Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
File: tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json)
Hash identifier: uYD0spdFWv8rljk1ggZBfPjz80O66Qnhc0pO+bohUDk=
Subject key identifier: 42:B1:20:03:2C:AB:BC:EF:05:E8:8A:C5:AA:7D:E1:9C:E0:36:4D:8A
Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
Manifest number: DF
Signing time: Fri 31 Jan 2025 04:44:06 +0000
Manifest this update: Fri 31 Jan 2025 04:44:06 +0000
Manifest next update: Fri 07 Feb 2025 04:44:06 +0000
Files and hashes: 1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: j/V/r93Lv5jxyb+puzHhRpbWBPW5btiEdjzdQLDZPmg=)
2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: IhTgV+RyZEfr55JDHl3kb818//lQV+b8yRU6eN6/7eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Validity
Not Before: Jan 31 04:44:06 2025 GMT
Not After : Feb 7 04:44:06 2025 GMT
Subject: CN=679c5516-1b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:70:7d:7b:e4:01:eb:09:06:99:00:27:1f:
b3:c0:be:02:4a:64:39:4b:6b:49:d2:5a:55:9a:46:
a6:d2:2b:da:af:0d:48:2d:7a:c4:15:c4:76:8a:d8:
29:79:05:ca:45:39:8e:27:d1:1c:c7:84:4b:c5:1a:
d4:34:54:c6:7d:ce:a8:65:04:3e:db:6d:c8:1c:48:
f5:b6:47:33:22:db:b4:55:a1:f4:ab:d2:57:e5:77:
88:85:06:6e:b7:e1:37:18:8b:b2:4a:0a:1b:e4:a7:
22:f8:00:a2:9d:b3:45:80:d8:4c:c6:9e:60:29:dc:
5f:7b:ed:8e:90:26:e9:1c:3c:80:0d:e8:03:99:09:
ac:ad:bf:41:88:a2:a3:ec:3e:d0:72:60:5f:63:7e:
7b:03:2c:dc:41:6e:bf:ed:1a:48:5f:57:65:8d:58:
db:c8:56:f0:7b:94:72:1e:4b:22:b9:fc:59:5a:e5:
18:e9:c0:55:62:f6:5c:f5:b2:59:24:58:c9:2f:5d:
75:87:ac:57:38:17:ba:d0:66:95:03:98:36:64:3b:
c7:ce:78:2f:e4:74:27:eb:40:9d:6b:fd:da:da:72:
97:16:c9:d7:e3:fa:ad:a3:1d:41:97:d7:c4:f8:e9:
94:b0:7a:52:6a:4a:af:24:c9:fb:bc:fc:54:ff:d6:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:20:03:2C:AB:BC:EF:05:E8:8A:C5:AA:7D:E1:9C:E0:36:4D:8A
X509v3 Authority Key Identifier:
keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:e2:5b:70:2c:fd:7d:a1:c1:b9:e9:30:1f:6a:68:1a:d3:35:
07:fa:10:88:94:7d:6a:6b:d6:e7:4e:5c:f9:f0:08:a1:8f:60:
98:9d:3a:d8:78:b7:c5:46:b7:22:00:58:e6:b4:5c:87:14:75:
78:9f:f7:01:5f:b5:35:21:2d:3d:42:93:c8:cd:94:3e:b7:dd:
6b:e0:26:e9:31:d0:4d:98:1b:8b:b3:95:d6:73:dd:96:04:de:
41:9a:e7:77:6a:6a:d9:d1:1a:ba:24:c2:2c:97:cb:9a:aa:46:
1e:08:b8:e1:5c:4c:44:03:40:58:cc:1f:19:04:c8:51:52:ef:
be:8c:d2:3c:2d:6f:73:db:b0:9c:6f:e3:f2:65:3a:35:f1:96:
9c:8c:82:74:27:d2:54:30:1f:65:ec:53:02:df:f7:e0:d2:73:
3d:0f:36:aa:1b:13:db:c2:07:9b:27:e8:d3:5c:49:c0:1b:ba:
bb:d8:50:4a:0b:e7:a7:db:cd:75:5f:2e:ea:81:d3:4c:cf:6c:
37:82:e9:38:cf:7e:09:e5:2f:ef:b2:18:32:5c:db:5c:fe:04:
45:cc:0e:0e:0a:18:99:1d:76:b9:97:ee:a6:ca:8e:7e:73:70:
b5:d4:33:b8:56:de:e1:7d:32:20:cf:98:4b:b5:5b:33:1d:4a:
e3:ef:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:58 2025 by rpki-client