Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json)
Hash identifier: 1sshYOctBf4k6d7qBc8UAhaUwwIW6jSB2obOlz22Ij8=
Subject key identifier: 58:E0:C5:9B:09:D9:65:B6:06:8B:AC:3A:68:EB:F7:1C:0B:70:AD:74
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial: 0504
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
Manifest number: 04FC
Signing time: Thu 30 Jan 2025 23:41:58 +0000
Manifest this update: Thu 30 Jan 2025 23:41:58 +0000
Manifest next update: Thu 06 Feb 2025 23:41:58 +0000
Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: 6hBvQmucIHlGsmoSiu1ZIwxOyzG9tjmKQD7V3mmNJA4=)
2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: IJTuUd/n8OCJ5dJ8YqUV7DdTVdb9JOIyqBQaxiAGn2k=)
3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: ZpRAboF0Zy0eld2L5SbNx4a1RdCdtnze/MEYgH64xko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Validity
Not Before: Jan 30 23:41:58 2025 GMT
Not After : Feb 6 23:41:58 2025 GMT
Subject: CN=679c0e46-22ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:4e:9b:c6:c0:b2:0f:67:2f:9b:71:29:ea:
55:87:85:6d:a9:b8:ae:93:ab:b2:44:cf:f3:4e:8f:
d4:95:4c:87:bc:d7:ce:cf:04:45:31:c2:7f:cf:b0:
89:62:1c:2c:66:5b:9e:78:f8:ef:95:3f:8a:11:50:
51:ec:06:1d:53:4b:fd:91:a1:b5:2b:17:04:ba:2c:
73:87:91:a0:cf:38:fa:b2:dd:68:72:ae:cb:a6:a3:
32:e4:43:dd:49:c8:f7:93:50:36:f0:44:9d:37:26:
e4:a0:41:a1:a7:24:b7:5c:0c:8c:2e:ea:4c:d7:e3:
09:99:dc:dd:fd:61:bf:10:92:3c:7d:6b:29:34:50:
04:5e:78:27:45:53:18:41:e4:04:bf:c2:25:b0:2f:
5d:02:18:1a:f0:c2:18:33:25:b8:9d:31:64:45:58:
1d:e8:4a:5a:b1:0e:a3:6e:0a:c9:62:f1:02:2b:e4:
20:5b:92:34:da:2f:fa:9b:da:77:4e:b7:f1:60:a0:
5d:a2:08:48:6d:73:c9:f3:af:cb:3e:31:2f:a2:05:
a4:59:b1:52:89:e1:1e:d9:36:62:b6:43:55:af:76:
5d:b4:5c:9f:41:72:bc:b9:5f:38:ba:7d:3f:07:9f:
a2:8d:a7:8b:9b:72:bd:5e:cb:05:4a:0e:b2:a3:dd:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E0:C5:9B:09:D9:65:B6:06:8B:AC:3A:68:EB:F7:1C:0B:70:AD:74
X509v3 Authority Key Identifier:
keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6d:00:de:74:4f:a5:7f:22:4a:88:03:7e:99:b7:3d:42:16:
85:a2:90:03:1d:0b:c1:35:4f:17:71:e6:51:a1:66:2f:d4:94:
d7:ce:c3:d7:ed:59:75:2b:04:7b:56:58:40:cc:18:00:df:35:
be:12:41:bb:87:af:88:15:7e:7a:01:25:1c:6d:20:53:d0:6d:
56:5b:7c:0e:d6:46:f4:8e:c0:a3:3c:85:58:33:1d:7a:e3:8f:
1d:8b:f1:de:d5:3d:b9:2c:dc:ad:9c:26:41:9c:e6:5b:a0:9a:
ff:28:1d:0f:b7:3e:d3:b5:01:d2:a3:10:f3:ff:fc:3d:75:5e:
48:16:8e:48:14:dd:2d:98:f5:1d:8a:23:d8:fb:9d:f0:be:4e:
ff:89:9a:ab:d3:1e:87:ea:7d:0d:04:43:ef:1b:19:64:39:4a:
60:18:6e:f9:ae:54:a3:82:80:10:2e:ed:3b:fd:a3:d3:d8:46:
d3:5e:80:1d:63:d2:44:87:55:a8:b8:69:d6:2c:a2:02:90:4c:
99:a2:62:b7:3f:6e:36:81:e0:b7:64:7f:13:1f:0a:cb:cf:66:
25:30:e7:3c:c3:6b:4f:a9:f0:d7:0c:dc:e0:88:da:9d:16:a1:
27:84:1e:73:c6:a9:00:52:88:3d:0c:75:1a:2b:5e:df:57:38:
ee:dd:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:44:11 2025 by rpki-client