Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json)
Hash identifier: SjycKRCwqoll/xwNJ17KA/iiwUOw3ZQYSTVrQLGXaNk=
Subject key identifier: 4A:00:2C:CC:C1:81:BF:68:8C:A4:C4:A7:0A:49:6E:BC:64:97:31:9D
Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
Manifest number: C2
Signing time: Fri 31 Jan 2025 04:59:24 +0000
Manifest this update: Fri 31 Jan 2025 04:59:24 +0000
Manifest next update: Fri 07 Feb 2025 04:59:24 +0000
Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: R96eH3+xjzDszCBEbgNBfLaySFQASzM2nsiGkEEDlGU=)
2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: u+JMYeb8gD5HU0OlGXo0Chq6M3KLkPgFbtazxXNmZmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Validity
Not Before: Jan 31 04:59:24 2025 GMT
Not After : Feb 7 04:59:24 2025 GMT
Subject: CN=679c58ac-1a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:48:88:f2:88:ac:0f:3d:00:ee:59:1a:8b:
6b:4b:75:c8:4b:8b:b3:b7:58:01:e0:54:3b:c8:25:
65:94:79:6e:5c:f8:7c:ef:b6:6c:ce:aa:84:4a:7d:
83:ed:c9:bb:3a:99:78:b0:22:a4:46:06:f3:4f:87:
fd:7f:13:e6:52:22:b5:52:56:3f:11:83:a4:8e:18:
72:68:09:c7:af:4f:a3:37:22:6e:02:83:3a:aa:8c:
8e:57:33:2a:56:61:c5:9e:4c:83:b5:5d:19:9c:b6:
44:e6:3b:5d:ad:22:bc:0d:d3:c9:ce:f6:ce:aa:fa:
43:47:83:ad:37:16:38:aa:25:6c:e2:cb:32:ff:2d:
1a:40:11:5e:01:19:2a:2c:a4:59:1f:17:a5:25:a9:
b8:f7:1c:12:ac:f2:f6:12:87:7c:a1:85:bb:12:ab:
ac:45:02:da:1c:d7:7d:75:d1:18:e5:80:23:70:9b:
6c:ee:0d:93:57:08:b8:fd:42:fe:40:b4:c6:5f:59:
cb:58:cb:57:6a:f9:c2:e6:56:17:e4:11:ca:c7:01:
e7:0b:4c:6b:ed:ac:92:70:31:4b:71:64:fd:7d:1a:
bd:41:ac:e7:9e:29:90:b4:0e:9c:a6:f7:c3:5e:3f:
91:ae:14:6c:5a:5d:b1:57:e2:66:f0:8a:2d:df:88:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:00:2C:CC:C1:81:BF:68:8C:A4:C4:A7:0A:49:6E:BC:64:97:31:9D
X509v3 Authority Key Identifier:
keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:75:9d:75:79:3b:55:e7:0b:fa:a6:f1:f3:b9:d1:97:83:8d:
ba:b5:18:46:da:af:e2:7a:d2:e3:e5:a1:7f:2a:a0:8d:25:ce:
77:96:cd:8c:6f:02:6b:38:eb:85:e6:26:c0:73:0a:7e:c8:67:
3e:90:c7:cf:0a:e1:6a:8a:2c:cc:ac:84:f9:0b:7e:6a:a2:3d:
68:c1:4c:46:c9:91:72:fd:24:86:97:11:e2:24:75:0c:2a:1f:
1b:70:c8:41:6a:a6:9f:3b:d3:e5:06:70:67:38:e1:8c:89:ed:
cc:39:45:30:3b:b3:9a:74:3d:66:b5:d9:54:5e:16:fc:8e:17:
dd:84:c3:87:33:03:b1:32:67:15:59:b1:99:dd:a6:7b:99:0f:
cc:e4:ee:45:00:7b:ff:70:e4:bb:65:0f:33:ce:76:25:60:3e:
fd:d9:54:d5:c3:9c:6f:4b:75:df:a6:6a:c0:f2:84:99:41:8b:
d5:45:ec:fc:c0:48:ae:c4:a7:f7:1b:85:d8:25:fb:07:ea:8a:
81:c3:08:17:ef:da:9f:7d:99:d3:f5:c6:39:d2:c0:08:50:16:
e1:e9:ed:57:4c:6e:f1:2b:26:28:ab:d6:f0:9b:51:1e:ad:d8:
b8:d0:e1:bc:10:b8:6f:b3:6d:4f:5b:05:01:67:94:d9:cb:96:
13:6b:d2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:40 2025 by rpki-client