Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
File: FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft (raw, json)
Hash identifier: c4gpwlTApLRnTbsA0/IjJbWysGYreSe5RUrnRofy7n8=
Subject key identifier: E7:CF:D4:CC:87:43:93:51:DD:A4:11:2E:85:59:3F:36:37:A5:14:18
Authority key identifier: 15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE
Certificate issuer: /CN=A91DBF0C/serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
Manifest number: 3A
Signing time: Fri 31 Jan 2025 06:37:12 +0000
Manifest this update: Fri 31 Jan 2025 06:37:11 +0000
Manifest next update: Fri 07 Feb 2025 06:37:11 +0000
Files and hashes: 1: FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl (hash: 2NRy/dVpUAJgBsPUPq2dil4+JZZ9+QZaTbhQugla2n0=)
2: 71DD0A968C8311EF81E2B476C4F9AE02.roa (hash: TXrkjJIwjX6s25tb57BHkFJUDyJD9PmCVoOhgLQta9Y=)
3: 8A06894A8C8211EF85B3A572C4F9AE02.roa (hash: k/RSQ+loZKSU/mNG3N6cRjY0FiE79Ik7PHvn92DtyVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBF0C/serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE
Validity
Not Before: Jan 31 06:37:11 2025 GMT
Not After : Feb 7 06:37:11 2025 GMT
Subject: CN=679c6f98-3b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:ef:72:f2:35:25:3f:f9:b8:d2:e9:d2:88:
8c:bd:1d:d5:b3:a6:96:30:45:7e:1d:f6:1d:e4:95:
54:44:8a:ca:ce:71:9e:0f:56:16:7e:2f:4c:26:1d:
66:51:0c:f0:d0:3b:e4:a8:98:03:5b:c8:1a:1c:48:
f5:d6:5f:5b:dd:91:5c:32:0b:1c:94:59:7f:70:b5:
5f:8f:00:c3:85:d8:bb:ea:2d:94:53:55:46:0a:53:
8e:95:1d:42:5f:79:c5:ce:dc:b9:68:e7:b2:f6:2a:
cb:fc:75:12:3d:05:d9:13:1e:a7:63:04:88:cd:2e:
b2:af:bf:37:7b:fd:a9:2c:9b:15:fe:da:06:fb:68:
65:ff:e8:a9:b2:90:d1:f5:c9:76:d3:82:45:8c:9b:
de:0b:fb:7c:5f:d3:d2:fa:09:6d:bf:2f:ff:99:50:
43:0d:7f:eb:19:11:2e:cc:49:58:74:70:43:0e:07:
55:d8:51:ce:43:55:a4:ca:d4:2e:7e:b7:48:f6:ce:
a5:5f:5c:79:39:6a:c8:ac:55:f5:54:a4:4e:de:9b:
76:11:f8:45:f0:65:88:7e:b1:34:13:83:fc:2f:32:
83:10:bf:c4:b5:7c:bd:96:22:a1:2a:81:94:50:28:
92:90:7e:f6:e7:e4:ff:ed:dd:0b:97:48:08:00:6e:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CF:D4:CC:87:43:93:51:DD:A4:11:2E:85:59:3F:36:37:A5:14:18
X509v3 Authority Key Identifier:
keyid:15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:cf:f7:54:fd:28:19:2c:bd:ae:fe:86:7d:53:85:6c:e8:3e:
40:a8:28:29:0a:4a:4f:59:27:c3:05:a3:4f:c5:86:a1:93:8d:
6e:b5:8d:fb:69:30:3f:a6:d7:d6:a1:49:f8:a9:34:d1:45:c0:
c0:78:c3:aa:0d:9e:13:20:38:b4:92:fa:18:7b:f3:75:e5:2e:
e6:11:9c:17:88:5d:1e:40:b8:2e:52:8d:55:a7:52:0a:51:b2:
b1:9d:b8:cd:e3:ea:e1:91:2c:0e:ba:0c:2e:d0:e9:e3:3e:23:
04:2f:61:f4:29:99:43:6f:2a:58:c6:98:fa:c4:1c:d4:17:d8:
fe:06:06:9f:d8:c6:60:da:9c:59:ff:81:0b:8d:bc:eb:34:b4:
ed:db:29:15:7a:5b:7f:0f:94:3b:fe:b5:88:e1:5d:d1:dc:df:
2f:86:10:26:e6:15:44:74:b7:d4:58:95:78:a7:bf:12:e4:d9:
71:3c:b6:bb:8d:fb:2e:e7:1e:bd:06:d6:71:9e:0b:cd:4f:21:
7a:27:de:7e:d4:44:8f:36:37:1b:74:81:eb:3c:95:53:ce:7f:
14:99:d1:98:ea:cd:70:6f:2d:95:f8:54:03:c3:4c:b0:e2:33:
e1:de:dc:a7:bd:fe:53:ad:e4:e1:78:6b:33:7e:0e:6d:2d:51:
93:d2:17:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:22 2025 by rpki-client