Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json)
Hash identifier: 6NDnkqynpUE9pnUEqccg47JCC109YhbAHf1QLNN595Y=
Subject key identifier: 0D:54:51:30:10:41:01:0C:08:D8:91:3F:10:7E:8D:7D:8E:BD:6F:31
Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Certificate serial: 043D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
Manifest number: 042B
Signing time: Fri 31 Jan 2025 00:26:39 +0000
Manifest this update: Fri 31 Jan 2025 00:26:39 +0000
Manifest next update: Fri 07 Feb 2025 00:26:39 +0000
Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: M4rjG9AfBTrFEZCraFwtq+FzQY7ymZwbV7jw+fo3CaI=)
2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: SXmEoVAwCuv2S1VkQaBNQLi7h8OwZxPvKiz0YPbjYQg=)
3: 8120226CBEE111ECBFC4F882C4F9AE02.roa (hash: cKv5ZDuMTRB1GZ6qDVjyr/DKInN5ROhN7fMypCO2t9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085 (0x43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Validity
Not Before: Jan 31 00:26:39 2025 GMT
Not After : Feb 7 00:26:39 2025 GMT
Subject: CN=679c18bf-65f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:d4:ec:6d:7c:2d:c1:11:3a:f2:81:bc:66:
6c:7a:2a:81:14:e2:08:cf:8c:72:8c:98:7f:70:8b:
38:dc:88:7e:be:04:49:70:c0:cb:28:8f:be:b7:0e:
f5:3f:07:7f:b7:53:3c:51:6d:b9:17:04:b4:42:35:
82:9d:4e:f7:3d:79:97:a9:fc:cc:f4:e4:d6:78:ac:
c8:0f:34:79:96:f7:99:53:c7:70:c1:7b:b3:b0:65:
a5:8c:64:41:30:c0:f0:33:37:85:cf:ab:f0:4a:cd:
0d:bd:5a:7d:5b:86:44:cd:f0:9e:38:6f:58:a8:75:
84:00:c1:cd:d2:37:90:79:97:95:92:3c:67:cb:60:
fd:00:65:30:5f:3f:72:d4:0a:3f:88:1f:62:fa:6e:
8c:f0:72:2f:e0:66:22:ec:e3:33:43:99:a9:81:d7:
cb:2c:44:d6:b0:00:c0:05:eb:90:48:80:80:f1:99:
64:8b:78:f1:8c:7b:7f:27:a2:89:2b:e4:fe:b3:47:
07:a5:25:7f:c0:a2:0e:08:37:85:03:28:a7:c6:4c:
4b:ca:f8:20:03:92:27:21:54:0e:97:20:be:5d:0c:
a3:86:86:38:e6:f0:bb:cd:7f:27:e8:2e:d2:f7:18:
ae:35:ee:01:ad:da:e9:bd:fa:f4:3d:73:23:35:ae:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:51:30:10:41:01:0C:08:D8:91:3F:10:7E:8D:7D:8E:BD:6F:31
X509v3 Authority Key Identifier:
keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:28:d9:e7:08:37:92:d1:ba:0e:06:93:0e:79:3b:c3:02:95:
44:34:81:fd:f7:4c:01:25:ac:d0:92:fd:ac:27:17:2f:24:e7:
d1:23:a9:e7:b3:93:27:5b:34:bf:24:3d:78:b7:29:b8:96:26:
3a:d1:25:97:c9:24:f6:68:6f:0f:ff:aa:5b:74:b8:61:86:bb:
82:04:a7:fa:67:de:58:13:b6:fa:1c:23:dd:48:84:46:71:4c:
02:0b:5f:02:1b:fa:3f:6b:81:61:eb:21:2a:af:46:71:ef:bb:
b6:a3:49:ca:e3:57:7d:f9:3e:26:76:19:b8:4c:53:14:b3:f2:
ba:4e:0b:f6:43:78:3b:26:cd:89:d6:89:fc:cc:d8:b4:19:fe:
14:43:9a:92:10:8d:ce:fd:0c:d8:fe:69:88:3a:69:24:30:05:
3d:a4:25:7f:8c:6b:2b:b3:3e:88:03:fa:5b:53:ba:31:38:67:
09:f7:b2:5c:13:0b:f3:83:e4:db:e0:a6:93:63:45:b6:2b:32:
98:c6:cd:f0:03:64:2c:64:ca:6a:bb:15:c1:55:30:c0:e1:af:
98:da:f6:21:4f:3d:5f:21:79:f7:6c:2d:44:83:94:d5:85:c6:
21:09:da:f2:6b:41:2f:f5:f4:90:d1:bd:4d:6f:30:0f:82:c5:
89:46:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:20 2025 by rpki-client