Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json)
Hash identifier: qjx9+HNGwyihn1Krxz3vPXK1KXlhp7YcUEPknyz7iWI=
Subject key identifier: AF:5A:4B:80:16:9B:1C:34:AF:63:34:70:A2:32:64:70:37:EE:B1:79
Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
Manifest number: EE
Signing time: Fri 31 Jan 2025 04:27:42 +0000
Manifest this update: Fri 31 Jan 2025 04:27:41 +0000
Manifest next update: Fri 07 Feb 2025 04:27:41 +0000
Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: uc658jYVh6R+3oIeqi6nepbDNawi944SWBp22zfS2sw=)
2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: N2i2agjUsHeAH/r62Q8YVpeahgIj+1qwNN91iqqJ1uM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Validity
Not Before: Jan 31 04:27:41 2025 GMT
Not After : Feb 7 04:27:41 2025 GMT
Subject: CN=679c513d-b50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d3:a2:e3:a0:c4:ee:0e:2e:da:bb:32:29:7b:
e9:50:8d:f6:4c:b7:99:e1:93:f7:94:fb:f1:0a:23:
f1:1b:02:f5:f8:24:9a:df:56:91:67:d3:32:7e:0b:
72:2a:be:2b:e3:64:b0:36:77:17:84:2b:90:56:d4:
c7:d5:fb:0e:40:aa:2f:d6:b7:ed:10:f8:5c:1e:49:
9b:4d:56:77:05:b7:3e:f5:73:87:54:58:67:b4:c5:
ba:3d:74:34:f1:1b:3e:f2:98:e1:c1:0c:4a:31:e3:
a6:31:b2:a9:2d:f7:43:27:a4:49:89:f0:77:58:67:
75:d9:14:17:89:0b:0c:a6:04:33:db:d8:0d:45:aa:
21:48:ec:a3:46:9d:1e:b3:4e:8b:d9:a3:8d:30:56:
12:f0:58:b6:4d:63:77:79:2e:d2:91:95:9f:71:2d:
06:bf:fa:20:62:10:a3:ac:77:a5:e8:33:98:97:eb:
a8:d4:5b:9a:a7:8f:55:1b:53:24:7f:65:36:21:74:
7c:71:07:d9:cb:3f:07:21:57:c1:c7:fc:cb:7b:b0:
1b:d1:44:d1:49:d4:1b:0a:44:0b:9c:4c:fc:ae:09:
ec:47:c4:c2:0a:42:cc:04:23:e2:81:72:6c:72:90:
87:4a:b3:c7:f0:52:5c:a4:46:d1:80:b0:e3:ac:6d:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5A:4B:80:16:9B:1C:34:AF:63:34:70:A2:32:64:70:37:EE:B1:79
X509v3 Authority Key Identifier:
keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0b:e7:0b:8c:2f:66:13:86:aa:ea:28:5b:8e:81:58:dc:28:
d1:23:b4:bc:0d:56:5c:3d:fa:e5:93:a3:a3:0b:a5:61:45:4c:
93:23:a5:35:cf:b7:19:ac:67:0d:0b:1b:35:d6:26:24:c7:fe:
86:eb:ed:0a:2b:18:9a:39:ea:37:41:b8:7f:2a:71:ac:fb:bc:
d4:c1:32:50:4e:de:60:4a:b7:34:99:9c:6c:d3:26:d1:e6:7b:
5f:ce:37:94:2d:a3:7f:f9:33:21:62:ed:d4:ae:26:80:3b:cf:
24:fd:8c:8f:c3:27:9e:8a:b3:9d:46:4f:71:6b:ac:53:35:c7:
5d:6d:17:14:82:2c:d5:f4:05:fd:89:0c:39:bf:46:15:cd:90:
99:ed:5c:8b:2b:46:69:a0:04:af:b2:5b:70:5c:4d:7b:8d:a4:
c1:52:8a:e5:1e:f0:c1:3a:0b:d0:94:78:51:09:5f:b3:5c:3a:
80:0e:3e:44:13:1e:3e:ad:6a:af:13:b2:98:0f:48:77:1a:ce:
05:eb:36:4f:f2:7c:1e:7c:e5:10:75:36:92:7c:f6:ce:af:41:
67:fc:58:67:02:df:0d:c1:17:40:bd:ad:60:a0:eb:97:a0:7b:
92:03:43:a9:a9:a7:23:55:4e:e5:de:68:32:9d:7d:b0:cf:11:
0f:69:b2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:55 2025 by rpki-client