Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json)
Hash identifier: ng2q7DSZx017qtsZFZ2pUHNJV2GKAkMGxbvMYCdfras=
Subject key identifier: 10:4B:19:B2:D3:F2:EE:75:0A:9A:84:4B:23:42:CD:57:00:CD:F6:24
Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
Manifest number: 0196
Signing time: Fri 31 Jan 2025 02:46:49 +0000
Manifest this update: Fri 31 Jan 2025 02:46:49 +0000
Manifest next update: Fri 07 Feb 2025 02:46:49 +0000
Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: CkApnTymN4aSnMbpu5gNnfQPXsXXICag7M3pk1Hdi2E=)
2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: 70V2cII6ULY6BBWf+9zyNcfzJhH0MCllEioHlbtCrmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Validity
Not Before: Jan 31 02:46:49 2025 GMT
Not After : Feb 7 02:46:49 2025 GMT
Subject: CN=679c3999-4ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:b1:96:bf:f1:6e:f1:b3:02:fb:90:ab:ff:
cd:18:a2:30:5d:0f:8c:ef:18:ed:7d:d3:e9:dc:70:
92:e6:d3:28:fd:77:8d:2e:da:5c:2f:06:91:16:b5:
89:2f:23:3b:b7:20:f8:07:7f:b3:ed:71:53:ca:f4:
73:0e:29:44:51:ce:4b:e4:84:01:34:af:e6:6f:93:
3d:c9:9e:70:d6:b0:59:f0:51:02:5d:a0:1d:40:50:
fb:f7:a7:0c:50:92:68:cc:c7:e0:fb:84:14:a3:a6:
a6:60:cd:fa:e6:bd:20:52:8c:64:81:dd:cb:e9:f2:
11:0a:7c:ec:8e:45:fd:71:59:75:0a:36:0b:fd:49:
3d:7c:0e:c6:cd:7e:0a:d4:02:33:03:f6:94:b3:5d:
fe:a1:ba:b7:09:20:36:2b:9d:b3:96:83:4f:e9:bd:
e9:08:87:ce:f8:e2:dd:d7:e2:15:86:ec:e3:b4:aa:
41:56:d5:08:0a:3c:1d:bf:ff:13:0a:9b:c4:62:9f:
bf:d4:25:74:53:0d:a2:b7:20:06:4d:90:6f:de:e1:
50:6f:dc:02:97:da:75:fe:00:b3:6d:8a:7b:7b:33:
0d:10:45:1c:25:fa:37:f3:4b:c2:a0:ca:96:d7:b7:
f5:e5:ee:8e:15:45:a1:19:5a:c7:fc:75:e0:fa:c3:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4B:19:B2:D3:F2:EE:75:0A:9A:84:4B:23:42:CD:57:00:CD:F6:24
X509v3 Authority Key Identifier:
keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a1:48:80:46:19:d2:fe:e8:ce:a8:26:52:46:c6:c6:dc:ea:
a8:bb:fa:6e:c3:f1:7f:c6:aa:85:3f:06:f9:b0:3a:f4:60:7b:
7b:b1:2b:d0:ec:0e:33:81:54:f2:23:01:54:36:d7:34:11:7c:
5e:12:86:db:ab:f4:e0:66:93:39:43:cf:03:dc:41:a9:74:36:
f3:3c:98:95:aa:ac:e4:3f:64:bf:46:91:dd:3c:f4:3a:05:f5:
07:42:3f:21:a9:ff:9b:ce:d8:17:aa:87:b8:91:4c:10:4b:03:
46:ce:59:a3:03:f4:ff:44:a0:5e:76:4f:25:11:75:59:59:85:
a3:ca:c5:3d:41:7c:fd:a2:d7:85:60:59:21:5d:67:71:21:a1:
8b:b3:20:6f:51:52:6b:96:82:ac:f0:b6:e8:3e:a8:f5:a3:a1:
4f:fd:d3:c6:a6:7f:9c:63:99:90:e4:f1:15:14:c1:10:0c:9f:
0d:b3:f9:f6:63:2b:bd:02:75:ad:fa:4f:7f:6b:6d:ab:db:f3:
7c:53:34:d0:1f:f6:b0:76:88:f6:67:25:ce:b7:23:65:61:35:
3b:d0:a2:0f:0c:03:c2:1b:7a:39:30:12:c5:18:e3:fc:58:d7:
17:58:d4:fc:26:3d:cd:c1:47:e9:19:ae:6f:9e:2d:ae:8c:ca:
65:67:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:30 2025 by rpki-client