Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
File: ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json)
Hash identifier: lh3/UvJ/ckedMg5MfF8Sr2Nn8r0WMUr4gTwVkmicWJE=
Subject key identifier: 7F:9E:BE:43:05:E7:A8:06:B4:BD:9B:17:17:CB:84:C8:66:78:C1:21
Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7
Certificate issuer: /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
Manifest number: B2
Signing time: Fri 31 Jan 2025 05:08:14 +0000
Manifest this update: Fri 31 Jan 2025 05:08:13 +0000
Manifest next update: Fri 07 Feb 2025 05:08:13 +0000
Files and hashes: 1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: jKuKyBXyXxwZ6HFMjNY10wjDLsvATLDfGTifehRVzQM=)
2: ABCCEBB6CDC711EE8A262C4EC4F9AE02.roa (hash: 7KeTZX545IABA5t2arvNc6G1Z+gSO4ocpijqenr2MLo=)
3: 805DA0BCCCF811EEA9723F27C4F9AE02.roa (hash: D/+xv8jzE11lKaO3hHiOnEDdZgBcBo0atzPE35sFdcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7
Validity
Not Before: Jan 31 05:08:13 2025 GMT
Not After : Feb 7 05:08:13 2025 GMT
Subject: CN=679c5abd-1fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:ee:0c:48:35:39:10:f5:9d:73:e1:92:09:
4c:af:be:1d:a6:ab:a4:b9:7c:dc:5b:d1:93:7f:88:
1e:ae:c5:6a:55:e2:ab:cb:8e:e7:62:6e:73:4b:26:
08:7a:c0:8a:4a:32:39:7a:5b:62:a7:e3:ae:bd:77:
f7:43:d5:aa:93:a5:d9:f2:d1:fe:1d:50:9c:19:af:
63:9f:d3:40:d1:5c:3a:b5:f8:ff:36:19:c3:5b:11:
6b:c9:de:d7:a3:65:68:96:5e:01:48:1a:14:15:ba:
6c:cb:12:6d:ee:8a:99:0a:50:48:97:5d:d1:00:5c:
d4:da:09:b2:c9:56:0e:a3:a5:d7:e5:bd:f8:ed:88:
83:6f:1c:0f:c1:6b:27:a6:d1:be:e8:f1:2b:97:15:
7d:fb:d1:5c:b2:fb:ba:31:b6:1b:bc:03:f7:ac:87:
d3:0b:31:77:04:80:20:5a:f7:33:e4:a4:47:97:9b:
bf:16:4f:40:86:ea:cc:4c:45:92:14:1f:0e:77:ba:
ea:31:9d:18:0e:78:2b:04:7c:01:2b:83:a8:3f:0b:
e2:7f:24:fb:e5:76:03:5e:c7:5a:a5:e7:83:88:a9:
b0:bc:95:99:e0:92:10:c0:e5:0a:5c:e7:42:98:57:
bc:7e:ae:92:67:a1:e8:02:d0:96:97:f0:8f:46:95:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9E:BE:43:05:E7:A8:06:B4:BD:9B:17:17:CB:84:C8:66:78:C1:21
X509v3 Authority Key Identifier:
keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7d:5c:de:0e:42:7d:71:ba:37:a2:05:36:b9:34:d5:0f:db:
9d:85:14:9b:9f:21:82:3d:99:70:d6:41:8a:44:10:c7:75:42:
2b:02:31:74:32:5d:d8:e0:6b:be:fc:f0:0f:ae:ec:db:82:4d:
67:ba:bc:b9:98:4b:20:85:4b:f0:6d:9b:48:c2:63:ee:41:eb:
62:5d:77:43:e8:70:19:36:c4:06:58:91:bf:27:b1:1b:d3:40:
fe:9f:0e:5d:8c:d3:d2:16:44:0c:53:7f:05:f9:6e:64:20:7d:
93:6a:96:b2:17:c6:0b:c9:68:9f:45:d4:92:94:cd:1d:f6:b6:
1f:1a:a8:c4:c8:86:1a:32:7b:47:c3:09:23:93:7b:56:7d:ce:
90:eb:83:1d:23:d0:20:67:51:4e:97:19:d6:3b:d1:bf:a8:c8:
24:60:26:5a:92:fe:1a:13:4b:41:f6:05:ab:ed:6a:79:c4:60:
27:2a:ba:7c:aa:77:5d:92:58:4e:2f:6a:1e:21:b9:5c:bc:a0:
b3:02:c9:34:d5:b8:c3:f5:4c:da:71:9a:83:58:07:be:84:93:
33:f7:59:a5:7f:9d:d2:1e:e8:97:95:7d:a6:7f:3e:e2:7a:86:
e4:99:fd:b3:3f:56:93:0f:e9:8f:ee:c3:07:79:f4:46:5a:df:
1c:78:b9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:09:21 2025 by rpki-client