Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json)
Hash identifier: DkF+pyDqhGEMcLwuY2nymQZmrPTFTGJEn9irZ/PG1WQ=
Subject key identifier: 96:42:2A:F1:66:98:62:A8:10:33:5A:B5:01:67:85:26:49:1F:60:CC
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
Manifest number: C5
Signing time: Fri 31 Jan 2025 04:57:19 +0000
Manifest this update: Fri 31 Jan 2025 04:57:19 +0000
Manifest next update: Fri 07 Feb 2025 04:57:19 +0000
Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: 2pALK2RClEgnbIclXUHKk8aW8tkKL6OxkJK0zE8SbRk=)
2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: +xX3fyh3F9druR4nFxovnFPsJhxpAOsF0rFF0c+Rr5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Validity
Not Before: Jan 31 04:57:19 2025 GMT
Not After : Feb 7 04:57:19 2025 GMT
Subject: CN=679c582f-ac46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:1a:18:50:d5:53:c6:a4:e7:7b:70:cb:05:
86:ef:2d:de:a5:d5:37:05:b4:27:86:f2:1a:2a:2e:
0c:b3:2e:56:28:8f:19:70:9b:77:a0:e6:cf:bf:5d:
54:ef:ff:e9:04:29:1c:e3:14:e4:6d:3c:c3:38:66:
83:6c:88:d0:e3:0a:8d:61:d3:3b:6d:f8:b8:a8:b9:
5a:54:d0:63:9f:1d:43:ad:db:b4:bc:ac:77:c5:1d:
f3:5c:3f:1d:a6:81:89:c9:9c:c0:6d:a8:d8:bb:72:
fe:81:06:98:29:c9:e2:7d:30:36:c4:01:1b:5b:be:
24:01:3f:ae:2d:11:c4:7d:e7:54:96:b7:94:fe:c4:
e0:da:75:33:a1:4d:7d:8e:dd:1b:7e:ac:24:44:af:
4c:26:65:be:df:ac:77:bc:f3:ef:38:c4:ab:8b:24:
ba:d6:05:bf:43:6b:40:5f:05:2d:4d:06:e4:3c:85:
2c:44:7e:05:81:c7:4f:e7:17:32:68:21:99:12:18:
36:5c:20:fa:9a:1c:ea:07:04:08:b1:5a:07:be:d2:
37:a9:b8:fc:66:f9:3f:87:60:7c:c7:5d:84:34:e8:
ea:18:23:da:32:6e:e8:96:a6:e7:0e:a2:59:42:9b:
3f:0f:06:8d:18:63:fe:e2:6a:f1:41:32:e9:f8:1e:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:2A:F1:66:98:62:A8:10:33:5A:B5:01:67:85:26:49:1F:60:CC
X509v3 Authority Key Identifier:
keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:3f:3b:69:e4:eb:15:95:18:de:d4:11:37:44:12:5f:0f:2a:
aa:77:b8:e8:87:54:21:5b:f2:6a:ed:31:c2:67:9c:5c:1c:45:
e8:d8:4b:f3:53:38:4d:62:0c:5d:4e:7d:41:7d:f4:30:b2:89:
3b:6e:a5:11:22:eb:8a:86:d9:2d:15:6b:3f:40:0d:e6:cd:0e:
9c:85:d9:f1:aa:f0:65:66:0f:a5:1a:80:da:54:1b:b6:8f:c6:
91:a9:10:3a:6d:16:54:a4:41:b8:a1:cc:0a:dd:23:e7:9f:d1:
17:13:72:a3:85:50:5b:a6:e9:d6:5c:3a:dd:0a:76:c7:57:92:
53:2f:25:1c:93:eb:d1:76:5f:89:e1:4c:5c:ee:8c:a4:ad:53:
25:f4:02:6a:69:ef:d0:ce:3a:f8:aa:12:fc:2e:3b:d5:c7:5e:
37:d5:0f:62:20:32:e7:5c:04:3c:9b:8c:98:93:39:d7:f0:4e:
18:25:b0:22:b9:6d:01:02:86:86:cd:6a:c9:90:f5:70:70:77:
71:c6:a2:db:f8:24:64:5e:2e:e9:e5:38:23:ff:b1:04:56:48:
49:e4:eb:e3:54:12:ff:75:81:02:f9:0b:8c:ca:aa:9f:ac:9e:
15:21:f6:b0:03:b4:9c:06:0f:eb:6a:da:51:67:68:ba:de:28:
87:52:d4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:03 2025 by rpki-client