Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json)
Hash identifier: Vc0mtsBRdqiLXrqW7Xe7lT+cBngQhbXEFbGUTQOyZxQ=
Subject key identifier: 86:DB:EF:B7:B8:CA:45:83:7D:1C:D8:21:32:25:BE:2E:E6:ED:DC:8F
Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Certificate serial: 088D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
Manifest number: 189F
Signing time: Fri 31 Jan 2025 17:23:01 +0000
Manifest this update: Fri 31 Jan 2025 17:23:00 +0000
Manifest next update: Fri 07 Feb 2025 17:23:00 +0000
Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: XRhMcB2AUxWoRVC2mz5IcslLnvP4SgQ3bZOImF+7BCg=)
2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: U4xLRRVIu/47Hk96KaKrlpfbqkMWBdbyLIYWn3tVklk=)
3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: zVypx1jthStqt4cyr5Z2sav6JsTBbixhZiV2nbloQxA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189 (0x88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Validity
Not Before: Jan 31 17:23:00 2025 GMT
Not After : Feb 7 17:23:00 2025 GMT
Subject: CN=679d06f4-b01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:88:64:73:72:8c:10:bb:b8:ea:a9:f3:b1:
51:e3:74:be:6c:8d:75:33:1a:7a:3a:e5:b4:d6:4e:
b9:41:e4:1e:4e:16:b8:e4:2c:18:77:c2:df:d3:f7:
a0:ab:aa:c6:3c:4d:d7:93:2b:1c:85:6f:ec:99:29:
41:c7:10:e3:a5:47:ea:86:25:a9:da:aa:09:ca:de:
43:6e:b9:65:76:41:2e:34:0e:58:26:d1:bf:d2:85:
ee:df:34:7e:a5:a0:53:a5:32:84:0a:4f:3e:02:4a:
8c:95:1b:8b:dd:22:0d:6c:0b:e2:3d:7f:b5:0d:e4:
0c:39:cb:ae:5d:1c:e1:ab:f3:16:66:77:dc:78:b3:
bf:2c:c6:64:a4:60:87:2b:41:1b:e8:fc:03:42:ca:
56:ed:1e:04:8b:b7:54:f1:20:3c:1f:93:42:ee:02:
ad:73:c9:b5:6a:a8:13:50:2e:53:7f:d6:d5:8c:59:
8c:21:2f:cd:db:3e:e4:cf:d6:ae:a8:81:60:d9:6f:
41:f4:fc:ad:34:c6:93:2e:86:2e:f1:cf:ff:8e:e7:
5d:8c:83:5c:6a:63:cb:67:4e:da:00:b4:0d:79:98:
fd:a5:e8:f7:9d:d0:fb:1f:5d:b1:9c:7b:a5:ac:6a:
60:45:4c:1b:0f:8f:b5:df:d4:ef:3c:eb:ef:c9:d4:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DB:EF:B7:B8:CA:45:83:7D:1C:D8:21:32:25:BE:2E:E6:ED:DC:8F
X509v3 Authority Key Identifier:
keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:d1:00:d4:15:21:cb:13:31:82:c7:2c:e2:25:8a:2e:f3:e6:
6a:7c:0c:b4:10:fc:44:b5:95:32:24:c4:b2:b2:6c:4c:79:66:
79:fd:9f:3c:da:13:ad:a8:2c:a1:2b:e9:d1:fd:34:f4:83:13:
33:be:44:f1:24:e5:46:31:7f:20:2f:22:ab:b9:76:28:4c:4a:
94:b6:1d:0b:42:4a:03:42:c4:2a:6a:69:fa:7e:49:7e:ac:5b:
91:bd:7e:c2:b5:34:d2:ac:ed:b5:df:62:f5:31:f6:87:bf:38:
64:3e:96:9a:f0:c7:cf:50:75:07:11:f3:b9:5c:61:ca:ae:15:
24:9b:f6:b7:1a:36:45:aa:ee:e1:86:a0:02:65:8e:94:ae:32:
08:a8:4d:2e:7c:b0:44:5c:d7:56:06:37:b5:25:44:0d:83:03:
9d:95:09:7b:1c:be:66:2d:3d:fb:26:be:9e:94:c6:dd:77:5d:
28:4c:61:3d:fa:5d:c6:29:e8:fe:a4:4d:05:9c:b0:ae:2b:e4:
96:95:77:30:3d:d4:ac:ce:17:1b:dd:e4:07:5a:7d:3b:3b:56:
1d:09:0f:a0:b1:66:df:71:92:fe:71:7d:d5:9c:28:5e:43:c9:
e5:cb:98:e0:bf:16:2a:1c:cd:23:e7:0d:5a:2a:68:3f:c2:33:
97:de:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:34:53 2025 by rpki-client