Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
File: U-fOlDUz-NPAVknylGgqJvgU8V8.mft (raw, json)
Hash identifier: w+TuPnYNgdS6AS7THUzr8sI6o8E2ftMrIZqNdCCB/Dw=
Subject key identifier: 77:08:A9:E9:84:42:5C:C7:AB:0E:82:14:F1:39:22:64:45:77:DE:C1
Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F
Certificate issuer: /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
Manifest number: 4C
Signing time: Fri 31 Jan 2025 06:23:23 +0000
Manifest this update: Fri 31 Jan 2025 06:23:22 +0000
Manifest next update: Fri 07 Feb 2025 06:23:22 +0000
Files and hashes: 1: U-fOlDUz-NPAVknylGgqJvgU8V8.crl (hash: HRYE4SWyquR2xKimQhdcHDM8npLkt4vKzQHt5oFa/T8=)
2: BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa (hash: KLVK6zfk1sI4e7G8hRism5bZ4U3Yqq/t49H1ShoVhoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
Validity
Not Before: Jan 31 06:23:22 2025 GMT
Not After : Feb 7 06:23:22 2025 GMT
Subject: CN=679c6c5a-f98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:47:13:a8:fe:e2:76:75:59:f5:51:86:de:
39:cc:ed:74:c3:72:6c:56:28:d0:11:a3:51:22:00:
85:e9:8d:08:3b:fc:0c:57:d4:a0:b2:f7:14:43:70:
c4:93:da:12:e0:6d:48:ab:4e:40:74:c7:10:57:73:
84:e0:0b:6a:e2:92:f4:d1:5f:c8:7c:79:03:11:b6:
ea:cb:c9:94:15:6e:fb:dc:18:06:08:8a:bb:e1:e8:
5b:2f:1c:72:c7:a5:60:be:60:3b:ab:6d:b6:ef:21:
90:cb:69:85:57:05:f7:17:e8:d3:bd:aa:0b:ce:9d:
a5:06:5e:9b:b6:ee:f3:2b:4f:3f:f2:f1:87:ef:8a:
98:59:78:86:d2:ea:57:f3:66:36:ee:47:ae:b5:d1:
e4:45:6c:f0:47:d4:58:2d:ec:db:6f:b5:f7:2f:6a:
b8:fa:9f:aa:39:96:ff:cc:35:44:2e:d3:09:46:e6:
c4:d7:09:70:d6:27:a5:c0:37:1e:b8:f9:70:a8:e1:
b8:24:57:3c:e1:d1:d4:08:e2:b7:fd:b3:36:64:49:
5e:1e:6b:9e:44:3f:49:d9:26:2f:aa:8b:44:a5:db:
10:aa:2e:29:b6:12:af:42:f9:87:be:59:36:b3:3b:
bf:4f:e5:4d:32:90:39:b4:6a:13:5e:f4:df:27:8e:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:08:A9:E9:84:42:5C:C7:AB:0E:82:14:F1:39:22:64:45:77:DE:C1
X509v3 Authority Key Identifier:
keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9d:6f:3a:ea:d1:89:f0:66:e7:5c:f3:fa:af:38:8d:ac:0c:
e3:a0:5f:7b:56:c8:c3:9d:7c:2b:88:34:7e:41:e2:80:bb:f1:
e4:77:f7:99:05:64:f8:c8:cb:fd:3a:5e:3b:6e:54:64:1b:75:
ff:8a:a8:d6:21:1f:26:db:f6:d9:4f:d7:7e:46:e4:2c:d8:ab:
c1:85:bb:4d:6f:62:60:99:00:c7:dd:05:39:d0:b6:38:6e:f7:
7f:4f:9e:59:12:29:d7:c0:e0:00:79:67:0a:05:ec:5f:86:29:
87:df:3b:49:0f:2f:b9:37:04:dc:3a:c4:79:58:f9:aa:b0:1d:
e2:2f:40:d7:9d:f1:b4:4a:e3:fd:a4:24:ad:36:5e:20:31:8c:
8b:de:b5:2f:37:fb:1e:c7:8b:2d:a9:1b:88:dc:af:d6:cf:8c:
6b:b5:85:e2:6e:62:4e:30:9b:a8:e3:15:5b:32:d5:ca:de:93:
6a:66:a8:2c:fb:6b:f6:d3:27:20:e3:43:91:de:37:25:8a:1a:
dd:f6:b1:d8:22:1d:8e:82:58:21:a9:a2:f0:96:10:3d:ea:05:
79:0c:0e:9b:dd:3b:a8:63:a9:1d:c5:a9:b4:1a:79:c4:45:eb:
2f:de:21:c6:91:be:8f:93:72:0b:85:4c:1f:f7:3d:84:59:f1:
7e:d4:df:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:17 2025 by rpki-client