Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
File: c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json)
Hash identifier: 1Gg+FukD1d7LwLCu20pHTl4SOUhNPPOBOlTjIIKpCkE=
Subject key identifier: 92:9A:72:6E:83:DA:28:B5:3E:06:29:4B:25:FA:EE:9B:16:82:2E:17
Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9
Certificate issuer: /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
Manifest number: 4A
Signing time: Fri 31 Jan 2025 06:23:07 +0000
Manifest this update: Fri 31 Jan 2025 06:23:07 +0000
Manifest next update: Fri 07 Feb 2025 06:23:07 +0000
Files and hashes: 1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: 7Y5di6zNLD4Io1zmpuiM/rcVpG1mQrM9esbwXBTKaAg=)
2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: MYqPgxBGfIGKCkX+SQW42+81sVWr8a9Nd2V6LH33Vw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
Validity
Not Before: Jan 31 06:23:07 2025 GMT
Not After : Feb 7 06:23:07 2025 GMT
Subject: CN=679c6c4b-c5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:cf:8c:24:12:26:9a:b7:a3:9b:67:81:d2:
a7:c6:e9:d2:6f:21:bd:03:cb:4e:7d:e2:b1:10:38:
98:7a:dd:4b:97:a5:d7:6c:c4:70:1e:ef:1e:86:ce:
c8:fd:dd:05:4e:d6:da:62:14:2d:f9:0a:d5:fb:83:
8d:e0:41:56:f8:ad:5c:39:60:50:e5:78:8b:8a:29:
f1:97:1a:1c:5f:26:bd:ed:af:0d:a5:f7:3e:09:fb:
23:a1:66:e7:97:b1:8e:5d:ec:a1:05:f4:f8:69:43:
17:02:2b:0c:30:0d:f0:71:9c:f3:4f:a8:36:6d:a0:
6c:31:30:2a:5b:dd:31:7f:79:01:24:5b:70:76:c1:
ce:ab:85:17:da:37:f7:69:da:72:d4:e0:1e:bc:3f:
f6:5f:72:6f:50:b3:37:62:a6:ef:d2:a6:24:3a:8c:
2d:12:f1:b9:0b:19:cc:67:4b:ba:73:e9:70:55:f8:
09:42:1e:9c:62:52:cc:02:5b:73:17:86:9c:df:28:
48:47:db:11:8e:eb:8f:c3:65:74:ea:20:13:0c:21:
59:f2:58:90:9c:15:e5:55:0f:a2:41:62:86:9b:ca:
61:6d:4a:4a:33:31:2a:af:2c:12:05:fc:24:4f:d2:
aa:75:92:04:bd:54:85:95:25:4a:b8:f1:8d:e2:1c:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:72:6E:83:DA:28:B5:3E:06:29:4B:25:FA:EE:9B:16:82:2E:17
X509v3 Authority Key Identifier:
keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:22:de:dc:6f:2a:a3:2a:c3:c2:d9:93:05:31:a7:62:7f:56:
33:56:5f:c0:fb:db:b3:8e:f2:8c:85:99:c5:5c:e9:11:56:66:
b9:a0:0d:d3:d7:8e:82:44:1f:75:8e:04:9a:18:13:ce:37:18:
30:bb:72:1a:da:df:85:97:4b:3f:ce:8f:2e:03:5d:5b:36:0a:
82:d0:4b:33:3a:27:89:98:4d:a0:0f:65:62:d2:e0:1f:d7:93:
0a:3c:c9:8d:9b:9f:a5:ab:c4:61:db:c6:c5:bb:ab:e1:c7:99:
16:41:10:3e:45:20:1c:e5:14:f1:21:08:58:f0:3c:4a:ea:4a:
6c:e6:76:95:70:36:ec:e8:eb:64:26:c1:2f:e1:b0:58:17:4c:
7b:e1:7b:82:ed:c9:eb:36:91:59:b4:ee:7a:c8:11:d4:99:1c:
34:1c:c5:c1:78:12:3c:0e:60:a7:1d:7b:74:47:5c:c5:78:9c:
0b:33:66:1f:9e:e1:52:b6:5d:8e:9a:29:96:d9:a5:48:12:e5:
64:0e:ad:4a:41:f8:51:40:34:d9:88:50:f3:4d:72:eb:d5:5a:
24:ec:d5:79:5d:68:e0:d0:75:0b:f0:b2:74:ec:b5:5e:26:65:
e3:50:74:44:c1:90:50:25:e0:b0:45:de:25:e8:70:1c:1e:f0:
b7:45:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:15 2025 by rpki-client