Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json)
Hash identifier: 00mBqPV72LaAvQS4HrQV54e6EdE6aeWgMsvTrVSqh3E=
Subject key identifier: CD:C5:CB:38:E9:D3:4B:EA:98:2D:D4:21:10:6F:CF:59:43:F8:EF:36
Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91
Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91
Certificate serial: 2B32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
Manifest number: 2B1E
Signing time: Fri 31 Jan 2025 14:26:29 +0000
Manifest this update: Fri 31 Jan 2025 14:26:28 +0000
Manifest next update: Fri 07 Feb 2025 14:26:28 +0000
Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: zhfOgjb6QmXME1ITUFOqKMgwYxYFqGToYpjsEkOuQek=)
2: F645F318500C11EBA2295426C4F9AE02.roa (hash: cs/JN2roMF9559frpHSU57kLMdZZdt/kq/+fgPXNaTg=)
3: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: kOKMH7bC+n+8o1xcllbA3RXGetoc8aW0IIWJBu8P/uI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11058 (0x2b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91
Validity
Not Before: Jan 31 14:26:28 2025 GMT
Not After : Feb 7 14:26:28 2025 GMT
Subject: CN=679cdd94-d3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:5d:d2:7b:32:e2:b5:fe:a2:39:3f:2d:a8:
45:26:1d:64:f5:9b:f3:c4:66:4a:d9:c5:7d:d6:4a:
bc:71:b4:47:b6:e7:f3:68:fb:01:52:25:fd:33:79:
cd:53:ca:a4:50:be:08:da:65:be:19:3e:9a:cb:1f:
ae:4d:07:84:b9:d4:94:7e:fe:73:a6:f6:58:76:fc:
8a:2c:2f:4d:aa:d1:e7:d4:d3:c1:dd:3f:e5:f1:75:
5e:f3:8e:6f:89:d7:49:f7:59:3a:8e:4a:e4:c6:07:
ee:c8:85:bc:76:56:e7:1e:ba:aa:3f:17:b6:5e:2c:
05:85:95:a4:26:7d:cc:98:23:b2:8a:0b:77:7a:60:
01:1c:e8:de:4e:c0:89:f7:ca:75:84:58:27:74:f9:
ab:77:4b:21:6e:05:ad:ea:9d:b7:56:da:91:a4:9a:
c4:ee:1a:4b:65:22:87:57:20:51:a2:be:23:71:98:
1a:c4:32:11:bc:2c:96:64:08:69:40:42:e2:f6:18:
62:79:f7:be:39:21:56:31:c6:05:7c:12:78:00:5e:
3a:ab:37:4c:34:ee:f8:3d:9b:8f:4d:b3:c3:6a:1c:
a5:87:23:f3:f8:03:2a:9a:19:ca:cd:dc:d4:d6:0d:
a3:fd:bc:9b:89:a5:6d:ef:2d:e7:a7:6a:11:6f:7e:
0b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C5:CB:38:E9:D3:4B:EA:98:2D:D4:21:10:6F:CF:59:43:F8:EF:36
X509v3 Authority Key Identifier:
keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0a:e9:2f:e0:0a:90:e9:95:08:d3:d5:dd:32:9f:a3:36:41:
fe:b8:5e:66:57:c5:00:6f:7e:c5:da:3f:b4:9e:89:78:99:35:
3e:59:94:75:f4:14:5d:30:7b:ce:b2:57:91:70:c9:72:ec:b1:
04:bd:56:38:d5:51:c1:e5:e0:ba:f1:fd:76:80:77:17:4a:ae:
ac:af:2b:b3:95:8e:38:58:0b:86:89:88:ab:58:df:24:fb:f5:
86:e5:ec:cb:46:92:02:25:c8:bf:b9:82:22:60:84:b0:eb:2d:
c7:4e:0a:30:ba:a1:4f:f7:c9:73:9e:0d:65:6f:d7:47:ce:f1:
21:c2:4b:5c:15:c8:f6:c9:32:95:dc:d4:b1:a2:a6:d1:59:0d:
78:93:2f:83:28:bb:05:40:bb:22:53:1e:d5:c2:e0:2c:3a:c0:
d9:2e:af:5b:a0:51:9c:9e:e4:be:3a:85:ad:48:3d:b6:66:65:
f9:fd:ac:d5:79:0b:a8:cd:e2:32:6f:b5:a6:0f:be:af:de:66:
d8:0f:b2:80:e7:73:fd:9c:ee:3c:69:27:35:d9:a1:ed:34:80:
63:dd:9b:d0:17:26:27:a7:ce:9e:6d:5b:26:ae:03:40:5d:11:
c0:00:af:0f:9b:e3:09:9f:00:07:b5:54:68:34:0e:69:c2:dc:
60:02:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:00:13 2025 by rpki-client