Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json)
Hash identifier: unoqS3vMMVfSH6GgN/yYXAUO/NEvfT6JHdYxPmn5W+w=
Subject key identifier: 71:F7:4C:4B:79:A4:C5:77:89:A0:4A:1D:2F:56:76:F3:BE:1E:69:F4
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial: 0BA8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
Manifest number: 0B8B
Signing time: Thu 30 Jan 2025 19:07:08 +0000
Manifest this update: Thu 30 Jan 2025 19:07:07 +0000
Manifest next update: Thu 06 Feb 2025 19:07:07 +0000
Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: HqC9AqGEmXWQQ9e9Bz+BaQiGpgUIioLANrggEhe/Z/I=)
2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: TQmQSnccYn9RdDaPIWHz3I+xXgULEgcde15Yil802tY=)
3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: cAygPF0dsBX1wYUCyZIW25KS6kuT3P0mPGPIqFTVNDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2984 (0xba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Validity
Not Before: Jan 30 19:07:07 2025 GMT
Not After : Feb 6 19:07:07 2025 GMT
Subject: CN=679bcddc-eb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:c2:68:87:81:a0:f2:4a:81:26:f1:35:4f:
cc:be:a0:f4:a4:ca:50:93:66:68:d4:63:a2:8d:61:
a2:e0:d2:aa:48:c8:32:f4:6c:a4:d1:ee:f0:11:5b:
f5:c3:fc:79:fe:db:33:2d:5a:eb:dd:8f:7b:3a:96:
3b:9e:61:72:11:9b:3a:81:32:0b:89:34:97:0a:31:
53:ce:42:5f:4c:a1:53:6e:fb:94:28:11:2f:fe:57:
87:75:4e:93:ec:60:2e:c8:c9:44:3c:a5:1c:66:ed:
31:98:5f:0a:25:52:65:91:46:69:16:29:86:f8:f7:
8d:40:09:48:a3:8e:0b:a9:5c:cd:6b:09:00:39:8f:
46:ca:ab:8c:ad:15:d0:99:58:09:ea:65:b4:98:4b:
94:97:63:71:47:d9:06:f2:28:bd:e2:a0:05:57:ca:
5a:02:b7:c4:ab:6e:54:96:cd:48:e7:07:ae:e9:97:
97:f1:50:b0:1b:79:0b:99:d5:2f:95:f2:de:68:fb:
42:4b:ad:8d:4f:c5:8a:33:e3:78:24:be:e7:7f:bf:
9c:07:0e:51:e4:59:a1:d9:93:97:3c:1e:71:28:92:
ed:60:15:ae:7d:b9:2f:cd:3b:1e:b1:c0:ff:7c:4c:
e7:b8:1c:de:17:d5:5a:28:f2:20:52:d1:5d:3f:bf:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:4C:4B:79:A4:C5:77:89:A0:4A:1D:2F:56:76:F3:BE:1E:69:F4
X509v3 Authority Key Identifier:
keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:86:65:8f:7d:e0:95:96:1b:5f:0b:67:16:db:36:39:f5:59:
85:3d:76:3d:4a:2d:38:e8:7b:47:d2:8b:a6:cc:91:d2:7a:ab:
ff:01:f2:d6:0c:fb:ad:d5:e6:ee:7f:98:c5:63:29:5a:f2:3f:
68:5b:d9:ba:ff:a1:74:5d:15:7e:3b:46:f7:9f:da:e2:77:ec:
6c:9d:fa:e0:02:43:2b:e5:9b:bb:38:6b:dd:99:42:eb:1e:c0:
95:3f:6e:ce:cc:4f:fc:09:bb:c4:41:8c:74:d8:53:e9:de:b4:
08:ad:4c:ec:d8:5c:d3:86:5e:1d:d7:c4:90:04:2d:f1:45:11:
d6:cc:d5:2e:1b:4d:92:dd:f2:03:97:f5:18:cc:f7:1f:52:e7:
ba:22:f7:38:80:eb:77:2b:fa:4f:24:53:bc:cf:57:27:57:a0:
93:65:91:47:c4:33:5e:a0:0d:6c:05:2b:d1:95:e8:30:72:e8:
40:bb:47:08:83:95:d7:8a:69:a8:db:d9:5d:08:e8:ed:38:c2:
c8:77:2e:a2:9c:fe:2a:9e:9e:42:58:9b:88:5d:78:31:c7:25:
52:d5:a1:b8:b1:5b:fa:cd:70:bb:89:d7:58:b2:e8:c9:fe:99:
c7:ba:06:ed:f9:1d:26:7c:eb:a2:3f:6b:e5:7d:0e:33:56:07:
11:5a:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:15:47 2025 by rpki-client