Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/uS8-WIshlDrLuAW_3wsZRL98rDs.mft
File: uS8-WIshlDrLuAW_3wsZRL98rDs.mft (raw, json)
Hash identifier: ULuEqnRxJzhf1S3VpPiv8l4jH16qDkRYTEKPpw7Fnm4=
Subject key identifier: 0A:D7:AC:4D:90:2D:30:2C:FC:1C:72:45:B3:0B:E2:43:B7:FF:B1:A2
Authority key identifier: B9:2F:3E:58:8B:21:94:3A:CB:B8:05:BF:DF:0B:19:44:BF:7C:AC:3B
Certificate issuer: /CN=A919B0F9/serialNumber=B92F3E588B21943ACBB805BFDF0B1944BF7CAC3B
Certificate serial: 11FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uS8-WIshlDrLuAW_3wsZRL98rDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/uS8-WIshlDrLuAW_3wsZRL98rDs.mft
Manifest number: 11F2
Signing time: Mon 16 Dec 2024 17:06:13 +0000
Manifest this update: Mon 16 Dec 2024 17:06:13 +0000
Manifest next update: Mon 23 Dec 2024 17:06:13 +0000
Files and hashes: 1: uS8-WIshlDrLuAW_3wsZRL98rDs.crl (hash: 2/tb9jG8r0T/L6JzatQ904T9AY6P4eMMt3FHonsirhs=)
2: 455880A6ED6D11ED8A822917C4F9AE02.roa (hash: aC4IYAyMGo6nLf4CT/cxfXqFFROm0vKPE8dyF8L1Czw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4604 (0x11fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B0F9
Validity
Not Before: Dec 16 17:06:13 2024 GMT
Not After : Dec 23 17:06:13 2024 GMT
Subject: CN=67605e05-1ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b8:71:5e:f1:01:c6:51:f1:de:17:1c:ce:76:
06:1a:aa:0f:e5:ab:28:5e:b9:d9:da:ac:c5:01:1f:
ef:cd:c3:b6:79:b6:5d:cb:8b:7e:58:10:d2:fe:5d:
07:34:4c:64:8d:28:2e:3b:ee:d7:71:a3:48:02:27:
ac:c4:e4:93:72:9a:62:6e:51:aa:f8:3f:77:91:bb:
22:bb:47:cf:e5:16:99:45:d9:10:f4:03:f9:63:e5:
11:b8:c3:50:a1:34:96:19:6c:63:68:ff:c2:f6:eb:
0d:6d:ae:9c:79:b7:e4:4c:e6:12:12:71:c4:22:74:
30:66:b1:f6:c4:bf:25:59:82:6c:ff:0e:0e:75:c8:
c3:d1:ae:4b:17:dc:81:04:d1:95:d0:67:d5:48:6e:
87:b3:a0:89:aa:04:4b:dd:b4:f5:fe:9f:7f:a5:b9:
b1:23:9d:22:fc:91:b3:c7:3e:ad:7e:39:f2:b7:24:
a8:a8:3a:18:8d:5d:fd:ea:5a:b7:c4:e4:d8:04:9c:
93:5b:60:38:1b:8e:0a:78:db:e8:fc:cd:4c:f7:78:
a6:0b:36:04:f2:3f:3b:37:2d:be:88:52:ec:f8:e4:
92:25:3a:bb:5e:22:2a:d5:a7:dc:27:63:bf:de:25:
80:f2:1c:16:21:1c:bc:a2:0a:5c:36:e4:e7:c1:33:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D7:AC:4D:90:2D:30:2C:FC:1C:72:45:B3:0B:E2:43:B7:FF:B1:A2
X509v3 Authority Key Identifier:
keyid:B9:2F:3E:58:8B:21:94:3A:CB:B8:05:BF:DF:0B:19:44:BF:7C:AC:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/uS8-WIshlDrLuAW_3wsZRL98rDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uS8-WIshlDrLuAW_3wsZRL98rDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/uS8-WIshlDrLuAW_3wsZRL98rDs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:ec:31:21:79:3e:b0:16:df:0f:93:c7:29:e7:95:fb:cf:ca:
eb:bd:71:5e:2e:c5:8d:6b:d5:5d:fa:b1:d7:a2:7d:c4:36:a8:
01:23:d8:4e:93:62:8c:c8:e2:7a:9c:c2:3a:4b:fe:67:15:b3:
39:3c:1b:de:a2:c2:cc:0d:b8:26:d5:af:dc:35:a8:d4:77:ca:
3c:9d:03:ef:21:b3:c1:b2:d9:ed:d4:bc:f7:17:7e:4c:1a:98:
66:a0:f8:85:6c:15:bb:3f:27:67:a1:30:84:1d:0c:5f:6f:67:
28:3c:ce:fe:b7:2c:78:07:e4:14:e0:9d:a6:1b:cd:c4:d4:37:
fa:53:ab:43:14:03:e9:8e:9d:bb:3f:4f:d2:27:fc:ae:f8:d8:
bd:b0:d5:f8:2c:16:a6:b1:15:9d:aa:75:1e:1b:cd:02:52:c4:
e0:49:e5:b6:e3:02:96:ac:bf:51:4f:48:aa:b7:e4:90:18:c1:
5b:1c:e5:a4:79:52:7d:35:00:e8:e8:82:9b:ca:f2:b3:21:5d:
9e:5d:e6:45:74:cc:5c:16:11:28:cb:11:15:ee:7d:54:29:b6:
cd:3f:b5:7e:23:53:b4:67:e4:45:ed:f5:23:06:1c:a0:a5:f8:
fe:da:40:d9:aa:44:13:a3:e6:38:03:91:f7:e5:a4:af:2b:bf:
15:35:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:33:07 2025 by rpki-client