Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
File: KUHHFh7UouCbuRyrxEPIzLwDLtg.mft (raw, json)
Hash identifier: UMRLce2peTEUeTifQ0S0RnzmkYg3e5MhwQ9WCnZRpkM=
Subject key identifier: C2:F3:4D:84:05:B6:8E:1A:A8:05:2C:E4:F9:3C:3E:A1:08:35:2F:70
Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Certificate serial: 344E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
Manifest number: 344A
Signing time: Fri 31 Jan 2025 14:53:52 +0000
Manifest this update: Fri 31 Jan 2025 14:53:52 +0000
Manifest next update: Fri 07 Feb 2025 14:53:52 +0000
Files and hashes: 1: KUHHFh7UouCbuRyrxEPIzLwDLtg.crl (hash: ewS94yIviJrgsS7O4rf1nuf+fqSh7b8E9jDfrGqEfm4=)
2: 59ADACFCD16A11EE99648C6FC4F9AE02.roa (hash: gBhtfDqbYf+6FfnwqEokkFBRyUrjeS3Q2Oprg2azRMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13390 (0x344e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Validity
Not Before: Jan 31 14:53:52 2025 GMT
Not After : Feb 7 14:53:52 2025 GMT
Subject: CN=679ce400-c2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:dc:0e:2a:08:23:08:47:02:3d:eb:4d:25:
b3:0e:ab:0d:1a:eb:38:1f:45:99:42:8f:b2:42:a8:
04:8c:ad:53:9e:99:a3:7d:91:f7:bc:cd:22:7d:a7:
51:2a:d3:5e:62:f1:4d:e4:31:82:8e:d5:3a:c5:91:
18:81:0f:d1:a8:a2:8b:f9:73:a1:0d:fb:f7:c3:5e:
6b:2a:5b:ec:80:27:f5:02:a1:8e:89:bb:8c:71:1e:
a3:ff:4f:cf:3e:48:6d:6f:2e:b7:c3:43:d7:ed:22:
2f:7e:bd:36:8f:1e:96:74:52:86:cc:80:4e:a0:36:
1f:f4:f0:9c:2d:dc:d7:3d:49:a1:85:e9:c7:e8:1e:
55:97:f6:84:2d:bd:e1:85:90:e8:f2:63:04:81:e8:
33:b0:22:95:04:f9:77:35:1a:c2:56:9a:fb:b0:07:
0c:7f:e6:b5:5e:42:b5:42:22:ec:6b:7f:05:a5:1f:
96:e3:a4:d4:63:dd:45:de:29:66:5a:b3:e3:20:16:
15:c6:84:89:5c:e5:08:91:7d:b7:c4:7d:86:3a:7b:
d0:57:26:17:f6:87:da:23:f8:43:b2:c5:a5:23:17:
5a:2b:2f:d1:4b:1b:2d:ec:c7:81:de:18:2d:0b:92:
1c:70:cf:78:e1:f0:10:10:49:7c:56:73:ed:1d:1d:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F3:4D:84:05:B6:8E:1A:A8:05:2C:E4:F9:3C:3E:A1:08:35:2F:70
X509v3 Authority Key Identifier:
keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:65:3d:85:17:83:a1:c5:7d:65:a9:3f:f0:fd:a4:0e:f7:04:
87:04:43:d3:08:23:8e:73:d0:5a:52:2d:ed:9b:83:4d:f6:01:
2e:0d:66:42:0d:4d:5a:6c:1c:41:ea:1c:7f:01:15:08:d4:ec:
c1:c7:d4:25:66:e2:b8:cf:1d:62:d7:86:30:1d:e9:0a:c0:d4:
f5:88:d0:0c:50:fc:9e:0b:c1:a2:86:c2:03:72:96:5e:cb:40:
66:4f:18:ce:ad:9c:79:82:33:99:ce:1d:94:e5:3a:75:a2:38:
c8:9d:de:f4:af:f9:df:e7:dd:9a:9f:4c:ab:ea:51:e6:55:4d:
22:60:66:fd:b7:71:91:81:29:64:b9:3d:05:bb:e1:15:54:15:
ad:a1:5f:c3:f8:1e:89:22:bf:b8:39:8d:ce:f6:b7:09:16:f5:
52:a2:cd:f1:c9:f5:ee:81:39:b7:d2:f7:47:bf:59:09:98:90:
b4:22:0d:b0:b8:56:4e:8b:9f:66:8b:ee:58:0e:e6:9b:b3:27:
e6:53:56:7b:a5:31:47:2d:45:00:05:35:c3:17:74:f0:e8:1e:
7c:e3:0a:0c:4e:5f:c6:0f:a6:6f:74:6a:71:33:29:fa:32:f8:
62:07:d1:d4:1e:45:bb:37:67:ba:ec:ec:5d:72:aa:83:0d:a0:
c0:5b:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:44 2025 by rpki-client