Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft
File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json)
Hash identifier: 87SgLcQCextzsygX8oUafQXgFck0s0z/r9euGzVzOGI=
Subject key identifier: FB:B3:57:4B:06:F0:55:4E:92:08:03:89:B5:78:C6:F0:ED:81:5D:1A
Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Certificate serial: 0C79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft
Manifest number: 0C3E
Signing time: Fri 31 Jan 2025 18:24:12 +0000
Manifest this update: Fri 31 Jan 2025 18:24:11 +0000
Manifest next update: Fri 07 Feb 2025 18:24:11 +0000
Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: 9fYb4Xy4hRESrTYD5qV1B7bXVGrRWRVOw8cRvknLrw0=)
2: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (hash: 3pP3sdtqTiWCcrGq+H7BVXzx0my8jLX9t9qyXkMSDe8=)
3: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: FPiGGcK4pF8UzcHguK5mqg4YmbaTICQWjS75XqzTA24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3193 (0xc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Validity
Not Before: Jan 31 18:24:11 2025 GMT
Not After : Feb 7 18:24:11 2025 GMT
Subject: CN=679d154c-f403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:11:07:ac:aa:82:c8:bb:f6:e3:e9:7b:3a:
89:8e:aa:24:6e:a2:75:20:74:fa:a9:00:58:fd:40:
c8:72:9c:fd:47:53:5e:42:9e:6f:81:25:65:73:9b:
8d:d0:96:53:73:df:06:b0:0c:61:f8:e6:0a:ab:ae:
85:da:3f:57:c1:42:e6:46:bd:72:6d:5a:b5:2d:86:
38:0a:6f:b4:dc:ae:fc:d7:18:dd:b9:99:cf:26:b8:
ad:e3:dd:43:3a:49:4d:cd:6b:09:1c:58:3e:9b:2a:
5c:7a:31:66:bc:7b:06:2c:fd:84:e7:c1:32:df:f1:
7f:13:f7:d8:2d:33:8d:e5:ba:6e:0b:61:81:6f:9b:
99:c1:f5:c5:4b:5d:ff:4b:6f:78:85:85:5a:64:df:
9e:37:14:ab:f4:bb:33:bb:2c:fd:20:40:b5:76:25:
79:ae:c7:d5:30:23:8f:dd:22:a1:f4:98:5b:d7:f8:
77:f3:2c:ce:cf:e7:33:a6:7b:88:3e:9b:2c:c3:b3:
c5:c9:10:a4:6c:9d:aa:70:90:d6:67:a4:9f:bc:7b:
bf:29:d8:55:62:df:ce:b0:96:86:72:88:92:44:44:
5c:7b:4f:63:c9:92:7b:af:7a:28:f3:62:e9:09:41:
ad:9c:b7:66:29:6d:ba:2e:0b:8c:8a:d0:8c:f5:03:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B3:57:4B:06:F0:55:4E:92:08:03:89:B5:78:C6:F0:ED:81:5D:1A
X509v3 Authority Key Identifier:
keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:0c:dc:95:ef:7c:2a:08:cd:14:fb:63:9c:4c:d0:18:b1:eb:
c7:f7:59:6b:23:e0:b3:ee:00:5c:c1:4c:56:63:1d:b4:5d:37:
ad:a8:41:14:c5:9f:01:da:e1:d4:0b:35:39:e1:d9:48:2b:9e:
13:62:10:3c:8e:0c:82:27:06:72:a1:ea:70:9e:e7:96:e9:65:
80:ee:cb:63:e2:90:8a:a4:47:f7:84:26:66:82:75:bf:99:ed:
68:dd:dc:91:47:f8:ae:cf:b8:c8:b8:e2:a9:0a:55:a2:ba:3a:
b4:3d:21:62:88:80:2a:f3:05:3f:df:34:8b:9b:11:72:1f:59:
f3:6f:17:d5:b3:4f:6d:39:67:59:05:80:10:b1:5d:7b:0d:ca:
8d:7f:9d:01:33:ee:68:cb:ef:56:cb:e4:4a:6d:c7:45:1a:52:
a9:fc:1d:3b:98:e8:19:fa:a3:a7:c5:5d:60:67:20:46:2d:eb:
54:e3:d2:ce:0e:b8:52:ef:c6:fd:c0:ff:bd:f0:93:54:72:2f:
15:5c:a3:86:7f:f9:2f:66:49:20:3e:0c:4f:c8:40:b5:e4:51:
bc:8b:82:56:66:df:28:5e:e0:5f:43:5d:56:78:47:94:5d:22:
04:2c:ab:09:e4:b3:72:cf:4c:74:54:e1:a7:a7:15:47:32:6a:
1f:b4:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:21:32 2025 by rpki-client