Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
File: u99YzWESke9boarLayzE7VCwEVc.mft (raw, json)
Hash identifier: l1hl874JcZbN+IFmFnUnU/vnRtVVex+aU4Fi+u1CmG4=
Subject key identifier: BA:6E:C0:BD:97:8E:93:54:35:B0:07:27:FB:3E:07:F0:A2:78:B1:2F
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial: 03F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
Manifest number: 03DA
Signing time: Fri 31 Jan 2025 00:42:28 +0000
Manifest this update: Fri 31 Jan 2025 00:42:28 +0000
Manifest next update: Fri 07 Feb 2025 00:42:28 +0000
Files and hashes: 1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: 8CbntB7OIVFIJoE8aJ4yDEY9ESNmtDHx2HFoHdllfKA=)
2: 08241A166B1111EE99759439C4F9AE02.roa (hash: UhGl0evRYBjLu0rdnI0M37y8Sp78nNPEsd87o2BsaWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1010 (0x3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Validity
Not Before: Jan 31 00:42:28 2025 GMT
Not After : Feb 7 00:42:28 2025 GMT
Subject: CN=679c1c74-edfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:2c:8c:79:af:52:76:2d:11:23:2c:57:9e:
56:06:52:8b:fa:9f:09:58:10:50:ef:f1:d1:15:db:
60:ea:9a:72:95:30:7d:48:06:c7:b2:45:a8:96:4d:
ac:e4:2f:5b:ce:fd:23:e4:6c:c6:c5:c2:d7:e7:8b:
8f:e2:0e:3e:f5:14:ad:9f:f1:e9:19:27:ae:02:22:
ee:6f:71:91:7a:3f:72:f9:90:23:cb:c5:01:c9:fd:
86:f1:4a:61:e6:c6:ca:16:2d:60:ad:c6:7b:db:b6:
c3:87:d8:9a:3d:6b:e6:bb:0e:e3:e6:10:15:8b:ec:
51:ed:d3:e9:34:7b:9d:ed:43:c6:fc:ca:d7:a7:4d:
78:62:39:5a:6e:a5:9c:32:d3:89:d9:e0:d0:44:b5:
55:ad:cc:c2:40:d4:9d:35:87:cb:b5:b8:3d:7b:cd:
79:8d:3a:13:1c:fc:16:d6:b3:1c:cd:e0:61:27:70:
7d:b0:44:20:c1:cb:d2:18:32:da:af:30:13:e0:85:
35:6a:a6:c4:80:72:e4:4a:09:1a:8e:86:92:95:49:
31:6c:ee:44:69:bc:9f:10:94:7d:2d:24:6c:80:23:
23:c1:79:19:9c:e9:9c:e8:13:17:1e:33:13:a2:e5:
a7:00:70:15:82:67:a0:99:75:6a:85:0f:ab:f6:d3:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:C0:BD:97:8E:93:54:35:B0:07:27:FB:3E:07:F0:A2:78:B1:2F
X509v3 Authority Key Identifier:
keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:d1:84:08:9d:97:4d:d7:8f:1d:e9:cc:5f:ac:16:5a:17:95:
cf:41:84:f1:ee:b6:ce:32:87:04:83:a3:82:80:e1:c3:81:bb:
e0:78:e9:bc:95:95:d3:4e:6a:fc:bf:2b:0c:22:dc:f2:e3:1c:
a6:fa:21:a2:6f:44:e4:54:1b:d2:68:f4:41:35:39:9e:78:00:
ea:d7:1f:f1:5a:b6:d2:20:f4:c4:e9:40:d6:ae:5d:df:7e:d7:
cd:52:05:e4:74:a9:15:88:72:4d:c1:f0:5b:ac:c8:7d:83:33:
69:33:80:a0:b9:0b:1c:9f:22:0e:36:64:0a:f1:16:37:5f:13:
9e:58:15:14:31:82:7f:5a:df:e8:80:df:86:5f:0f:64:3e:22:
92:ef:41:7b:0e:4a:73:3f:a6:3c:ce:8a:4e:ff:5d:d2:62:fd:
90:f1:7f:60:04:53:bc:4e:71:a6:b5:c1:57:48:84:14:49:e7:
82:e8:0b:2e:bc:50:b1:ca:a8:d1:24:4b:d6:2c:34:49:9a:2a:
b9:e7:14:3a:cb:64:c9:84:ba:ab:1e:7a:70:39:75:63:71:fc:
0b:a0:98:3b:e3:cf:1c:3d:d5:8a:b3:f0:8b:62:a7:87:0b:19:
7f:f9:a3:38:4c:45:8d:89:c7:52:99:b2:5f:8d:69:86:18:17:
80:27:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:48 2025 by rpki-client