Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json)
Hash identifier: oBXXcaecgwc8KSOdnjNgKEe5eV3gOOoJ0dXOFA3I+yg=
Subject key identifier: C9:AA:27:3B:D5:2E:C7:9B:EE:53:25:10:57:76:80:60:BE:D4:7A:31
Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53
Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
Certificate serial: 0419
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
Manifest number: 0414
Signing time: Fri 31 Jan 2025 00:28:29 +0000
Manifest this update: Fri 31 Jan 2025 00:28:28 +0000
Manifest next update: Fri 07 Feb 2025 00:28:28 +0000
Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: 14EV2lJANBFfOM1s6elK69CMJmft4gHC8lSf61AUVGI=)
2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: XOYLtUkvxxhHrcsvmr5WB+I6ZV608DvzcypTgdpZOb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
Validity
Not Before: Jan 31 00:28:28 2025 GMT
Not After : Feb 7 00:28:28 2025 GMT
Subject: CN=679c192c-8640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:ff:7c:6d:a2:b0:5b:e2:31:f5:c0:11:11:
45:d4:2d:97:2d:f5:e7:6c:59:ec:c0:2c:84:78:9c:
8f:43:7e:09:16:16:35:a9:18:85:18:cb:7e:25:84:
87:76:dc:0b:77:df:5b:76:7e:f6:01:2a:f1:f5:a7:
77:f0:f7:a2:60:92:71:e4:e7:6d:0f:e1:ff:4d:31:
fa:80:2b:e0:fe:ec:de:d5:92:03:53:f2:94:d7:f3:
52:6d:15:46:f3:49:05:fa:be:d6:44:e2:cd:e9:07:
d4:5b:a7:0c:00:d3:ae:f8:7a:44:41:61:e1:a2:93:
5c:d3:88:57:ce:04:4a:05:fc:3b:ef:57:bc:83:9f:
8b:af:a7:3a:c0:11:50:24:97:21:d8:c9:a8:bd:a9:
df:2d:2f:3e:18:dd:6c:c2:7c:29:bd:e0:55:c8:68:
07:f6:39:05:73:81:18:e6:00:69:d3:96:2a:a1:cf:
42:09:15:af:5c:29:bf:85:8f:d5:d0:22:c1:f9:b0:
97:c5:0f:ed:5f:bd:44:a0:08:61:b9:e6:98:00:67:
d0:19:ac:50:e2:be:c3:f2:5e:7a:eb:77:95:d3:60:
c1:1b:4d:7d:26:d4:a0:a3:48:ae:05:f6:52:6d:3a:
aa:55:ee:93:de:c8:80:d1:62:e2:8e:e6:1f:9d:73:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AA:27:3B:D5:2E:C7:9B:EE:53:25:10:57:76:80:60:BE:D4:7A:31
X509v3 Authority Key Identifier:
keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a6:08:23:cd:25:08:a3:11:9b:47:8a:8b:c4:28:44:63:ea:
e4:48:c2:98:04:d1:8d:db:92:0e:eb:58:19:f3:75:87:00:6d:
cd:c1:f6:a1:93:1c:1d:a7:97:f2:08:70:54:04:e5:41:78:e8:
9d:68:c5:b9:c5:ef:27:a5:80:43:1b:ff:10:da:19:a0:87:f5:
b5:12:b3:5f:07:0f:a1:ad:9f:bc:c9:b1:f9:6f:3e:ac:d0:01:
28:51:3e:11:2c:d2:00:ba:04:a0:2c:bd:2f:46:73:6f:47:f1:
8d:08:f9:6a:48:40:5b:58:51:5e:09:a9:c1:56:19:a9:d6:42:
96:20:0d:72:44:36:54:f5:fe:d3:90:07:49:41:c8:43:52:c1:
f9:4b:51:ab:7b:19:89:bb:db:ca:85:52:0e:c6:93:23:3c:9d:
3b:5f:65:2d:50:7c:16:41:d0:9c:02:a3:8b:23:c3:83:49:c5:
32:68:25:ec:ae:94:ec:0d:82:c4:39:78:74:50:51:9f:7a:94:
81:00:ef:cf:e5:0b:60:06:c2:6c:15:09:38:15:4c:aa:0b:3a:
f1:3d:fb:13:2f:d2:4f:ff:83:19:a1:08:bb:0b:8f:d8:76:11:
6e:7c:de:64:1d:60:6c:9e:ac:86:4f:e2:4f:01:f4:75:fb:49:
b6:20:fe:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:47:46 2025 by rpki-client