Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
File: rU1lO4NcTh3pjsZjdoiamoN2SwI.mft (raw, json)
Hash identifier: a9Mt80wLy2mP4NFb+IzB9tiSOAg56KxSNYpx2mIE4LM=
Subject key identifier: 95:8B:95:B8:42:BD:05:4A:BF:E7:64:67:BF:4F:DA:AA:8C:B8:2C:14
Authority key identifier: AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02
Certificate issuer: /CN=A914B669/serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02
Certificate serial: 3446
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
Manifest number: 3446
Signing time: Fri 31 Jan 2025 14:46:15 +0000
Manifest this update: Fri 31 Jan 2025 14:46:15 +0000
Manifest next update: Fri 07 Feb 2025 14:46:15 +0000
Files and hashes: 1: rU1lO4NcTh3pjsZjdoiamoN2SwI.crl (hash: k7izh8Kpr2YARV+SLnQmm52lW77OlGuWyKxQfJoZS5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13382 (0x3446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B669/serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02
Validity
Not Before: Jan 31 14:46:15 2025 GMT
Not After : Feb 7 14:46:15 2025 GMT
Subject: CN=679ce237-afcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:5a:3f:e2:87:e1:f2:6d:91:5c:d1:9c:0c:
46:b2:95:81:9d:5f:4a:3b:95:9d:9a:65:3d:2f:5b:
2f:d2:2a:09:f0:9d:cc:85:eb:e6:bc:72:cc:dd:fd:
b4:89:9e:85:30:62:91:6b:b6:fc:1a:0b:f3:eb:51:
ed:fb:9f:b0:5e:7b:6a:ec:52:06:e6:f2:8e:25:2f:
43:b9:8c:9d:40:2e:41:91:db:2a:aa:03:be:df:67:
b3:38:73:e6:90:8a:ab:61:56:77:38:85:64:0b:4e:
98:2d:3a:d3:df:2f:6b:fd:97:96:98:ad:fa:6d:13:
40:aa:95:f1:b5:f7:2c:77:d4:02:91:e6:78:99:74:
2a:44:ff:a0:46:87:60:06:ae:b7:b9:81:5e:3b:95:
48:ef:1f:25:82:ef:df:51:90:29:48:54:f8:50:f3:
9f:de:ec:87:04:b4:a6:0c:6f:f2:7f:26:ac:33:8e:
71:c8:29:5c:3f:1c:bc:b9:9e:a5:a4:4f:6d:48:30:
fc:8e:03:8c:37:2f:8a:59:c8:4d:af:23:8f:88:80:
3d:55:5e:bd:83:b4:2c:55:df:9f:f5:36:c1:88:aa:
ca:f6:dd:a5:a8:13:d7:0e:ac:58:70:60:03:93:a4:
68:fe:8f:39:ab:de:dd:7c:6f:02:49:1b:60:38:d9:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8B:95:B8:42:BD:05:4A:BF:E7:64:67:BF:4F:DA:AA:8C:B8:2C:14
X509v3 Authority Key Identifier:
keyid:AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:9e:a4:81:19:21:5a:90:51:2c:af:da:be:fb:f9:38:12:04:
d3:4b:e9:82:4f:83:bd:df:02:60:d9:13:b6:63:0d:72:24:86:
bb:4f:b9:5f:a8:d4:eb:ca:8f:21:b4:e2:75:ba:6b:e6:12:7d:
42:9f:1f:2b:be:73:79:99:6d:2c:35:ba:3b:f6:97:58:4d:c3:
33:6e:77:c7:f2:f2:84:f6:f8:29:c9:0c:76:92:4e:a5:ea:4e:
cd:67:b0:48:80:a0:4e:8e:a3:08:bd:dc:45:d9:0c:e2:e0:c5:
fd:d1:e9:db:ef:30:39:e4:89:de:40:9c:cf:5b:cc:41:23:04:
77:ed:10:4d:72:b1:c8:d5:f5:33:16:25:63:0a:97:66:c6:f1:
a0:cd:65:c4:34:ec:a9:61:f0:98:ac:91:c0:ea:db:59:81:64:
4f:26:a1:0e:1b:77:39:4e:a4:73:96:e2:37:bb:29:0f:c5:00:
91:33:24:d8:70:99:39:eb:ab:69:de:a9:5a:f7:8c:2b:b6:14:
f9:c7:8a:20:f1:8b:c0:91:06:e5:b3:5e:8b:dd:b5:69:2c:f1:
e2:a5:f9:a6:15:65:96:3f:87:43:07:5c:3b:46:98:2e:09:27:
ea:ef:fa:14:ac:e6:c2:77:66:04:d7:8f:d4:a1:d4:49:27:6f:
0d:25:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:32 2025 by rpki-client