Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
File: UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json)
Hash identifier: XeXqRjvyA8vEZU6/t6pYWqbkaMo5Tjin8kkKBx06PJA=
Subject key identifier: 62:33:4E:D4:85:71:B8:4A:6B:74:EA:9E:F2:41:75:CF:AE:A1:8B:34
Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
Certificate issuer: /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Certificate serial: 0F8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
Manifest number: 0F85
Signing time: Fri 31 Jan 2025 17:30:57 +0000
Manifest this update: Fri 31 Jan 2025 17:30:56 +0000
Manifest next update: Fri 07 Feb 2025 17:30:56 +0000
Files and hashes: 1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: T1ju4rP3PElK2aOfJv4LQgJX+nKsEAh+HJmWlADbEx4=)
2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: fTPZgUpfkCrRNcsWrVhyFlyMxo5DlfFLB/9BRl5cziM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3981 (0xf8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Validity
Not Before: Jan 31 17:30:56 2025 GMT
Not After : Feb 7 17:30:56 2025 GMT
Subject: CN=679d08d0-e701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:84:9b:55:47:4e:ef:16:98:95:dc:5f:79:dd:
46:9d:ed:4d:0c:83:d3:8f:09:61:a8:11:0b:6e:27:
c4:11:be:81:12:2a:32:95:a7:1b:7d:12:a1:60:61:
39:a7:33:a1:80:1d:0b:eb:cd:1e:d8:76:a3:04:19:
8a:ba:a8:98:1d:43:e5:7b:23:ac:23:d7:b7:6b:05:
75:cd:22:8a:97:61:57:6e:38:21:5e:ef:58:ed:37:
93:57:ad:e1:b8:2e:55:53:a8:f7:15:77:3b:ab:e4:
87:5d:06:58:74:f4:1a:ab:6e:a6:08:31:53:27:93:
1e:66:27:78:7e:8c:bd:2c:6f:5d:9b:00:6e:21:f7:
b1:bd:bd:a5:94:ed:48:7f:54:9b:b3:08:08:28:f4:
df:14:af:bc:52:e0:24:6c:cc:48:cf:5a:5f:21:37:
a6:4e:4e:50:03:5d:c9:f9:92:d8:98:a7:94:b7:5e:
88:6a:34:a7:e2:e1:2b:16:a3:4b:55:3b:bf:b4:46:
3f:d5:a3:27:f9:8d:b8:27:b4:2a:ec:d5:75:0f:35:
1c:cd:98:8a:46:9f:d2:76:17:63:0d:a4:5d:ac:a5:
d7:49:75:dc:38:8e:7d:f5:21:dc:58:84:20:9c:2b:
4e:44:5e:a8:25:2a:62:33:13:74:a7:5f:a6:71:ac:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:33:4E:D4:85:71:B8:4A:6B:74:EA:9E:F2:41:75:CF:AE:A1:8B:34
X509v3 Authority Key Identifier:
keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:12:56:6b:51:34:27:70:a4:c9:74:47:b7:9f:34:1c:69:fe:
2a:67:34:fa:63:ca:d5:02:5d:c4:cf:6d:96:25:de:7d:92:a2:
c1:4a:74:bf:3b:b4:bb:be:f3:d9:ce:00:45:39:54:a1:00:33:
a6:1f:54:86:84:e7:ed:e6:67:c7:1a:e5:32:ca:a3:51:e7:a3:
71:6a:58:f9:2a:37:ca:13:67:db:a4:d8:fd:52:c0:0c:7b:66:
20:06:bf:11:d6:04:44:6d:fe:fd:d8:39:95:05:bf:f0:a9:c6:
8d:08:f7:cf:6e:ac:de:3a:47:b6:90:57:d0:5e:dd:df:fb:dc:
98:22:7b:2d:b2:35:31:d8:e6:a8:32:62:d8:2d:0d:e6:0f:f7:
78:65:79:06:8b:d7:05:e5:7f:aa:6d:2e:44:41:db:ba:8c:80:
0a:5c:61:2e:65:62:12:0d:9d:bf:64:1a:05:53:96:f1:10:60:
a2:2e:73:78:f5:2e:f2:86:63:3c:5c:fe:27:f0:d8:15:c6:97:
95:58:64:a1:2b:7d:6e:51:83:94:a7:83:36:f3:25:2e:ef:8f:
04:10:0d:55:14:ae:ce:5c:ec:16:47:ea:e9:41:b6:d6:7e:28:
7a:f4:47:5e:9f:c8:6b:0c:39:41:6c:1b:51:f2:45:4e:97:c0:
14:cf:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:03 2025 by rpki-client