Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
File: u59Cz844jtxLKepl3rYWKyVtIQI.mft (raw, json)
Hash identifier: l42HPQixnXvp0sFrR/D3it7TE1xVM4o2IpYXcLJsY4U=
Subject key identifier: 5D:E4:23:DF:C7:2B:00:CB:2D:FA:E8:B6:0A:24:AF:E2:08:7F:38:F3
Authority key identifier: BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02
Certificate issuer: /CN=A915DAF1/serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
Certificate serial: 070B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
Manifest number: 0703
Signing time: Thu 30 Jan 2025 21:51:31 +0000
Manifest this update: Thu 30 Jan 2025 21:51:31 +0000
Manifest next update: Thu 06 Feb 2025 21:51:31 +0000
Files and hashes: 1: u59Cz844jtxLKepl3rYWKyVtIQI.crl (hash: h7fgy05h9jUfBn5KpCaYvPBI/SYlfj/kY/6dCOnt8jI=)
2: 84F992E67BB911EFA4CC334CC4F9AE02.roa (hash: T0OC8vypxp+M/dpkk0NI0MWGhyVp/WAt7EuiDP3XP6E=)
3: 5A9BEA702D7611EB9827C368C4F9AE02.roa (hash: mPymEW6z8IFo04Vj9swNHA6t8X5G4yl8M8HmOF186ew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803 (0x70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DAF1/serialNumber=BB9F42CFCE388EDC4B29EA65DEB6162B256D2102
Validity
Not Before: Jan 30 21:51:31 2025 GMT
Not After : Feb 6 21:51:31 2025 GMT
Subject: CN=679bf463-dcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:eb:4e:c8:eb:dc:56:e6:71:b1:45:83:84:
9f:b5:d8:3a:0b:37:2b:2c:b8:4d:12:dd:0e:10:c0:
71:d3:9b:a8:df:ae:ff:8b:3d:e8:b4:36:2b:71:5b:
f5:80:cf:92:6c:78:96:60:37:3d:af:ce:15:ba:2e:
27:a1:31:ef:06:ca:d0:be:c9:a7:d0:e3:32:2f:4e:
f4:58:b5:b1:07:5c:4f:72:f6:4e:b6:e6:57:ea:04:
49:d7:92:f3:88:04:aa:8f:03:49:b0:9a:fa:b3:a5:
19:e1:e7:21:46:e2:f7:1d:75:43:5d:79:d7:d1:e0:
94:e6:7b:cd:99:6b:40:5c:92:6a:ba:34:c4:8d:b8:
13:e6:90:f3:e3:2e:80:18:64:fd:12:ff:be:1f:fe:
de:f3:ea:ef:72:fd:2b:6b:d5:e5:b2:43:77:fd:d0:
88:5e:68:2d:6e:6a:bb:6e:61:f1:a8:f1:5d:48:e1:
e7:e6:ad:bd:e0:3a:a7:d8:cc:fa:56:b8:70:79:2e:
c8:9b:2b:3c:de:4f:85:4d:8d:fc:a5:0e:3a:c5:30:
5d:9d:cf:e7:7a:85:9f:7b:6b:b1:54:0b:e3:4e:d9:
38:8f:8d:8f:49:56:1c:87:08:00:e5:37:a8:3f:3b:
db:08:91:06:22:ca:e8:6f:c7:14:c1:92:77:bb:fe:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E4:23:DF:C7:2B:00:CB:2D:FA:E8:B6:0A:24:AF:E2:08:7F:38:F3
X509v3 Authority Key Identifier:
keyid:BB:9F:42:CF:CE:38:8E:DC:4B:29:EA:65:DE:B6:16:2B:25:6D:21:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u59Cz844jtxLKepl3rYWKyVtIQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DAF1/0B2B90A42D7511EB936E3458C4F9AE02/u59Cz844jtxLKepl3rYWKyVtIQI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:db:4e:86:70:26:3d:ba:ce:c4:98:5d:b2:69:16:ed:bf:09:
4b:c2:47:71:ec:60:23:9d:09:5d:64:9e:c9:a8:48:19:15:cf:
08:3c:47:53:93:c0:02:58:12:64:20:c2:b4:f7:b1:03:13:e0:
d0:35:47:da:b8:05:4f:f3:1e:be:1d:1a:05:c8:87:d3:82:19:
01:20:9e:bc:35:36:36:fc:43:fb:7b:e1:27:f6:a9:3e:96:9d:
a2:5b:ca:31:c8:96:3f:be:08:b2:9a:5e:c9:92:79:fa:7f:2b:
ac:0d:87:fc:85:60:e9:56:e2:8a:8f:eb:69:8c:ca:01:0a:57:
67:96:9e:da:e3:a9:78:b5:ac:fa:35:14:1e:2f:52:29:ab:02:
1f:ff:8f:f0:90:ed:cc:d4:30:64:be:6c:97:16:a6:28:44:b1:
23:ab:d8:d9:dc:0b:aa:7f:91:2b:7c:76:d4:ab:46:ba:a1:e8:
46:9c:ab:da:71:e9:e8:48:d2:e5:53:38:61:68:22:f8:f0:a4:
f5:84:d0:c4:69:c0:d8:2b:a8:b7:12:a1:b4:ab:4b:b2:84:48:
9c:9c:24:2c:fa:7a:40:a0:6f:02:fa:f7:61:e3:94:4d:1f:da:
70:73:2e:f4:6a:bc:14:d4:8e:00:3c:da:0d:ad:b1:54:d3:c6:
17:ec:3c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:15 2025 by rpki-client