Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
File: UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json)
Hash identifier: s0hSW5eBCDGoP1DbLWj8JtvEi9bRIR6U4rTXzDX1cjw=
Subject key identifier: 16:5E:E2:23:DE:FE:13:04:51:07:D3:FC:BC:F6:64:CF:0B:A0:2B:9C
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 08F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
Manifest number: 08DB
Signing time: Thu 30 Jan 2025 20:34:14 +0000
Manifest this update: Thu 30 Jan 2025 20:34:13 +0000
Manifest next update: Thu 06 Feb 2025 20:34:13 +0000
Files and hashes: 1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: dQv9e2LM/gTSSyOreHzcu/MFLL8PNPRG2D3fxyyXPNQ=)
2: 52FF9944AB9711EAB2C00F5EC4F9AE02.roa (hash: 15x+UMCzso9Ct8gLB5gFTAcMB0xhn90nVaRk468yQ/U=)
3: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (hash: fMsxwSBq4vOI9x94F7ZUIJaq0Vm1i1Kp/JyIJ4qnrvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: Jan 30 20:34:13 2025 GMT
Not After : Feb 6 20:34:13 2025 GMT
Subject: CN=679be246-1afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:2c:8e:bd:cf:14:92:85:ef:74:1c:a4:be:
26:b8:4a:e9:ed:68:5b:71:92:4b:58:58:64:3c:1b:
a7:74:15:ee:c7:69:27:71:8c:54:95:4f:3b:53:ad:
ce:20:85:a2:93:b7:d8:7f:6a:0c:21:f3:7e:7a:c5:
7f:e0:5b:22:3d:9c:0b:63:dc:8d:cd:6c:3a:4c:54:
aa:82:32:61:e1:f1:c8:40:bd:32:b7:47:54:35:99:
30:27:b8:f4:bc:71:7d:b6:ac:ca:40:6d:ec:9a:0b:
80:a1:6e:10:00:2b:84:a2:52:61:1a:d8:83:cd:e5:
83:6a:ba:94:f2:59:5f:2e:4a:6d:4a:4b:7c:4b:25:
41:01:af:65:15:de:6e:a4:e9:fa:af:93:28:43:5f:
13:be:96:85:5a:66:7c:8c:59:54:29:53:1b:87:e4:
ad:e3:47:3c:90:d7:63:71:28:f0:4a:a0:b1:75:ae:
d5:a9:30:34:9c:33:2d:39:d9:c7:27:58:63:dc:e1:
73:ab:71:3f:98:1c:ec:dd:19:aa:03:11:48:d1:5e:
85:19:a3:6b:fa:a3:2e:18:3e:fa:d7:4e:de:8b:4d:
2d:80:2b:1e:fe:31:6d:51:9c:08:22:d1:db:bc:83:
c1:76:74:b7:91:ab:19:ca:61:26:b5:b8:fa:08:f0:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5E:E2:23:DE:FE:13:04:51:07:D3:FC:BC:F6:64:CF:0B:A0:2B:9C
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:de:fe:6f:b3:52:da:d7:ad:69:fe:dc:c6:a7:c9:03:04:25:
7f:29:17:57:d2:fd:eb:8a:59:f5:f5:44:75:90:c7:de:db:d5:
9b:89:d7:24:c8:c4:a9:f4:1f:d0:f7:be:f3:c1:50:ef:d4:b3:
07:e8:3d:05:db:bc:63:c0:1c:4a:40:9f:36:91:4f:75:f9:85:
ae:98:cb:59:2b:f1:ab:d6:2a:ed:cd:12:6d:1a:4a:45:61:eb:
b9:f5:d3:fb:75:cf:b4:6c:f1:9c:cb:10:5a:ff:78:21:15:c4:
bf:0f:82:73:36:35:71:28:b0:7d:42:8e:82:de:e4:56:0c:37:
15:8a:c0:01:cc:ed:4a:12:01:48:4f:b9:d4:c8:3f:b6:db:7e:
1b:ab:f2:60:08:30:26:1b:0b:f3:6c:6d:e5:5d:d7:52:f5:7d:
41:0f:9f:cb:fe:0c:20:7a:4c:a2:76:28:4e:e3:d6:a9:8f:95:
34:28:b9:85:bd:6e:af:30:f7:04:63:43:7b:85:19:b9:56:cc:
3c:73:7c:7c:0a:82:ee:af:ed:d3:70:8d:2d:99:f6:14:ce:e0:
bc:5f:b6:5d:09:cc:60:92:c0:e0:43:a8:ec:33:71:91:34:41:
65:e8:e4:8d:da:f6:dc:89:d8:eb:31:13:cf:fc:23:b1:95:7f:
e0:66:b0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:16 2025 by rpki-client