Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json)
Hash identifier: YJLthGz6W01rSdvSj8BxZkYuRosZqh/CuxUjsj9Sw64=
Subject key identifier: 29:77:9E:6B:E1:F8:81:65:8C:51:55:8E:96:FA:62:95:FD:86:09:7C
Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
Certificate serial: 042A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
Manifest number: 0426
Signing time: Fri 31 Jan 2025 00:23:49 +0000
Manifest this update: Fri 31 Jan 2025 00:23:48 +0000
Manifest next update: Fri 07 Feb 2025 00:23:48 +0000
Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: +w/FNRCVtfiPnLCyY8/G1A/pU5sa2RoFwsTsQCTRku4=)
2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: F010fbR+bi9xTUBl3AUBVvzkCJVPeJDxWa/Ivtr1ZK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
Validity
Not Before: Jan 31 00:23:48 2025 GMT
Not After : Feb 7 00:23:48 2025 GMT
Subject: CN=679c1815-1124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:41:4c:ef:c9:f1:2c:df:f0:73:56:a1:46:
82:ac:30:f8:e7:f7:64:7e:1b:3b:28:cd:8b:c7:22:
31:05:f0:de:ef:53:b3:4c:63:4e:e4:d8:23:22:0d:
47:35:f3:73:9b:19:33:fa:64:17:76:cb:b6:2c:5a:
02:cb:f4:92:bf:db:07:a1:f5:aa:96:7b:98:91:b1:
f7:7f:65:68:96:c6:a7:b8:34:e4:dc:6e:d8:f9:de:
5e:5b:4b:4f:24:28:9b:4e:8c:5a:73:ab:fa:ee:25:
9b:e1:67:07:59:c8:df:eb:bf:8c:9f:40:34:ec:47:
f8:f1:6c:50:89:78:0b:ca:50:5d:ba:10:da:14:08:
18:3b:2e:9a:b3:2f:57:0c:52:4a:b8:53:b6:c9:6f:
cc:19:b8:d7:6e:8d:79:41:04:14:c6:49:e1:3e:97:
67:ce:07:3c:3d:95:ef:ad:59:31:81:f1:1a:68:e3:
37:2d:73:87:9f:85:0e:24:2f:70:ae:c6:11:4f:fe:
c6:41:d5:4e:28:61:35:f8:59:4d:d7:31:5b:29:9d:
0e:65:ef:9d:42:96:e6:f2:a6:fa:32:ed:76:94:66:
c2:4c:d6:dc:d1:e5:5d:b1:47:ec:dc:d5:a4:e4:70:
d4:d8:30:b9:ac:6c:b4:81:52:4a:bb:ff:2f:a9:95:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:77:9E:6B:E1:F8:81:65:8C:51:55:8E:96:FA:62:95:FD:86:09:7C
X509v3 Authority Key Identifier:
keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a6:0a:55:eb:ba:19:ab:2e:c3:ea:61:77:19:df:28:79:8d:
13:7f:b9:15:18:62:2f:60:d7:45:c7:3d:38:31:d4:4c:a1:4d:
9b:d1:15:98:38:bd:3a:a7:93:cb:37:ba:3f:e5:5a:97:f5:fa:
f3:c4:c9:a9:7a:43:6f:34:cf:6e:58:e4:ca:d5:5e:7a:52:59:
8f:14:b1:d8:01:93:d7:ce:76:89:19:8e:20:b4:80:c6:0c:8e:
1f:18:72:62:8b:e1:d1:3b:b3:cb:3b:60:1e:a4:32:8f:cb:be:
9f:dd:c2:bb:a6:96:05:7e:04:af:f7:b3:e7:cb:34:5d:cb:cc:
73:5d:bd:e8:57:26:06:98:86:7a:ab:42:d6:74:70:9a:09:b4:
c9:db:65:83:74:32:e2:52:2b:70:ec:0e:82:3f:bd:f7:e5:e8:
00:be:7f:1a:74:d3:cd:13:fb:6b:e0:42:66:ea:62:85:99:26:
d2:ff:e0:25:29:0e:e4:ea:1e:e8:32:c1:41:a9:13:bc:ad:f9:
aa:08:c6:96:b0:aa:0a:49:d6:38:9b:fb:29:83:c5:a0:33:f7:
0a:48:84:ff:ff:ac:86:98:bd:ba:39:09:e2:c1:a7:fb:4f:ad:
6c:11:50:bc:71:78:98:22:a8:f1:b0:d2:da:7b:fd:85:a0:c5:
87:d0:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:34 2025 by rpki-client