Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
File: U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft (raw, json)
Hash identifier: JnCEjDrl7Bx6WAoLdCcVigJKkOMuwlMNOqDfZ2u0Oek=
Subject key identifier: C3:D3:D2:BB:74:07:8E:36:5F:7B:80:9F:4E:6A:5A:D0:6D:CB:53:56
Authority key identifier: 53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
Certificate issuer: /CN=A914E070/serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
Manifest number: C4
Signing time: Fri 31 Jan 2025 05:00:50 +0000
Manifest this update: Fri 31 Jan 2025 05:00:50 +0000
Manifest next update: Fri 07 Feb 2025 05:00:50 +0000
Files and hashes: 1: U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl (hash: NRyaeNBTcje2inPlNbzrz7kIXJ0phlVXXcqQ0w8seNw=)
2: 3772F678BC1211EE8C54FD2EC4F9AE02.roa (hash: PzMfqv/JTphrRExc8y93sSocbbq7cPC2A1xhsVGan2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E070/serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Validity
Not Before: Jan 31 05:00:50 2025 GMT
Not After : Feb 7 05:00:50 2025 GMT
Subject: CN=679c5902-9123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:71:91:ca:81:47:28:dd:47:b2:63:22:a6:
03:ba:b7:77:8a:a4:4b:e4:42:06:48:d3:67:07:37:
f2:2f:c2:cc:e9:c1:53:85:24:6f:b6:48:3a:d3:4e:
7f:28:fb:a9:8b:c7:4a:84:76:f5:a6:97:d5:ad:ef:
76:40:2e:9b:a1:48:51:d1:8d:ae:82:48:60:59:40:
e0:b7:39:05:f5:73:d1:c4:6e:b3:d4:6e:62:cc:78:
52:9b:2a:61:3c:40:2b:be:34:06:02:53:87:1b:93:
98:0c:df:a8:2c:10:50:e7:62:90:fa:a3:5d:f8:92:
47:65:c6:35:e0:64:9d:e9:49:49:81:1c:53:f5:8e:
ab:5b:5e:ee:60:be:a5:70:6b:96:fd:ab:d7:3d:0f:
70:fb:3a:3c:25:a3:8e:94:60:35:ad:fc:2d:97:4b:
cf:49:73:93:89:30:f0:db:f5:70:70:fa:d0:ac:bc:
bb:b3:08:30:c1:05:f9:30:73:73:9c:7b:b4:16:69:
00:38:48:31:45:07:db:28:6a:cf:4d:9b:bb:6b:d8:
97:fc:66:b3:c2:28:d1:51:ca:af:6b:a9:9b:75:dc:
78:87:83:19:89:da:ec:59:85:b5:9b:ab:e4:41:2e:
31:15:75:d6:bd:88:f5:43:e8:ce:1d:0c:f2:0d:51:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D3:D2:BB:74:07:8E:36:5F:7B:80:9F:4E:6A:5A:D0:6D:CB:53:56
X509v3 Authority Key Identifier:
keyid:53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cf:66:ea:09:8c:98:cb:11:16:9b:52:b8:73:c0:c4:4e:0c:
a5:a5:46:ca:78:cf:a3:81:4f:a5:ac:9b:f7:e0:4b:a5:f4:87:
1d:53:ee:a1:92:27:db:3c:af:87:55:34:fb:fd:ea:fe:3a:e8:
fe:59:04:cc:00:8d:63:eb:2d:6b:7c:e5:c6:5b:28:0e:e3:35:
b5:6a:2c:6b:fa:24:a9:6b:10:b7:e9:8c:bf:bf:2c:ab:5d:e9:
30:aa:38:d2:96:e7:e8:ef:bc:04:2a:dc:c4:d0:98:26:90:cc:
e7:41:ad:29:d9:7c:51:ce:51:a6:97:2e:29:41:b4:05:a8:1f:
6e:a2:e3:22:9d:90:3e:51:69:21:62:ba:9e:08:60:e9:2d:72:
7b:de:96:66:39:9c:3d:b6:94:ff:72:1b:b6:69:ce:d8:fe:a1:
c6:ed:9a:27:6e:34:ce:06:25:9b:69:ee:b8:60:cf:75:2b:a9:
8a:6c:38:c1:81:71:1a:74:78:86:de:e3:fd:25:7a:f6:d6:3e:
62:f4:f6:60:06:eb:1c:ca:c7:18:77:6a:68:fe:84:12:b2:25:
fe:37:be:42:8f:f5:69:e6:ca:23:32:b3:22:fe:f9:8d:40:6c:
54:ba:3e:6a:7b:3f:b6:35:40:64:4b:19:f7:02:c0:65:77:ab:
fe:59:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:20 2025 by rpki-client