Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
File: Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json)
Hash identifier: MKZ5bNVtaszaQS0UL4sTEWrMA0I09BUT0EVrxoYnc2c=
Subject key identifier: 88:C2:71:4F:36:36:06:59:32:E6:74:02:D6:21:5F:78:11:4B:FB:AA
Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47
Certificate issuer: /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
Certificate serial: 0C42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
Manifest number: 0C3D
Signing time: Fri 31 Jan 2025 18:14:58 +0000
Manifest this update: Fri 31 Jan 2025 18:14:57 +0000
Manifest next update: Fri 07 Feb 2025 18:14:57 +0000
Files and hashes: 1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: IXtOUAIXvD6Imh1bamDzBAH9qJVAYiRBthM0/4ep03M=)
2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: /karXHORf2+bzNF7YGlxUcjlijjurkc//gM0e/4KtEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3138 (0xc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
Validity
Not Before: Jan 31 18:14:57 2025 GMT
Not After : Feb 7 18:14:57 2025 GMT
Subject: CN=679d1322-5752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:ae:57:24:03:f0:6a:f7:5a:b8:8d:cd:ae:
0f:fb:2c:3f:22:ed:e1:07:6e:c7:c2:f0:18:e8:5b:
7f:8f:82:79:59:97:30:1e:fe:79:80:02:8a:74:9f:
16:63:b7:28:05:98:11:aa:f4:61:9c:c1:2e:0b:2b:
b1:04:89:05:c6:14:56:30:96:76:ee:88:02:aa:f0:
ce:3f:be:8c:8d:44:3a:9f:f7:10:1b:bc:79:06:14:
03:6a:e2:6d:ce:6d:89:b2:7c:84:e4:be:92:c7:7a:
bc:e4:2b:f2:61:d4:c9:23:b2:89:8e:f8:d2:a9:86:
3d:6e:33:e2:07:3e:46:26:76:f0:d0:f7:db:f8:0f:
36:fe:31:87:e2:a8:52:b9:80:61:f0:ad:1d:67:07:
78:0c:51:ea:a6:c1:71:7b:6b:c4:42:45:a5:9b:c1:
e8:e9:9b:34:70:4f:ca:c1:d8:24:6f:f2:23:e1:62:
45:33:29:81:9a:8d:46:ce:99:09:ae:eb:e8:ab:84:
a8:07:10:65:a6:03:7c:94:a6:47:ea:d2:8a:86:d1:
dc:3c:71:0b:0a:40:f7:31:74:4e:ac:c0:6b:00:4c:
04:33:c9:29:36:72:90:26:9a:79:cd:25:4d:83:0f:
55:87:29:0c:bb:40:20:75:5b:5d:43:1e:e7:eb:ce:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C2:71:4F:36:36:06:59:32:E6:74:02:D6:21:5F:78:11:4B:FB:AA
X509v3 Authority Key Identifier:
keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:51:6c:d8:3f:d6:8d:fb:5b:eb:53:ab:79:55:43:69:c9:e2:
4d:36:7a:78:8c:d6:89:d7:22:3a:a3:4b:dc:02:3d:1d:43:50:
0f:ba:b9:be:9c:ac:ed:b6:6b:e7:28:30:9f:fb:bc:51:b8:fb:
79:8f:83:57:e8:f7:f6:1f:10:73:e3:fd:a4:a4:1d:4a:6e:cb:
71:70:a9:7b:d5:e8:83:e1:de:9d:bb:48:05:b5:45:f2:df:6e:
75:43:d2:b1:1e:30:fb:07:16:6d:d5:d9:ad:64:9b:0c:88:12:
50:bf:b0:54:d5:58:32:6f:5e:91:fa:d9:09:db:8f:d3:d2:7a:
43:ac:1b:4f:dc:a6:33:0d:39:8f:03:5c:70:45:6b:e9:8c:a2:
0c:98:78:d6:8d:e9:9b:29:bf:e1:63:5d:4b:10:3b:c1:f0:dd:
36:69:88:60:45:31:9a:0e:72:62:0e:4b:f7:72:53:27:b1:f3:
9b:d6:56:45:73:3c:bf:94:bb:7c:6e:87:ae:a7:bf:43:50:0b:
0e:07:ad:23:08:80:1a:fc:69:5d:ef:a1:e3:81:01:25:45:bf:
b2:a9:30:66:69:1a:ff:48:84:3c:f6:b9:51:91:bf:78:13:3c:
49:4b:5f:74:9a:39:58:6d:e4:ca:5b:7a:69:e4:67:3a:eb:5f:
db:fc:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:25 2025 by rpki-client