Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json)
Hash identifier: PjGXDVowS8JAVTKRY3/T09ZM6K0QhhaNzJakMLrUXnI=
Subject key identifier: BE:55:7F:4F:A4:57:08:92:FB:94:FF:1F:F0:99:DC:34:47:13:16:12
Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Certificate serial: 05FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
Manifest number: 05FA
Signing time: Thu 30 Jan 2025 22:52:25 +0000
Manifest this update: Thu 30 Jan 2025 22:52:24 +0000
Manifest next update: Thu 06 Feb 2025 22:52:24 +0000
Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: IXwoOznRkbTvgtHeVVTs+xmy8Cic0u3o224Mrvb6l2A=)
2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: JGxMB26ttBekYTYeINbF/ZGgUOz7c1MGNzdVG0LlGY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1532 (0x5fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Validity
Not Before: Jan 30 22:52:24 2025 GMT
Not After : Feb 6 22:52:24 2025 GMT
Subject: CN=679c02a9-4396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:0e:94:9c:24:a5:50:ea:5e:07:a3:08:50:
07:2a:85:c3:45:1c:36:0e:d5:ff:c6:87:e4:5c:05:
4c:dc:3a:68:1d:8c:23:a8:4f:0a:96:5f:6d:84:6c:
70:0e:35:6e:98:f6:3d:75:5d:4c:cd:e1:7b:38:71:
81:2d:df:71:85:12:96:52:a6:52:f9:a9:62:95:e3:
e4:a5:6a:71:bf:31:88:94:90:05:80:ff:70:4c:6f:
6a:7b:52:94:6a:71:4c:1d:b3:6f:1e:b6:29:52:dd:
d6:da:96:47:84:59:6a:a7:8c:fb:22:84:bd:56:1f:
23:c1:a7:03:b3:76:e5:9a:97:d4:64:fb:a2:11:a2:
ea:be:e4:4b:61:89:1e:ac:8d:d7:6e:53:be:1e:3f:
3d:54:ce:9a:03:87:72:e2:0e:98:37:be:d4:88:45:
06:f1:dc:78:f7:2a:27:99:54:de:d0:7b:2a:08:2c:
b2:40:3b:80:16:df:8e:a2:e1:ee:14:05:cb:d6:e4:
79:58:b0:a8:0f:5c:33:44:73:f6:21:17:c9:f8:91:
b4:0d:0b:dd:fa:ec:34:60:93:88:69:1a:94:35:0b:
a8:ac:cd:ff:cc:a5:a5:50:11:50:f3:bb:fa:b2:86:
37:1b:48:35:b8:37:5b:21:3e:3a:61:93:12:8c:01:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:55:7F:4F:A4:57:08:92:FB:94:FF:1F:F0:99:DC:34:47:13:16:12
X509v3 Authority Key Identifier:
keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ab:3e:5c:d0:fa:66:a5:11:19:44:60:a0:74:e4:28:6c:3d:
c4:8f:7d:fa:0f:be:b8:10:e0:ab:44:6b:80:34:9b:76:7a:ae:
00:6d:bd:e8:18:9d:d5:65:2c:7d:ab:a4:9d:cf:ed:8d:6b:f2:
55:59:9f:ac:c1:79:26:72:ee:93:9d:46:d3:08:02:40:29:57:
93:ce:f6:58:51:f5:1b:c3:34:99:e1:c9:a6:be:1c:71:b3:4a:
35:37:bc:3e:77:46:a5:36:7f:c3:d9:4b:fd:97:4f:1e:33:ae:
4a:4f:11:f0:05:36:a4:9f:c1:94:c8:2f:76:ca:11:63:67:5a:
a9:d1:68:7d:f0:c9:71:3d:54:3d:6c:6c:40:52:c5:a1:3d:f4:
73:06:be:72:53:5b:18:95:63:66:3f:93:d7:0e:7b:25:a7:fb:
f5:15:b1:ed:8b:99:73:ef:75:7d:cd:7b:21:73:a6:f8:78:2e:
aa:90:f4:d8:3d:7d:b9:1c:9d:01:19:41:c5:92:b5:b9:c3:b4:
33:ce:5a:b0:f7:b9:5d:e7:33:d2:89:c0:bf:93:ec:92:75:94:
33:70:36:f4:be:f2:95:88:4f:52:51:47:31:b9:9e:2f:f0:a1:
75:4f:18:04:d1:62:78:ad:8d:6a:27:1b:7a:57:8e:fb:8f:b1:
fe:22:0c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:21 2025 by rpki-client