Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
File: uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json)
Hash identifier: Tz3IUQFpxEolIPE0GLsGpszgQJqQtB9A4K3MZ7zjEyk=
Subject key identifier: 0B:DB:AB:4B:45:40:57:FE:DD:2D:8B:6A:44:82:A4:29:E3:FF:81:18
Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95
Certificate issuer: /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
Manifest number: C3
Signing time: Fri 31 Jan 2025 05:00:59 +0000
Manifest this update: Fri 31 Jan 2025 05:00:59 +0000
Manifest next update: Fri 07 Feb 2025 05:00:59 +0000
Files and hashes: 1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: vXpJ9K0VhS9Io2ZmZ8Sj6GdxsKk3jLv6k7dBOL6Sluw=)
2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: rOfi7pLc2YXhQ9Pw2aUr9rz0+D/rY6Ijcu5KC1k/f/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995
Validity
Not Before: Jan 31 05:00:59 2025 GMT
Not After : Feb 7 05:00:59 2025 GMT
Subject: CN=679c590b-e673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:d4:4f:a4:b3:ce:bc:60:ac:9b:e0:9d:d6:
3d:c8:29:76:40:f5:2e:ad:c6:f3:3d:21:2d:6b:2c:
c0:8f:f9:ab:fd:fb:d1:b0:03:bc:30:5a:0f:9e:27:
3b:df:0b:a2:ba:cd:16:92:9a:a6:97:74:5c:0f:3c:
d6:80:37:de:23:68:43:0e:83:9e:66:85:5f:2d:0b:
1c:c0:92:14:8d:c5:15:a3:96:8b:4f:5d:0b:a1:5d:
ee:c3:65:34:8b:ed:40:b9:5e:47:6b:4d:a1:09:91:
c4:91:5a:2a:90:22:51:30:20:45:ab:26:f2:07:d5:
63:20:02:80:29:58:4c:a8:35:a4:88:4b:5e:49:9b:
cc:9e:98:34:37:98:9c:6d:29:2a:44:ef:28:83:34:
a4:8e:c7:49:65:49:ad:98:96:15:7e:b0:d1:70:95:
10:48:bd:15:a1:e7:bc:73:d4:f8:74:42:ea:08:88:
9c:fc:cf:15:f6:5f:ea:1e:9a:a6:60:db:2f:4b:ba:
7f:3e:00:d1:38:95:10:8c:76:87:aa:0a:2e:ef:09:
d1:46:7d:4d:6f:b3:85:a8:ed:e9:fc:46:59:35:05:
e9:f9:0f:cc:69:f3:ea:4a:92:5f:69:89:24:15:03:
53:89:69:df:58:61:e7:cd:7a:0a:05:c5:e3:2a:1d:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DB:AB:4B:45:40:57:FE:DD:2D:8B:6A:44:82:A4:29:E3:FF:81:18
X509v3 Authority Key Identifier:
keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ac:98:57:89:8e:97:30:d2:04:48:29:eb:f1:60:f0:e2:2e:
02:26:e3:3d:35:8e:5c:87:dd:6d:c3:fc:eb:b0:b1:24:8e:8d:
1e:d6:63:7b:e8:e1:0e:3f:24:37:08:ff:33:e1:a3:a7:14:60:
9c:97:a3:c1:00:df:70:3b:ee:d9:9e:b5:cd:d3:6d:bc:b1:a2:
0e:41:65:52:3e:10:25:c5:38:bc:60:12:7b:93:77:06:17:11:
89:f1:6c:10:f1:cf:b0:01:b9:2e:57:f3:63:bd:5f:d1:04:47:
5d:7b:3e:14:72:1b:d9:6e:cc:70:98:30:66:19:79:b5:e9:24:
cf:04:c3:6e:10:6d:a5:5d:03:42:7c:15:9a:66:e1:d0:3d:b9:
0d:41:1e:78:ce:59:c3:f7:ed:b5:07:47:87:60:3a:70:9d:47:
17:8c:61:11:4c:33:3e:8c:a0:ef:9e:5b:65:cd:57:f0:8c:0f:
c5:21:04:09:f8:99:bd:23:b5:c2:72:42:d4:9c:d1:09:fd:f5:
3c:70:f7:c8:f9:b3:b3:c7:55:eb:e8:0a:59:3e:3a:f1:6c:62:
45:6d:6d:29:10:6c:0b:ef:85:17:7f:f2:55:eb:1d:34:b8:5b:
ed:c8:e6:f7:07:56:c7:8b:77:0b:d7:c6:79:20:e0:ba:57:43:
d1:38:9f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:54 2025 by rpki-client