Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json)
Hash identifier: iqdN1lowhf8FSI4cRY1QFh/SvuegHmgPSmIF/7FOpak=
Subject key identifier: E4:7C:E8:42:C0:31:8C:D8:8E:A5:8A:17:AD:52:A3:BF:80:FE:5F:89
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
Manifest number: 014D
Signing time: Fri 31 Jan 2025 03:28:23 +0000
Manifest this update: Fri 31 Jan 2025 03:28:22 +0000
Manifest next update: Fri 07 Feb 2025 03:28:22 +0000
Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: jLYK9+47o1AT09o4tdjKnxZufpPOtxnaRx4MLtojbRc=)
2: 305A9890EAEF11EDBBFC2B0BC4F9AE02.roa (hash: ePVRm39tIyAswyhwrdMeKFH+yRFfrkV0msYN8ZorCeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Validity
Not Before: Jan 31 03:28:22 2025 GMT
Not After : Feb 7 03:28:22 2025 GMT
Subject: CN=679c4356-5072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:88:dd:f2:be:91:ba:35:64:c3:3f:dd:9e:
06:9c:4a:98:c3:48:fe:4f:70:c4:df:be:ee:2c:7c:
4f:c6:af:7e:4b:b4:83:b4:37:7c:f0:cf:47:ee:28:
b0:11:65:78:24:d8:10:52:cb:a4:95:d2:ad:77:d8:
0a:8b:bc:65:f3:ee:67:b5:8b:1e:94:f1:21:72:40:
5b:e1:b7:33:4b:02:a4:9e:42:53:a1:78:9e:63:8e:
ce:be:50:e0:3c:5f:a1:3f:f0:bc:07:af:dd:9f:3a:
fe:9c:e2:f2:71:ae:82:ff:6c:ba:ba:fa:4f:94:02:
2d:3b:1a:a7:79:ba:08:e4:24:b1:76:b2:f4:df:c1:
37:55:bc:ae:e0:84:06:c6:83:56:38:3c:73:6b:92:
0b:ac:36:63:aa:46:0f:30:e6:f7:a7:9d:b2:9a:13:
6e:a5:b2:7d:cf:1f:9a:a9:d1:94:9b:61:2f:15:07:
5a:14:23:32:95:ac:e6:88:9d:b0:c8:03:36:53:55:
9e:ed:62:9e:ad:ea:6c:23:9a:00:43:db:c9:83:26:
47:9b:70:51:fb:c5:5d:38:f2:6e:6f:fd:83:1b:4b:
5f:6f:b4:c1:d4:95:09:e0:62:af:f3:62:55:e0:72:
cd:61:25:47:4a:df:f8:d3:fe:cf:68:da:12:c0:77:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7C:E8:42:C0:31:8C:D8:8E:A5:8A:17:AD:52:A3:BF:80:FE:5F:89
X509v3 Authority Key Identifier:
keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d0:7e:4e:13:88:c8:b5:2c:4b:f2:e8:7b:06:cc:5c:a7:02:
2b:7d:b0:64:06:f8:52:cd:db:ca:72:36:c3:0d:61:83:98:d3:
da:31:d5:82:d1:33:ca:65:2f:4b:bd:76:af:a4:9e:7e:74:69:
77:de:bc:04:a2:ea:ed:5b:11:a9:19:20:0a:02:df:50:8c:c2:
82:ed:ff:83:15:a5:e9:64:78:2b:8b:06:7d:6a:cf:c9:7c:b8:
66:c5:7a:ab:9a:46:51:0c:d1:13:28:28:0e:4f:80:ee:c8:18:
6e:d3:71:9f:fc:0a:9c:e1:10:53:96:b5:f4:1f:d2:d6:e0:2f:
f0:2c:f7:02:e6:b4:98:82:80:90:9b:b8:d4:8a:6a:c4:7e:3d:
b4:52:38:eb:84:45:ec:c1:53:f5:74:87:15:4e:8f:da:07:18:
51:21:e9:a4:94:f9:6a:ba:9c:8d:ca:dd:3f:db:fb:29:ae:2a:
c6:9b:89:84:3a:a7:29:0a:1f:98:78:32:e3:a0:fe:57:4f:ea:
f4:ab:62:2d:11:93:b0:21:be:25:4d:bd:aa:93:63:db:3c:76:
6e:9b:e4:ce:be:2d:32:cc:eb:51:99:66:2b:12:a5:e5:a2:eb:
c9:ff:d2:29:47:b8:24:29:61:4c:66:50:05:f5:1f:33:35:9f:
7e:a0:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:12 2025 by rpki-client