Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json)
Hash identifier: A58ddfwuFmU1sOfjYcyOAwJHsdN2VJ2v3X3usdSb40A=
Subject key identifier: F8:FE:C8:28:5F:99:E5:4B:6F:79:65:D6:AE:FE:9D:F9:88:8B:BC:72
Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Certificate serial: 0150
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 03:41:14 +0000
Manifest this update: Fri 31 Jan 2025 03:41:13 +0000
Manifest next update: Fri 07 Feb 2025 03:41:13 +0000
Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: Yu4Sn2hEWqdL0Mxy/mVOfnmR/UHITtAMW9bmi0OSX0c=)
2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: g1Yxh4X4gr9QP8BwAN2yJktOsO1m01aHRbfwGJbCyik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Validity
Not Before: Jan 31 03:41:13 2025 GMT
Not After : Feb 7 03:41:13 2025 GMT
Subject: CN=679c465a-714f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:8a:e5:e5:56:7b:c5:03:56:5e:66:08:0e:
e4:8c:cc:d4:33:86:79:e2:62:84:82:a6:46:db:a3:
05:98:ae:83:2e:41:7d:97:94:3c:57:a4:ff:d6:3d:
c4:43:78:8e:e6:66:4c:81:95:7c:90:e3:a5:a8:61:
7a:50:8e:6a:91:41:a3:9f:86:d1:55:5b:75:04:d1:
84:02:47:84:17:cd:dd:aa:93:00:a4:0c:dc:2a:e6:
44:66:c5:40:7c:a8:56:d4:2a:a7:22:6b:d2:70:c9:
d4:a6:c8:f2:28:c6:3c:9a:45:65:93:84:2e:85:28:
a6:ef:43:ff:58:d3:1e:81:a0:de:76:85:0f:30:f2:
e2:15:17:17:c3:96:77:01:41:88:d5:3d:cd:4e:dd:
84:5c:3c:d2:3f:3f:69:ff:c3:a0:d6:10:4c:bf:2e:
af:aa:7a:20:67:29:26:47:fe:86:7a:fd:dc:a0:cd:
c4:b3:d0:60:b9:88:b7:eb:e3:c6:8b:2e:93:76:da:
89:94:27:f7:82:57:33:78:9b:5f:a8:76:49:76:2b:
f9:a0:1a:d3:f3:55:09:7f:73:91:a1:f1:c6:19:a5:
fd:ac:8a:df:f4:e2:0b:c7:cb:3a:1f:43:5f:a4:92:
56:41:94:91:9e:d7:f3:ef:47:1a:8d:4d:1c:60:85:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FE:C8:28:5F:99:E5:4B:6F:79:65:D6:AE:FE:9D:F9:88:8B:BC:72
X509v3 Authority Key Identifier:
keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:3a:23:1a:3b:4f:a8:bd:f4:59:a2:2e:d1:ac:c8:4a:c5:a3:
82:77:88:94:74:e4:bd:21:e9:35:62:68:16:9c:f9:92:bc:70:
06:fc:72:7a:ac:fc:ad:d9:e4:cd:ec:c3:87:ba:f7:b9:4a:7d:
2f:3b:77:85:f2:ac:ff:e5:e6:18:1e:7c:b1:57:1f:5e:91:61:
7d:a4:38:72:cb:41:b7:c8:c5:8c:6c:fa:5e:02:c4:db:9f:e4:
b3:35:b9:b6:d5:df:04:61:8d:03:07:2f:86:ef:1f:48:9e:59:
e1:aa:b0:57:8c:94:75:eb:7c:4d:bd:86:cd:5b:2e:60:84:9a:
32:a2:0b:d7:76:30:3c:16:db:1d:5b:ea:b6:b5:39:64:77:21:
8b:bd:a9:01:b8:02:32:52:8a:fd:13:15:43:4b:fa:16:11:92:
1e:2c:9a:93:e3:94:b7:8a:49:6c:98:c9:de:e2:38:88:6b:62:
9a:eb:d5:a2:21:e2:41:52:b4:48:77:e4:95:1c:15:1e:aa:7f:
d3:85:0f:53:0e:75:bf:6d:a5:4f:11:9c:43:5f:19:15:9a:dc:
46:7c:37:cc:c8:49:70:0b:99:e3:c7:d2:fd:67:68:bc:ce:08:
b2:27:f7:a0:8e:60:9e:f8:c3:e3:54:bc:44:f0:92:48:37:d6:
72:b0:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:00 2025 by rpki-client