Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7BB/8CE59DA4645F11EABC69297AC4F9AE02/u3h15MblRLV0ehFf6M32iYyN5zM.mft
File: u3h15MblRLV0ehFf6M32iYyN5zM.mft (raw, json)
Hash identifier: KxQKrhffzUs3BsT/z0iu4SE4nYz35Z7uCBYNtHTfrYk=
Subject key identifier: 28:96:37:9B:1A:FB:A1:81:8E:78:0F:98:00:27:9E:E8:5E:05:1D:79
Authority key identifier: BB:78:75:E4:C6:E5:44:B5:74:7A:11:5F:E8:CD:F6:89:8C:8D:E7:33
Certificate issuer: /CN=A919C7BB/serialNumber=BB7875E4C6E544B5747A115FE8CDF6898C8DE733
Certificate serial: 0A38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3h15MblRLV0ehFf6M32iYyN5zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C7BB/8CE59DA4645F11EABC69297AC4F9AE02/u3h15MblRLV0ehFf6M32iYyN5zM.mft
Manifest number: 0A29
Signing time: Thu 30 Jan 2025 19:53:39 +0000
Manifest this update: Thu 30 Jan 2025 19:53:38 +0000
Manifest next update: Thu 06 Feb 2025 19:53:38 +0000
Files and hashes: 1: u3h15MblRLV0ehFf6M32iYyN5zM.crl (hash: VrhvGpLdNeTdBgJS7l1l5FYFKKeeU8u//PYxAYaQSjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2616 (0xa38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C7BB/serialNumber=BB7875E4C6E544B5747A115FE8CDF6898C8DE733
Validity
Not Before: Jan 30 19:53:38 2025 GMT
Not After : Feb 6 19:53:38 2025 GMT
Subject: CN=679bd8c2-bc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:93:c0:e7:de:a5:50:c2:93:06:00:8a:e5:
02:be:6f:cb:7c:6f:94:fd:50:e8:e8:61:7b:25:58:
6f:c9:31:5a:d3:a1:76:e9:df:5b:3a:d6:ce:a6:16:
98:3b:a9:b0:57:28:ef:b4:74:d9:5d:f2:1f:72:64:
50:f1:db:e1:ac:ce:15:73:55:94:21:9c:73:d1:a9:
62:ec:6f:35:39:9e:5b:a9:c0:d5:9a:51:9b:6a:d4:
3f:18:02:73:a4:32:2b:fc:fa:46:a1:8c:84:a7:97:
ff:f2:fc:63:c9:0d:06:51:bc:41:67:05:a4:8b:db:
cc:39:8b:a8:d9:28:98:79:5a:d7:f7:71:ad:1b:73:
84:36:6d:96:4d:b4:a8:75:24:28:ef:e5:86:e9:f3:
2c:ba:a9:21:9d:e4:c5:50:25:72:c9:4b:45:ce:3f:
63:aa:73:6b:8e:a6:a6:36:51:95:5c:69:27:86:e8:
f5:1f:5b:f5:bf:35:81:cf:df:2e:a5:f9:7b:13:12:
89:26:f4:26:30:3d:01:6a:3f:27:3d:c8:32:13:31:
99:fc:2d:66:91:5c:8a:1c:5f:c1:b0:87:6e:9f:1a:
0b:41:53:fc:88:30:fe:31:e4:59:32:23:e0:0c:f9:
12:12:bb:96:f0:55:0b:2f:fd:0c:28:39:2a:37:28:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:37:9B:1A:FB:A1:81:8E:78:0F:98:00:27:9E:E8:5E:05:1D:79
X509v3 Authority Key Identifier:
keyid:BB:78:75:E4:C6:E5:44:B5:74:7A:11:5F:E8:CD:F6:89:8C:8D:E7:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C7BB/8CE59DA4645F11EABC69297AC4F9AE02/u3h15MblRLV0ehFf6M32iYyN5zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3h15MblRLV0ehFf6M32iYyN5zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7BB/8CE59DA4645F11EABC69297AC4F9AE02/u3h15MblRLV0ehFf6M32iYyN5zM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:4f:5f:04:ff:d5:fc:32:17:d7:fc:b8:ef:cc:a9:b2:29:ef:
30:55:9d:b0:79:a4:88:02:fc:78:3e:3f:15:36:4e:3c:dc:58:
64:b6:3a:a9:a1:d0:bd:6b:6e:e8:7c:3b:58:b6:d3:89:63:d3:
fe:35:4d:62:f8:43:99:e0:fc:8c:c9:39:a0:3f:17:28:2b:b1:
1f:53:63:a7:88:5b:19:58:c7:9f:4a:a7:a3:7a:7c:74:4a:96:
08:b0:d3:d7:5c:17:2f:29:8d:80:00:6e:2d:cf:b1:e7:3f:ea:
81:43:be:4c:92:c7:52:2f:bb:53:c2:80:53:a1:21:c4:a0:3e:
cb:78:5b:c1:a3:1f:e5:e3:91:f0:49:54:77:22:ea:cc:1b:07:
d2:84:6c:9d:48:71:4e:5d:ee:a9:d7:22:b0:21:8d:cf:68:b2:
a3:59:2e:3c:32:e4:a7:ed:57:d5:65:2d:40:69:4a:a8:e6:c6:
0d:f5:ce:7d:cf:36:0d:79:ed:0b:5d:be:fc:61:7a:26:ce:4a:
71:0d:c5:3e:48:81:ed:42:60:c8:64:1d:87:f3:a4:5d:0e:82:
9c:d5:63:51:c0:34:62:bd:95:82:c6:8e:f8:19:72:8d:97:10:
a0:d2:c9:a1:55:0f:45:7a:e8:14:eb:c4:8f:4b:fb:6c:74:78:
8e:e6:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:11 2025 by rpki-client