Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json)
Hash identifier: eIArwR+zegjNmy5fZ0/GFRw3puVIj0+8825axEF4xGc=
Subject key identifier: FE:50:DC:25:EA:E3:16:10:8A:AF:D0:A1:B5:9B:44:18:4C:97:00:0B
Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Certificate serial: 088B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
Manifest number: 087F
Signing time: Thu 30 Jan 2025 20:40:21 +0000
Manifest this update: Thu 30 Jan 2025 20:40:21 +0000
Manifest next update: Thu 06 Feb 2025 20:40:21 +0000
Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: p3D/fpdqR6h/E2Yz1zNmFKgoX/FW9ewTeyCPYPR4NW8=)
2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=)
3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187 (0x88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Validity
Not Before: Jan 30 20:40:21 2025 GMT
Not After : Feb 6 20:40:21 2025 GMT
Subject: CN=679be3b5-6e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:3d:da:4f:0e:25:98:a4:25:b3:9f:ab:56:
ce:0b:62:33:ff:d8:d6:66:a1:81:7f:49:26:f0:ee:
63:5c:04:db:ac:f7:00:6b:03:cf:34:3a:56:2b:60:
6f:b3:b3:78:f1:ed:bb:25:33:a5:70:48:cd:0f:cc:
23:e3:07:fe:64:94:ba:90:19:4d:74:e6:3c:0e:dd:
5a:85:df:47:82:0d:c9:76:d2:74:ca:a2:ce:02:06:
a0:b9:97:46:89:f5:33:7b:70:b5:e5:6e:74:e5:05:
d3:61:f4:b7:c0:a9:8e:cf:df:88:72:2f:79:c9:db:
61:e1:ef:f2:f6:ab:c0:d8:06:6b:3d:03:2d:f6:dc:
1b:0e:f2:1b:d5:12:b2:f8:d6:de:de:7a:82:50:61:
cd:24:3c:f4:fe:2c:c3:c7:f1:0e:32:0b:68:93:00:
45:52:55:56:5b:d8:0f:97:3b:53:b8:84:ec:96:98:
72:68:e2:ee:d6:c1:ef:75:05:d3:5a:91:71:e6:8a:
ae:61:1f:a4:55:89:2a:78:e1:11:58:d1:cc:e6:5e:
f5:ed:23:49:38:a1:75:d7:53:84:77:08:31:75:7e:
9e:42:09:b8:ab:69:dc:35:a3:80:1c:a7:43:64:d3:
4a:72:33:54:eb:55:62:f9:1a:e8:25:d6:e1:d5:60:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:50:DC:25:EA:E3:16:10:8A:AF:D0:A1:B5:9B:44:18:4C:97:00:0B
X509v3 Authority Key Identifier:
keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d8:af:dc:aa:c3:eb:87:72:99:c1:ca:bc:33:c1:1a:c1:bc:
a2:f7:02:ed:7b:37:69:ea:6e:44:8b:41:51:3d:d7:ea:8d:34:
06:e8:68:0f:a8:aa:eb:d0:33:9c:ea:e6:06:3c:4e:5c:1f:98:
c0:4b:11:d9:43:8e:08:fa:c5:7f:bf:a6:50:09:ef:ed:6a:a1:
39:02:a2:f7:05:e3:9e:10:20:f7:34:28:b9:5b:04:6c:1b:b9:
fd:4d:de:c1:de:5e:32:dd:52:e8:76:c9:d2:e6:1d:b1:ac:11:
e8:47:b2:ec:22:f8:2c:42:bc:2f:53:91:2b:3c:58:38:27:f3:
61:04:4c:d9:d2:13:da:67:21:fe:8a:64:f0:fa:94:e0:24:b7:
65:2a:50:3d:3a:7c:6a:96:cb:9b:7b:da:ca:42:92:72:36:70:
0c:b5:0d:50:ab:b2:79:db:ea:65:4c:e0:f6:1f:bf:7c:5c:cf:
f2:a5:c0:78:83:6d:5c:15:33:36:5e:6b:c5:4b:2a:41:dd:82:
ea:f0:7a:6b:2b:a1:e7:a4:57:8d:71:01:4a:48:e9:27:11:89:
08:82:ca:eb:50:ef:77:7a:66:0d:35:fa:fb:36:c7:cd:70:f7:
ce:c3:69:e9:8d:24:be:96:db:6c:37:82:c5:ed:64:6a:0a:3b:
55:fe:20:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:05 2025 by rpki-client