Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File: u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier: CZE6yHxSdEJctundezPJCkg101g7VZl5TkvtfQ/+S3g=
Subject key identifier: AF:99:89:E6:45:CB:2D:1D:15:63:33:5C:58:DB:1F:F1:1B:C9:18:2C
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer: /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number: 01AE
Signing time: Fri 31 Jan 2025 02:27:25 +0000
Manifest this update: Fri 31 Jan 2025 02:27:25 +0000
Manifest next update: Fri 07 Feb 2025 02:27:25 +0000
Files and hashes: 1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: sR8fO9cMUpTrb696+ABnl5XadVjVLMVIh9dLKdO0T0M=)
2: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: +L4H64N18c7HC9b7a2kMN0oPwzUDs4ByILHmodSVj7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Validity
Not Before: Jan 31 02:27:25 2025 GMT
Not After : Feb 7 02:27:25 2025 GMT
Subject: CN=679c350d-a395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:da:42:76:d0:23:d9:34:2c:a3:d0:29:4b:
69:9a:e8:56:31:74:88:82:58:9f:f5:23:2e:55:49:
29:9f:d3:21:b1:cd:6d:f9:13:cb:c5:b9:b8:c7:23:
ee:0c:c6:44:0f:de:84:29:7f:94:dd:f4:4b:cd:dd:
91:b0:36:fd:a2:ea:c7:a7:e8:ec:63:e7:b9:3f:d1:
50:82:4b:52:a9:c8:5b:19:bd:e3:a6:89:77:75:87:
0f:d8:28:09:af:b4:0d:14:2a:84:45:0b:1b:7e:6a:
61:78:53:96:0e:a3:35:5e:a1:ae:ef:73:34:ae:b6:
8c:61:c1:03:a3:0a:55:19:f2:70:ff:7e:5e:38:48:
3e:a1:c5:40:3d:60:3c:18:dc:c2:4c:3b:b9:20:15:
4f:cc:32:c8:59:05:2d:e3:fa:88:b9:fb:77:9a:e5:
71:6e:08:09:75:5d:9a:48:56:a3:83:bf:3a:b4:a1:
cb:a1:92:0c:ce:1e:ac:f4:e7:8a:df:56:b3:9e:48:
86:3a:71:7f:b0:e0:08:d9:58:55:11:63:73:ea:9b:
7a:3a:d2:90:cf:ee:04:ed:da:bb:72:11:d1:f7:ec:
70:54:41:79:3d:be:22:eb:6a:6a:09:33:64:4d:e5:
6b:e1:dd:c6:f3:2a:c5:f5:52:9a:a0:51:d8:63:67:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:99:89:E6:45:CB:2D:1D:15:63:33:5C:58:DB:1F:F1:1B:C9:18:2C
X509v3 Authority Key Identifier:
keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:a3:98:1e:73:61:85:07:05:59:39:79:51:4f:1b:37:3b:03:
fb:87:2c:0e:f1:84:c8:e5:8e:2c:92:0b:6c:18:98:31:f3:39:
92:ef:79:cd:8b:a7:81:40:8c:27:3e:62:ef:e2:8e:bd:3f:53:
fd:28:8a:20:a7:0d:59:05:20:1c:9e:9d:d0:b9:35:e0:6b:a0:
f6:9d:e8:0e:0b:1e:64:92:19:68:73:34:a9:42:32:f0:d2:46:
ab:86:4d:3a:15:b2:79:0b:d5:da:19:15:4b:ba:f1:62:29:95:
d4:66:bf:82:f7:ca:1c:40:82:b0:1d:5b:c9:36:8d:0a:1e:17:
0b:f7:fb:22:11:19:cf:d3:5f:79:69:b6:5d:e1:7c:85:d1:83:
e0:86:1e:02:2e:af:9a:f8:71:bc:5c:b6:31:22:16:a9:48:53:
e3:99:5e:8d:58:e5:03:4c:fd:ea:cb:d9:91:52:58:5f:f8:05:
46:9f:f0:5f:7d:be:8c:08:cc:bc:4a:06:15:7d:24:80:3d:21:
a6:56:a2:fd:a3:be:51:42:92:38:5c:f9:e4:4c:3e:bf:ca:fe:
de:d1:b1:74:f4:4f:3e:61:c3:28:b3:59:0f:85:1d:e3:19:c1:
36:ff:de:c5:8e:07:32:1f:da:c2:3b:71:9e:9f:73:bf:35:bb:
53:29:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:48:21 2025 by rpki-client