Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json)
Hash identifier: 8wKmHKnspVbca419+BftnXCuiXXjQ8AEsyvM1DDWpxs=
Subject key identifier: 68:28:7F:CB:8B:58:6B:33:A3:22:F0:A4:14:01:DA:1C:5C:77:30:A1
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial: 0BCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
Manifest number: 0BB3
Signing time: Thu 30 Jan 2025 19:00:09 +0000
Manifest this update: Thu 30 Jan 2025 19:00:08 +0000
Manifest next update: Thu 06 Feb 2025 19:00:08 +0000
Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: YWGN3C3zXPcCm0zjXnmOA8jMW0VUdq6yee0nR1EMJ2Q=)
2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: TMxfkcL9ayQa9n8D6d2gJxA8lVX/wJpwW1/0Wnd0x6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3022 (0xbce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Validity
Not Before: Jan 30 19:00:08 2025 GMT
Not After : Feb 6 19:00:08 2025 GMT
Subject: CN=679bcc39-39d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e0:d0:be:f0:ca:f5:d2:29:bf:7d:0d:59:98:
bc:d2:9f:60:27:e3:f4:0b:9a:35:0f:2d:0e:ea:e8:
d5:76:cf:ac:42:e4:7c:36:54:b4:96:b6:2f:60:53:
75:b5:c3:f5:a0:05:11:c4:85:f3:12:ee:27:c6:1d:
09:1e:6d:55:2b:1a:36:c2:16:34:c0:3f:38:b2:14:
cf:59:46:f5:33:b7:17:e3:68:f1:80:20:b9:a6:f3:
24:49:b9:12:e3:29:06:63:54:30:75:bf:36:99:0a:
b4:57:76:f4:8e:03:44:74:44:65:7d:be:e7:a6:8e:
4d:a4:c9:e6:75:29:ed:31:52:ed:79:da:c9:f8:e9:
1a:95:8f:a7:1b:2d:7a:2b:00:31:24:ee:cf:92:5a:
e3:81:41:91:62:3c:6f:c3:13:41:79:96:16:b7:ea:
1d:50:89:df:89:a0:de:86:32:2d:10:cb:9c:87:46:
6d:af:27:e9:3c:e0:58:d6:de:72:c1:22:e3:24:9d:
7d:5c:c0:d9:72:93:67:ab:cc:97:d3:76:e9:9e:0f:
47:6b:70:4b:21:0a:70:5b:5c:fd:5c:94:c3:04:79:
ab:f5:1e:f6:ec:1e:aa:68:1d:44:5f:cf:31:88:93:
0d:67:b8:1a:ca:e3:7c:29:01:f9:92:ff:91:fd:5c:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:28:7F:CB:8B:58:6B:33:A3:22:F0:A4:14:01:DA:1C:5C:77:30:A1
X509v3 Authority Key Identifier:
keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:06:67:24:e5:1f:e3:24:39:9c:1f:80:53:53:26:f7:75:64:
69:39:79:44:ab:ba:46:f9:6e:89:e3:cc:14:19:59:d6:d4:f2:
2e:9e:7a:15:ae:c8:2e:af:33:7a:cd:8c:ea:bf:d4:20:20:38:
cd:2a:38:d5:bd:4d:cb:2e:e6:7c:cc:9d:22:f0:54:73:16:4f:
a8:b1:5c:79:05:e5:5e:29:04:ff:a7:33:0f:51:22:0b:56:af:
5d:e2:49:b3:d6:c1:27:d9:bd:93:8c:c3:fb:eb:d1:16:0b:16:
cd:18:a0:16:e4:e9:0f:bf:5b:9d:01:aa:4d:25:b8:ff:5b:b0:
22:15:4b:c1:0c:0b:59:8c:a9:5a:d6:e4:d9:de:2a:c2:33:ef:
c9:e7:40:29:35:1a:ec:b2:3b:e8:64:71:6f:93:d5:09:9b:ff:
9d:eb:6b:6a:e2:07:64:d2:e2:c2:0c:dd:4c:02:82:12:b8:a5:
33:e9:8d:93:3e:be:32:41:9a:d3:84:3a:52:2a:18:9f:8e:98:
36:6b:c2:cf:f2:83:b8:c6:b1:fe:16:fa:9c:94:38:c5:ea:f8:
3c:fd:2a:89:87:3d:5c:95:a6:01:f0:0f:15:4f:0a:e8:ea:af:
6f:c4:f0:9c:e2:1a:c4:26:a1:5e:28:fc:4e:9e:fb:86:a3:8c:
8a:cb:9c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:57:31 2025 by rpki-client