c1:3c:82:a4:2b:33:86:ba:ca:70:e9:f8:3e:3c:62:d1:
ab:96:62:5e:91:0f:6d:69:01:3d:f4:fd:42:78:f8:52:88:3e:
9e:7a:0b:ab:42:ed:8d:f2:99:a0:ee:7e:34:98:b4:1d:13:8d:
ab:1c:d7:3b:93:98:45:62:5d:bc:0e:72:c5:f9:a4:21:a1:43:
30:e2:5c:f1:a6:6a:41:0c:9f:b7:27:ab:d7:11:d0:c7:32:14:
19:4d:98:95:b9:bd:b3:03:a1:49:de:50:9c:39:25:cb:78:db:
75:42:11:67:53:ba:3a:74:37:60:b6:e1:fd:5e:4c:d6:cf:07:
86:3b:b6:60:02:a6:c5:b7:6f:c9:39:d1:f4:a8:92:46:3a:ec:
a6:7d:e8:0d:29:10:db:d7:ad:17:62:af:ad:3a:79:bd:60:44:
76:33:fd:0f:76:ea:18:8e:de:71:7a:ad:66:0f:a2:b5:46:b4:
04:07:cc:86:4e:ad:7a:d5:c4:dd:a4:66:c6:dc:0a:4a:27:d0:
c6:48:10:99:67:a8:b8:ae:bb:c4:37:d1:99:dd:79:e9:40:7b:
14:0a:b7:32:d1:28:29:7e:12:6c:3f:0b:f8:ba:c1:b1:f5:a9:
c5:30:20:9b:bd:34:f9:fb:eb:6e:6c:2e:fd:06:0e:f9:88:37:
76:52:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:38:36 2025 by rpki-client