Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft
File: FL-reUJuPSK-w_xh7kMv6ggnKUY.mft (raw, json)
Hash identifier: Bpx7uOWOdgA5xcfQk5AfShH4dsvC+28nGcf9icbsyvM=
Subject key identifier: 22:80:B9:A2:D9:4A:DF:84:34:06:ED:B9:F6:12:8D:DB:25:64:D8:48
Authority key identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46
Certificate issuer: /CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
Certificate serial: 0F80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft
Manifest number: 0F77
Signing time: Fri 31 Jan 2025 17:31:44 +0000
Manifest this update: Fri 31 Jan 2025 17:31:43 +0000
Manifest next update: Fri 07 Feb 2025 17:31:43 +0000
Files and hashes: 1: FL-reUJuPSK-w_xh7kMv6ggnKUY.crl (hash: HFhQkWxkTHbiL38+SZT2/2nebBfjIkdp8bvdU5AX9Xo=)
2: CB6BD978592811E9AD7CEF21C4F9AE02.roa (hash: Jwv/izm+82IIyS68yc8lg7WjqOlpLGTRdhkGtdRC6BA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3968 (0xf80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
Validity
Not Before: Jan 31 17:31:43 2025 GMT
Not After : Feb 7 17:31:43 2025 GMT
Subject: CN=679d0900-c3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:cb:f9:e9:8e:94:ba:68:f3:0f:82:20:a8:
0a:cb:01:4f:31:bf:51:a9:04:65:92:5c:90:73:8a:
8c:40:70:49:91:47:cd:82:1f:fd:c8:41:bb:41:1a:
39:82:a3:a0:05:2c:2d:5f:93:88:7c:48:bc:64:a5:
86:86:49:b8:de:0c:64:be:3e:88:0a:f6:33:86:a0:
d1:55:81:d9:4a:95:f5:a3:31:d1:18:c6:ce:6f:4a:
3e:f3:95:c7:44:4f:29:ee:32:16:53:90:66:f2:3a:
46:54:79:ab:76:20:32:4e:9d:8a:0f:a7:29:99:c4:
eb:33:bf:b9:4c:7e:24:76:34:22:be:d9:dc:02:36:
ed:c6:84:76:3d:29:4f:e3:9b:92:14:d5:51:99:e4:
2b:77:79:6b:2d:c3:6f:5e:b8:fc:df:cb:ab:44:0c:
bc:af:0a:15:6c:34:d8:5b:e1:00:68:11:c7:17:88:
49:2b:12:ca:90:de:83:96:d3:86:05:4d:ee:32:24:
53:8c:5e:78:c5:f7:3c:f6:28:8a:dd:16:fc:e9:eb:
61:85:bd:39:af:14:22:61:51:e1:c5:77:8c:f0:ef:
f8:cd:c4:29:56:a8:de:8e:bb:05:d2:64:da:32:fa:
c2:0d:7a:f6:81:7e:a7:5f:a9:e4:75:12:06:cb:57:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:B9:A2:D9:4A:DF:84:34:06:ED:B9:F6:12:8D:DB:25:64:D8:48
X509v3 Authority Key Identifier:
keyid:14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:80:4d:8f:c0:31:45:a0:a1:c3:e7:ce:86:9d:ab:c9:f7:e4:
d2:0d:3e:18:3d:dc:ca:7c:b1:96:63:b1:c4:ef:a7:6c:fe:93:
a8:ae:c1:40:9f:72:07:55:4a:1c:60:7b:bf:cf:e5:58:54:de:
24:a7:14:fc:f1:63:b2:d2:f7:cc:27:c9:2d:fe:43:dd:ca:30:
6f:29:18:3d:d7:69:aa:2e:0b:45:32:73:c1:cf:15:cd:03:3b:
39:de:40:2d:a2:50:c6:b8:15:ca:1b:4b:51:af:d7:fb:4f:60:
21:1e:49:fb:5d:1e:78:c0:3d:93:03:4d:32:ad:49:86:60:bb:
df:0f:05:a7:b2:d2:82:32:a2:9e:ee:ae:de:13:62:2f:2e:a3:
e6:1d:06:3a:af:77:f6:c1:e8:d9:9e:aa:e0:d3:92:39:cc:c0:
20:3d:25:ca:51:3e:14:2f:58:97:b9:af:a7:80:8f:cc:f6:f6:
4a:6d:33:0d:a5:ad:0b:a5:f3:f6:58:1e:17:b6:cc:92:ea:08:
11:25:25:7a:bd:ab:5f:a9:73:fe:f6:fe:19:ef:c5:21:9e:e0:
a4:c4:9a:71:94:f7:e2:1e:45:4a:a5:ec:c5:72:44:23:80:6d:
04:a9:fd:0c:56:76:b3:e4:d7:ab:37:b6:97:4e:a1:65:fc:eb:
f0:e0:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:09 2025 by rpki-client