Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
File: UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json)
Hash identifier: WzslilmQIMmnPCfUiLrOKuL24Dwmx+O4zYH2E879oh4=
Subject key identifier: FF:FD:6B:39:47:7F:E1:E6:34:64:54:1D:19:34:D2:3C:52:BE:B1:53
Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
Manifest number: 0D
Signing time: Fri 31 Jan 2025 07:09:20 +0000
Manifest this update: Fri 31 Jan 2025 07:09:19 +0000
Manifest next update: Fri 07 Feb 2025 07:09:19 +0000
Files and hashes: 1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: P+3WbKK95HS/npCA+EJQqUGAorJoQ0GjdJStNzd/JGk=)
2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: nvtKwWFEZOMd88gDjqvdFcOF+TJpXNSXEguvJEtlOSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Validity
Not Before: Jan 31 07:09:19 2025 GMT
Not After : Feb 7 07:09:19 2025 GMT
Subject: CN=679c771f-ff12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:8e:c1:d7:e5:f8:e2:81:a4:11:44:ff:24:
4e:68:c3:98:24:2b:17:96:77:99:de:b2:7c:73:4a:
55:d9:56:b1:98:5b:3c:cd:c1:02:54:de:b7:6a:d1:
e2:76:a9:9c:99:f4:10:cd:43:3a:73:94:7d:e2:f3:
b9:4c:b2:75:c2:97:bd:ce:85:7c:7f:c7:14:81:ad:
3f:32:be:e6:a0:dc:bb:f9:f1:d3:cf:cd:3f:54:a8:
18:8d:f8:e9:2d:4d:ad:65:ba:ce:62:32:2c:c9:45:
fd:ab:27:64:d1:5e:38:4f:47:03:eb:50:f1:e2:25:
20:5a:4c:dd:22:e3:a5:67:b3:52:22:fa:93:05:18:
ba:48:2a:73:f7:b1:3c:5d:69:56:d7:90:8e:58:fb:
4f:a7:38:2a:32:09:1b:6f:f5:17:e4:5e:fd:58:98:
aa:7b:d0:3c:a9:5e:cc:3e:31:ad:b5:4b:d6:1e:cf:
da:2b:71:7a:68:e9:58:15:09:d7:6b:a8:0e:97:b0:
a4:eb:b3:fc:3d:d8:c5:93:22:24:42:70:45:5b:dc:
21:4e:e3:b0:87:47:9c:a4:8e:f8:c5:68:f4:dc:fd:
43:ba:70:09:91:66:56:4f:95:f2:5a:2d:14:87:3f:
52:a7:70:38:62:21:6d:93:cb:06:cc:b7:4c:80:61:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FD:6B:39:47:7F:E1:E6:34:64:54:1D:19:34:D2:3C:52:BE:B1:53
X509v3 Authority Key Identifier:
keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:ae:f2:6b:c7:48:92:7d:f9:d8:c7:40:b7:07:6e:6b:ad:6b:
1c:99:d3:cb:45:00:95:a9:24:a8:45:a6:73:61:f1:8b:2f:3e:
c9:d4:f9:a1:25:1b:c0:e7:b7:86:1a:2d:64:a7:da:b1:0a:b2:
ec:78:26:fb:7a:09:8b:83:a4:77:63:55:e1:25:30:93:cd:01:
65:33:8e:43:95:c3:d1:75:16:af:bb:4d:36:8e:12:6d:9f:3f:
b4:47:9a:f4:5e:10:61:f4:88:50:74:b4:b8:50:1b:b0:b9:b6:
db:a5:e1:44:44:36:36:4e:05:d5:0a:f4:fd:eb:1a:b8:55:b0:
52:03:ce:38:d0:ea:b1:db:63:da:35:1c:5d:19:65:9e:f1:00:
38:86:99:ca:7a:fe:db:49:2d:10:5a:32:04:c1:b4:2a:05:f0:
1b:56:b8:59:0b:d4:34:c3:c1:4b:49:16:b8:64:18:43:e1:5c:
a6:a4:a1:41:3d:98:29:8a:36:03:27:9f:f6:5b:1d:aa:49:0d:
59:4a:68:29:9a:fd:8a:3a:1b:c0:8d:05:65:cf:4c:c6:c9:71:
47:e5:f9:4e:96:3a:50:75:a8:20:1a:69:e2:f3:a9:b2:90:d4:
e7:58:d5:ca:af:c9:0e:b1:c4:31:13:e1:72:37:1e:ad:7a:f3:
76:c5:57:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:31:00 2025 by rpki-client