Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
File: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft (raw, json)
Hash identifier: 86Acd46iZci7BFA5jJZOYU6t0dqvz+AdU53WM1YZpc0=
Subject key identifier: 4F:D1:B7:12:61:6F:39:5B:B6:22:1D:B0:CD:51:5C:DB:47:35:DF:5C
Authority key identifier: AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
Certificate issuer: /CN=A91B5BD4/serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
Manifest number: 0199
Signing time: Fri 31 Jan 2025 02:40:17 +0000
Manifest this update: Fri 31 Jan 2025 02:40:16 +0000
Manifest next update: Fri 07 Feb 2025 02:40:16 +0000
Files and hashes: 1: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl (hash: ItcN0kxSnPqQmINsKYbIa+gPZrLN9m/izqiszxvPQjY=)
2: C248DFA26DBB11EDB3635D28C4F9AE02.roa (hash: a52+Pk1FkwC/G3hPUY7oyb3u48mgwz6grHdpG9+HrUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5BD4/serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Validity
Not Before: Jan 31 02:40:16 2025 GMT
Not After : Feb 7 02:40:16 2025 GMT
Subject: CN=679c3810-2f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:5d:0d:34:4d:6f:a7:0d:99:cd:e2:15:69:
a8:19:0b:68:98:92:b3:19:1f:4d:d6:78:17:19:21:
aa:c4:22:4c:0b:90:b6:f5:09:17:da:d4:36:92:67:
77:6f:d4:9a:65:3d:47:12:85:8d:00:37:db:6d:36:
b6:f0:06:44:b9:52:05:63:7d:0d:99:a7:4e:08:0b:
eb:aa:5f:54:9d:be:3a:f8:6a:ad:a0:b8:8f:56:84:
a0:9b:8d:c3:33:48:b2:d8:39:37:28:81:62:be:20:
57:77:51:56:99:01:20:17:d7:70:db:71:f7:83:16:
97:ae:b6:a5:fb:f0:65:bb:a5:e6:57:3b:9d:5d:94:
63:77:b1:61:9f:a3:1f:60:0a:7b:9b:f9:92:e9:f5:
06:c7:64:32:b8:40:41:c5:81:97:3d:fd:19:9d:dc:
d2:69:d6:51:f9:d4:48:ce:2f:d3:94:46:52:dc:c1:
9c:b6:06:20:e3:5f:20:d5:87:d3:c9:e7:1d:ac:09:
47:e6:f2:fd:cd:d5:b9:b8:f8:22:30:d1:18:df:88:
ce:23:ba:9d:9e:35:d8:26:35:13:f9:7d:d0:5c:13:
31:fd:50:c1:d1:07:a7:22:79:87:23:73:10:54:82:
88:ec:7e:9f:44:6a:30:47:33:11:5e:05:59:b6:c0:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:B7:12:61:6F:39:5B:B6:22:1D:B0:CD:51:5C:DB:47:35:DF:5C
X509v3 Authority Key Identifier:
keyid:AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:8b:0d:04:38:22:a2:56:b7:ff:eb:27:fb:3d:f1:ef:f1:c7:
76:5c:ac:68:c6:92:71:8b:0c:4c:87:6f:f8:9b:44:fa:f7:14:
48:ab:44:c4:19:37:d8:af:af:61:60:69:54:b5:60:0d:94:a1:
66:a1:35:4b:b9:db:cc:b2:32:28:2e:3d:c9:7b:ec:40:d9:c9:
5b:b1:d5:64:2f:1b:86:93:d6:26:6f:55:7a:22:c9:39:1b:c2:
c8:64:4e:bf:84:fa:12:4b:52:67:94:b7:96:81:87:c8:08:aa:
2a:59:79:36:5e:ec:d6:6b:c7:12:8c:45:67:d4:fd:18:93:03:
f5:3c:c9:dc:59:d2:45:01:87:66:8c:69:97:2e:d8:7e:e6:b1:
d2:ba:7a:9e:49:ed:53:fe:2b:9e:e9:62:38:81:0c:b6:6e:01:
b7:e3:80:d2:3b:0c:e8:b8:f6:db:85:f6:cf:6f:12:fa:9f:81:
56:1f:2e:29:68:4f:45:a2:4f:00:6a:bb:cb:03:56:bb:49:11:
39:74:84:7d:6b:2b:3a:ff:3e:93:ca:a7:3f:18:ed:aa:27:a8:
fe:eb:58:0a:a2:ff:be:d7:b7:8f:c4:26:21:b4:4f:97:9e:72:
46:08:c6:17:2c:6a:c0:a0:bf:82:d2:eb:db:05:4e:38:15:31:
2c:b7:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:49:58 2025 by rpki-client