Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
File: uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft (raw, json)
Hash identifier: pBGBwoEqSW6KdBmt0RuaQPUg0T8/5Xu8InFZ8wQrJNY=
Subject key identifier: F1:4A:13:5C:A3:C1:07:0A:CB:5A:FF:D8:0D:B0:A3:47:D8:65:ED:45
Authority key identifier: B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8
Certificate issuer: /CN=A9195A3D/serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8
Certificate serial: 03D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
Manifest number: 03CE
Signing time: Fri 31 Jan 2025 00:40:33 +0000
Manifest this update: Fri 31 Jan 2025 00:40:33 +0000
Manifest next update: Fri 07 Feb 2025 00:40:33 +0000
Files and hashes: 1: uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl (hash: k4PXegurxHlEb+ZtXwaj0Z4pk+q4dWfo2Lbi/UHIqbw=)
2: 5AFB85086EC411ECB8E7492BC4F9AE02.roa (hash: oUra7O+qGlxXyvA9M/ITxDdx10bLDrqiVyv7cNbRzSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195A3D/serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8
Validity
Not Before: Jan 31 00:40:33 2025 GMT
Not After : Feb 7 00:40:33 2025 GMT
Subject: CN=679c1c01-d085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:8f:9e:53:b8:a0:bc:76:37:aa:1e:81:a8:
1f:8c:af:eb:d7:eb:d4:23:fa:1b:ea:8b:31:61:e4:
90:dd:ed:78:9c:b2:c8:7a:35:d4:6e:b1:f0:3e:61:
88:0a:ff:20:82:ce:9d:7d:d8:9b:52:ef:23:c4:da:
5a:78:0d:b7:f7:01:48:37:15:77:5d:92:83:cf:ec:
e8:9e:f1:20:6a:cf:c7:16:67:a6:7b:ee:72:6a:fe:
2d:c5:4c:fb:7f:eb:9f:0a:cb:55:21:7e:4f:b5:43:
9e:a5:e7:f9:4b:0f:b1:40:ea:f5:99:56:32:1c:f0:
47:49:0e:66:3f:d0:51:5f:84:42:db:62:36:05:04:
05:45:5b:da:81:65:77:82:83:e3:18:68:de:ef:3c:
b2:dd:80:19:ef:db:20:22:e9:0a:3b:f1:d4:63:c9:
37:f3:91:b9:b4:36:58:12:c4:b4:f8:0e:d6:ec:7d:
fa:90:c4:73:80:f6:ee:3e:c4:38:b0:26:00:e6:22:
b4:cd:f4:42:0d:68:10:0d:3e:85:23:4c:94:ff:11:
d3:c5:f1:85:12:a8:82:56:16:37:9b:95:15:1e:ce:
59:fb:b3:f9:8e:bf:7e:df:b2:ed:21:13:57:d6:53:
ec:2d:0c:07:54:a6:8d:ac:4f:34:5c:00:db:fd:03:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:13:5C:A3:C1:07:0A:CB:5A:FF:D8:0D:B0:A3:47:D8:65:ED:45
X509v3 Authority Key Identifier:
keyid:B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:89:d5:c4:a1:d9:0f:55:66:cd:16:44:3d:5d:e5:26:ee:1c:
ef:03:8e:ec:0e:7c:2e:a8:6c:22:34:18:7a:39:14:57:a8:d4:
5e:b0:bc:5f:36:0f:dd:ad:45:6d:43:b2:19:11:c3:61:19:dc:
88:f7:24:f7:9f:a8:a7:54:3e:bc:9b:20:17:0a:dc:b2:f0:83:
1f:6c:c3:cc:6f:05:a7:c6:29:cd:2f:77:2e:4a:85:ab:f5:7a:
54:95:30:ba:cc:64:2e:21:de:17:3f:0d:37:38:98:c8:4a:40:
ea:4f:b4:4c:be:4a:9f:9c:12:84:d8:3f:35:35:0a:c5:97:85:
f2:0c:92:db:ae:79:1f:ec:5f:76:77:73:b5:b7:13:9a:c8:88:
d7:77:a2:3d:77:d2:9c:93:23:7f:4a:dd:6d:5c:43:fc:65:96:
37:33:6e:8f:bc:c0:18:85:35:3f:e9:04:7f:16:2a:16:9d:23:
42:f0:55:3b:9e:19:2f:5e:59:a2:ec:db:79:65:ab:68:ce:15:
fd:97:7d:61:fe:87:36:9a:33:a7:d2:60:2b:fd:97:26:24:63:
d8:62:03:02:e2:d7:2d:b3:a6:6b:92:56:6b:48:0c:55:9b:89:
47:b0:41:2b:d8:ed:d2:2b:e1:c4:cd:8f:e2:55:15:02:c2:ea:
f1:e1:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:25 2025 by rpki-client