Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File: uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier: vMGUIP9eK9lIV2TqRrNuWR+OxFYY8xUbp25PHVDRArE=
Subject key identifier: FA:E9:40:CA:CB:01:E4:0D:95:4A:88:B3:4B:8F:EA:78:7B:3F:2B:CB
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer: /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number: 56
Signing time: Sat 29 Mar 2025 06:32:51 +0000
Manifest this update: Sat 29 Mar 2025 06:32:50 +0000
Manifest next update: Sat 05 Apr 2025 06:32:50 +0000
Files and hashes: 1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: c5v5PTpppNWo9oDPvHBb/9198G85nsl6srTDUKRYnG8=)
2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: NvjP/LYwW9l6MqSSpH5THMx2WmCXtMYC8PmhjmLmzIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D88F
Validity
Not Before: Mar 29 06:32:50 2025 GMT
Not After : Apr 5 06:32:50 2025 GMT
Subject: CN=67e79413-93ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:59:a8:86:92:fe:bd:8a:f6:e9:43:5d:ce:
71:10:08:12:8c:8e:3e:a1:60:6e:b6:c2:1c:9e:9a:
30:ea:ff:cc:0e:0e:52:2e:36:7c:72:5f:45:63:3c:
59:0f:27:ac:10:02:9e:a0:d6:a3:c6:f3:c5:5b:60:
91:d9:31:46:27:6e:31:25:7b:2a:18:35:ed:50:09:
38:d9:36:4d:53:10:b7:56:af:8c:94:cf:b1:94:5d:
37:4e:b7:c6:80:77:6d:a0:fd:63:a4:e0:38:b0:1b:
2e:d6:9b:fe:cf:44:e6:6d:1f:3e:d1:63:46:e3:d2:
e1:37:9d:a5:2f:4b:56:d5:26:6a:76:5c:bb:da:59:
0c:7c:65:c0:2f:6b:3b:74:c2:c4:1b:53:fa:3d:3e:
c5:aa:76:ae:b8:b2:71:4f:5f:6a:9a:b2:a7:bb:e7:
11:49:78:c4:f8:ac:9b:e4:07:30:55:43:74:59:5b:
0d:56:c7:0b:c0:3d:b0:d4:e9:5d:4d:55:2c:6b:78:
9f:76:20:f1:9a:4e:04:e2:42:c9:d8:4a:a9:4b:aa:
af:f6:ff:83:57:60:11:9c:01:b2:4f:d0:5d:f7:80:
bc:a7:29:b5:9b:f3:2f:31:b8:01:96:43:f3:8f:ea:
f0:fb:be:b2:51:cc:af:7c:13:3b:e4:6f:a4:88:8e:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:40:CA:CB:01:E4:0D:95:4A:88:B3:4B:8F:EA:78:7B:3F:2B:CB
X509v3 Authority Key Identifier:
keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:0f:33:3b:e5:62:7c:6b:df:b9:9c:30:16:7f:d1:95:10:d4:
a7:0c:c8:c0:08:4b:71:55:b0:6e:7f:15:cb:5d:82:70:bf:a4:
4f:b1:ea:72:c2:5d:ec:1c:6c:d9:1e:26:a9:45:2d:28:94:27:
3e:78:2c:47:1b:58:99:c4:21:c7:2f:7a:2d:69:72:06:fe:41:
7a:54:21:d9:a3:e1:b7:9f:28:f3:21:7b:c2:74:80:fb:b2:77:
e4:93:ee:3d:b1:b3:1c:f1:99:72:a8:45:5e:2d:7b:d5:0d:9f:
58:e9:81:fd:92:06:cd:15:64:1e:24:29:de:71:88:34:71:8c:
ec:56:b3:47:74:0a:43:d0:0b:16:a8:4c:37:c5:47:59:fe:b2:
4d:d0:f3:3e:63:73:ac:59:36:48:db:61:bc:51:ed:40:de:e3:
4f:0e:0e:80:83:65:7a:bf:74:09:6f:15:de:8d:6c:5c:37:3a:
01:4d:e3:9b:ac:47:43:bb:c3:41:9f:c6:38:c8:bd:4a:c4:5a:
db:3e:79:c8:20:5c:e0:7b:86:b7:4d:41:5e:a0:f8:71:0c:3e:
11:7e:32:1f:5c:0e:15:8e:db:bf:c2:72:14:c3:d2:06:f5:c4:
c1:2b:8b:f1:4b:7a:20:08:47:96:3a:22:bd:4d:37:60:2d:36:
1d:1b:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:29 2025 by rpki-client