Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json)
Hash identifier: jOJ0AavRU77XASzXXnjXVynV0JDqGOvdhS14opEQpYs=
Subject key identifier: BA:EB:E6:9B:BE:35:61:EB:A9:3C:8C:A5:75:70:E3:5B:60:6C:04:8D
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
Manifest number: 018D
Signing time: Fri 31 Jan 2025 02:49:25 +0000
Manifest this update: Fri 31 Jan 2025 02:49:24 +0000
Manifest next update: Fri 07 Feb 2025 02:49:24 +0000
Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: zMouAfDhE51WtkXFh+mgO1E5SctpqtLKgkz/8+N3HEE=)
2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: O+0diP1NN2sNjxwB1I26KY0g98dCGDnYbn9P30v6lyY=)
3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: AmVibyk3kyTCjjmayzEhVr/vWHjKhAHUPjsO+1Nf/Sw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Validity
Not Before: Jan 31 02:49:24 2025 GMT
Not After : Feb 7 02:49:24 2025 GMT
Subject: CN=679c3a35-2255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:36:6c:91:c8:eb:0e:00:44:8f:c1:bb:e1:
09:59:0e:b1:59:c5:b1:77:1a:79:3f:a0:5e:f2:6b:
fc:e0:91:79:6e:86:28:55:76:73:2d:ce:ac:06:90:
05:2e:73:8d:8c:e5:15:73:b5:45:a4:17:34:13:15:
da:08:bb:ea:86:09:ee:28:ab:2b:db:1f:3c:46:bf:
e4:5b:2f:22:34:3d:4b:55:71:9d:50:2c:3b:06:96:
50:fd:33:c7:c4:01:b6:7d:60:db:0d:f0:a0:8e:e4:
df:51:64:10:f6:83:60:c4:63:a8:27:99:e2:93:21:
5b:50:5a:66:3b:bb:aa:2d:44:08:4b:d8:09:60:17:
85:f5:cb:13:72:e6:ee:f9:58:aa:ae:e7:44:11:4d:
b8:69:c8:1d:2b:0d:de:31:14:45:a1:4f:53:5a:aa:
f6:b6:55:50:6a:8d:22:4d:9b:db:63:26:02:d4:de:
1d:30:a4:a8:c5:2b:b6:4b:d1:7c:a0:4f:3d:f6:b9:
ea:0f:28:b1:1b:f1:b2:60:86:ff:03:4f:e5:10:6a:
a1:d3:df:13:2a:73:89:5f:ea:7d:e4:4c:a7:6a:4f:
65:e5:12:a0:61:15:80:fd:16:5c:8e:9c:32:37:cb:
35:a7:a4:03:4f:a5:3e:b0:e5:2b:83:f7:b3:bd:e5:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EB:E6:9B:BE:35:61:EB:A9:3C:8C:A5:75:70:E3:5B:60:6C:04:8D
X509v3 Authority Key Identifier:
keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:38:eb:fb:0c:76:e1:73:21:0a:d9:6e:2a:08:ca:dd:58:80:
16:a7:b9:15:b6:81:bf:f1:9a:33:33:fa:97:a7:62:1b:7f:86:
43:7f:73:ef:38:3f:fc:3b:e1:48:2c:0d:3e:21:45:01:85:fc:
48:ab:ba:48:26:f0:a5:9a:1f:c4:2f:64:b3:1f:32:b2:9c:2e:
ad:1c:a9:98:1d:50:2d:c3:53:d2:c3:67:5d:ba:2a:35:ab:ae:
19:ab:c1:58:16:36:e4:f1:65:6a:1e:6f:d8:0d:9c:d0:13:f9:
fb:72:bc:8b:9c:95:70:7a:d3:d3:93:02:70:3e:92:67:83:5e:
e6:3d:af:b4:8f:a5:07:d4:48:19:31:d8:10:d8:b7:c6:84:a5:
44:6b:4a:97:0c:b5:65:b7:52:66:56:a9:b6:94:b1:55:03:f4:
59:30:94:0a:6f:b8:e4:3f:51:49:b7:b7:1d:56:09:37:46:83:
ad:0b:b4:90:a8:13:86:6c:f8:66:6f:d9:75:fe:37:b9:29:0b:
4d:ea:55:09:05:b6:9a:56:9c:f2:d7:63:db:98:8f:68:30:f5:
d4:2a:df:6c:e3:75:1f:55:ae:fc:70:b7:5a:dd:6f:52:ca:7a:
a5:3d:28:92:b8:2e:ee:80:67:fa:13:2b:77:ad:88:34:b8:5f:
30:93:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:50 2025 by rpki-client