Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
File: uRm6CzrV4m_DHTlL4TK7yof8yFI.mft (raw, json)
Hash identifier: 7Ei1ooh/TDMj0QzOnpXHiZRFQeuBYFrC2aY20TTRDiI=
Subject key identifier: 89:9F:F0:C9:8E:12:A6:E2:C4:6D:E5:0F:69:57:AF:E2:03:12:3D:33
Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
Certificate issuer: /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
Manifest number: 0212
Signing time: Fri 31 Jan 2025 02:09:21 +0000
Manifest this update: Fri 31 Jan 2025 02:09:21 +0000
Manifest next update: Fri 07 Feb 2025 02:09:21 +0000
Files and hashes: 1: uRm6CzrV4m_DHTlL4TK7yof8yFI.crl (hash: WVJwpYFXteuV7sD3x2/PwG1gQMXgdkk1m3mMshuJ5GU=)
2: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (hash: Mjvz0g/6VHNBx1WBrf/RAQ24UJcGDEU3e3YasLXb4ZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
Validity
Not Before: Jan 31 02:09:21 2025 GMT
Not After : Feb 7 02:09:21 2025 GMT
Subject: CN=679c30d1-27b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:76:46:7f:0b:f9:aa:f8:3a:a7:4c:07:4e:
4c:fb:88:1a:0f:0c:40:50:c4:d0:f0:fa:5b:9d:40:
b2:c7:1d:fe:d6:5d:a2:38:b2:18:67:53:46:49:94:
79:30:1d:ba:38:a5:74:d5:da:42:ac:d8:52:a3:56:
1a:8e:25:cd:1c:b8:ea:e4:8b:57:1e:56:e7:c8:12:
eb:78:ba:eb:98:09:13:d2:dd:78:62:d9:5e:77:7e:
4a:9c:6f:15:cd:f5:d3:9e:94:97:30:25:c8:d5:c0:
4c:79:39:a0:b1:86:dc:c6:3c:d3:5f:4b:9d:22:f3:
6c:df:d9:3f:1c:82:24:14:54:f6:c4:5e:2c:ac:e4:
8d:99:98:7d:2b:23:cb:d2:eb:37:ca:c8:88:f2:14:
5a:b4:82:3d:e8:be:7a:23:a1:75:d8:cb:96:8d:0d:
e6:54:32:a8:5d:fb:9e:1d:ec:8d:e7:f5:1c:41:24:
3d:9e:66:63:88:2c:d2:1b:27:24:34:10:c3:ae:54:
15:54:7f:25:90:dc:7f:e4:e5:23:fc:71:fc:4b:93:
fc:7d:98:8b:b4:f1:04:fd:b8:94:65:24:4d:4c:fc:
0f:af:c1:32:a3:3b:f2:fd:c4:ba:64:f7:63:c0:e5:
9f:ea:d0:fa:45:cc:cd:3c:74:c7:20:8a:fc:1b:eb:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9F:F0:C9:8E:12:A6:E2:C4:6D:E5:0F:69:57:AF:E2:03:12:3D:33
X509v3 Authority Key Identifier:
keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:57:3b:12:c2:bd:fc:e5:8a:ee:96:6a:50:ef:db:41:b2:de:
86:ce:fb:f1:41:b7:f6:10:a9:86:2f:5d:f2:25:12:4b:17:dc:
b3:13:9d:52:40:2c:c6:23:d1:5b:8e:e6:70:1e:9e:2d:79:2e:
69:b3:f0:0a:1b:c7:a2:3d:5d:be:82:b5:de:77:2b:e1:d2:16:
61:6e:53:a1:fa:1d:e0:8a:f0:c7:02:7f:91:35:b2:7d:1b:d0:
fa:b6:44:a0:fe:4a:b4:0f:0b:e0:dd:6a:4c:0f:28:ec:a3:7d:
65:8b:20:6f:ea:7a:e8:d0:e2:fe:20:10:7e:be:d2:93:0b:4a:
c6:fe:23:0a:bb:03:f7:95:28:3d:8a:ec:95:8c:fb:01:d2:65:
8f:2a:f7:10:e9:4b:81:f4:9b:ef:5c:3a:50:05:ca:68:ab:15:
62:3a:48:6d:d5:e6:69:f7:be:cc:4f:db:59:69:5c:0e:cd:ab:
f9:7f:b0:b5:18:88:00:37:c0:23:e1:46:b7:61:6b:5d:fc:40:
23:e9:50:f7:c3:0f:8a:d2:a0:50:ad:c4:ab:1e:21:fe:73:1d:
40:b7:38:c1:5d:84:57:f8:1e:1a:d8:1c:b4:69:ed:63:af:aa:
a9:74:3f:c4:51:6d:55:c2:7d:6a:71:d4:48:9c:d8:1b:95:f5:
37:3b:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:20 2025 by rpki-client