Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
File: UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json)
Hash identifier: A0Nb3s8Dtqi7P0Wdst/h2kcD2AyFeH1/1IZuDauKX9E=
Subject key identifier: 9A:FE:67:8B:40:A5:B4:08:2E:F8:85:FA:E8:FB:8C:78:63:CC:A8:EA
Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
Certificate issuer: /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
Manifest number: 011D
Signing time: Fri 31 Jan 2025 03:52:15 +0000
Manifest this update: Fri 31 Jan 2025 03:52:15 +0000
Manifest next update: Fri 07 Feb 2025 03:52:15 +0000
Files and hashes: 1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: SUVqOKnHTdD8PdVLWU4qoHZ4KYdEP4XE6NBBwqIU/P0=)
2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: jQ/0lCjJIMkOJNGjS+k508Q8Du2UjlHI8yBfLB/rzdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Validity
Not Before: Jan 31 03:52:15 2025 GMT
Not After : Feb 7 03:52:15 2025 GMT
Subject: CN=679c48ef-c26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:4a:9e:b6:57:41:61:b9:fb:5b:ca:c8:bc:
ae:4e:60:95:31:81:e2:b4:7a:2a:41:ce:81:68:6c:
76:4d:32:18:11:fc:d9:d0:b4:4c:9b:b5:54:74:35:
ed:8b:f3:19:02:b8:19:19:37:12:8c:e0:ea:18:71:
ff:78:a0:b3:32:b2:be:af:85:e9:4e:c9:98:1b:8b:
57:41:35:b3:35:0d:00:49:74:7a:a1:68:f7:d4:7f:
d9:0d:dd:0d:6a:63:a3:a1:69:8b:70:40:28:64:d3:
a6:5f:61:c0:70:5f:2c:77:c2:00:86:da:89:88:ee:
ee:6a:58:2a:36:45:68:de:bb:c1:fe:1a:6a:f3:12:
ad:02:5a:52:e4:d2:b0:34:4b:b6:2c:bd:22:40:2c:
4d:b7:cd:8a:a6:4c:4c:36:10:78:ac:2c:c4:e2:fa:
31:12:fe:29:99:1e:40:7e:82:89:49:c5:fb:40:4b:
d2:d7:1a:4e:e4:28:56:87:cb:b3:13:87:6d:ee:82:
e4:3b:fc:fc:eb:61:8f:2a:15:f4:4e:78:e6:d1:11:
40:bd:61:2e:c7:80:a8:56:a7:66:7d:12:d2:a2:2a:
6d:da:46:f9:7b:15:3c:15:8c:83:3c:d8:57:06:fe:
2e:d5:2d:02:7f:a4:e6:20:a0:b8:2e:5e:db:2a:35:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FE:67:8B:40:A5:B4:08:2E:F8:85:FA:E8:FB:8C:78:63:CC:A8:EA
X509v3 Authority Key Identifier:
keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:bd:d5:ce:85:32:91:58:13:42:1b:dc:44:e8:be:e2:62:0e:
88:4e:7f:fe:e4:11:cd:73:ad:47:5e:4e:13:ce:ba:41:a0:bd:
3e:cc:c5:a8:af:5e:17:3f:e2:69:b5:7d:7d:06:45:7d:48:d2:
47:28:86:c0:cf:ef:be:f3:70:9e:7b:46:cb:29:7c:f8:20:ed:
93:88:40:18:17:38:1d:b0:96:57:72:a5:28:96:a7:49:4d:f1:
bb:8c:b7:04:0d:de:89:2b:74:0f:33:d6:4c:98:fd:6e:86:f6:
14:5b:09:00:02:1f:60:c3:9f:ff:91:de:b5:91:a0:a5:c7:9c:
6d:b4:1f:61:6c:14:6a:a4:bc:5c:95:d1:63:f4:08:93:fb:0c:
9d:5e:d5:80:fd:96:8b:b9:39:f6:7e:84:42:c3:28:92:cc:b8:
b7:ef:96:32:0d:ee:39:17:62:8e:61:3f:d8:33:68:cb:4a:74:
b2:42:56:8a:e5:fd:76:4c:67:65:74:3e:9f:50:c3:9b:01:49:
37:8b:7d:ec:5e:bd:22:18:72:18:8c:46:3a:ec:6c:a4:df:2c:
47:19:d4:0f:a2:11:fc:69:63:ef:1b:72:fc:27:f6:00:25:80:
92:53:69:44:cf:94:ae:ba:cf:93:5f:cc:58:86:3b:e5:a7:e0:
09:8a:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:52:02 2025 by rpki-client