Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft
File: U8lIF-sTZfHejDwrRAIjmIHBlD0.mft (raw, json)
Hash identifier: YrPYOOIGezHUfB+B7Zeps/PmYBAbAsjw4Urv3q5bvi0=
Subject key identifier: 20:BE:5C:BD:16:6C:16:EC:EE:AD:7C:50:C5:73:19:6D:01:0C:3E:5A
Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D
Certificate issuer: /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
Certificate serial: 046F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft
Manifest number: 0458
Signing time: Fri 31 Jan 2025 00:19:53 +0000
Manifest this update: Fri 31 Jan 2025 00:19:53 +0000
Manifest next update: Fri 07 Feb 2025 00:19:53 +0000
Files and hashes: 1: U8lIF-sTZfHejDwrRAIjmIHBlD0.crl (hash: /g9XRsKiBuzwRr28enTVzaApDtqtg3WMp+6CduI1VPM=)
2: C908B72A696F11EFA4DA475FC4F9AE02.roa (hash: Or2YnqS7m5TNVdIQDyqKfDxNCZPXw2uBZdfnmUb/Gcc=)
3: C9C70AEA696F11EFA4DA475FC4F9AE02.roa (hash: Y16G28ble7sDhlK1gqeIJ/fe7Scn5O8XUtCkp4Our/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1135 (0x46f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
Validity
Not Before: Jan 31 00:19:53 2025 GMT
Not After : Feb 7 00:19:53 2025 GMT
Subject: CN=679c1729-dcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f2:00:82:d3:b0:af:08:c4:66:61:db:c1:da:
02:6e:f2:6c:04:2f:50:9e:d4:84:9d:76:0c:10:0e:
cd:15:b0:37:29:fa:7e:38:81:f5:0b:50:f1:9f:e1:
85:8b:fc:89:69:5c:50:95:af:bc:ad:1a:d9:50:1c:
7d:d9:09:fd:d3:c4:3f:06:91:d2:a4:ca:70:d1:f5:
a4:da:cd:00:52:ea:2a:9d:91:98:4e:5e:ca:4c:48:
f8:a2:aa:a2:c4:42:62:b9:ea:36:3c:52:bf:f6:60:
67:bf:ea:7c:48:14:a5:c6:22:91:55:e7:7f:59:33:
3a:f2:2b:79:a5:86:39:d8:8e:7c:03:c4:8c:ca:f1:
c2:d4:2f:ac:d2:f4:bf:ee:2e:1a:d8:ab:66:c7:6e:
8f:b7:b1:69:a5:da:8b:59:e8:22:fb:e3:1b:d5:42:
24:ca:1a:2a:fd:24:f2:b2:5b:1e:f8:3f:f8:49:2e:
d1:6a:ce:5c:c1:e2:fe:71:33:7a:94:25:fd:4a:ef:
9e:48:d4:31:11:2f:62:06:f3:eb:47:57:09:e3:dd:
06:b2:4e:0a:05:23:55:a8:5d:62:68:db:3d:ae:b1:
3f:0e:60:52:25:75:ed:a2:02:99:a7:f0:13:5c:d4:
c8:3d:27:13:b3:e6:9b:b5:45:9d:4a:fe:23:e3:6e:
b4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BE:5C:BD:16:6C:16:EC:EE:AD:7C:50:C5:73:19:6D:01:0C:3E:5A
X509v3 Authority Key Identifier:
keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:61:6c:18:e2:a0:ea:eb:68:c7:a6:48:c8:83:9c:21:59:69:
16:cc:59:3e:20:42:e6:35:38:3a:ea:3f:ec:12:03:43:1d:21:
0e:d7:2d:15:74:f7:d1:69:f6:2a:6e:c1:41:4e:d6:a0:af:6b:
0a:de:ec:29:a1:10:a8:b3:cd:b8:f7:a4:23:09:79:9a:86:5d:
26:6e:69:43:cf:0f:80:4d:cf:fc:6d:02:96:e4:5e:d5:f8:7e:
0b:d6:19:80:44:ee:ee:62:b7:09:5c:a0:0c:ea:39:5c:2c:5a:
fc:5d:a3:60:a6:88:78:cc:d7:57:52:af:1b:fe:91:7f:7c:65:
f7:de:db:cd:19:80:c9:68:cd:ce:74:5d:94:2d:2b:5f:0d:70:
00:21:a0:1b:fc:84:be:41:1a:41:e3:11:99:e6:48:c0:ab:b6:
4e:90:12:48:99:1b:d2:fb:56:bb:3d:2a:51:ef:ec:2f:94:e0:
e3:35:ed:a6:98:b4:b0:45:fd:a4:0e:9d:55:a8:d9:49:0f:b3:
74:b4:b8:1c:b6:ee:fc:82:42:b6:60:27:81:36:87:fe:9c:f5:
ac:6c:d8:20:31:58:e0:b2:32:9b:09:1b:1e:7a:ee:56:fb:16:
16:3b:0b:6b:ad:0d:7b:b9:3a:f6:fb:29:3c:1d:e7:6f:c6:00:
41:96:a3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:08 2025 by rpki-client