Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
File: u-ULDcHkp69YCVjW19dBR67ZDG4.mft (raw, json)
Hash identifier: pPbIIHev1iDBd6T3UteN2QrwhMe3Vsu9qBlqAZlJCMU=
Subject key identifier: E9:4D:CC:F3:E2:51:F7:DE:3F:98:D5:0B:05:80:D0:31:FD:19:17:23
Authority key identifier: BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E
Certificate issuer: /CN=A9130626/serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
Certificate serial: 0DBB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
Manifest number: 16D2
Signing time: Fri 31 Jan 2025 17:53:10 +0000
Manifest this update: Fri 31 Jan 2025 17:53:09 +0000
Manifest next update: Fri 07 Feb 2025 17:53:09 +0000
Files and hashes: 1: u-ULDcHkp69YCVjW19dBR67ZDG4.crl (hash: Ni3WY8CkIhMFgt510wSTjecxROd0t2MOpE3uzdswVCY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3515 (0xdbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130626/serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
Validity
Not Before: Jan 31 17:53:09 2025 GMT
Not After : Feb 7 17:53:09 2025 GMT
Subject: CN=679d0e05-b2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:ab:9c:15:27:f9:8f:98:8a:f2:81:fc:ee:
8a:3e:07:51:85:b1:c2:31:f0:5f:1d:38:57:ae:68:
a0:7f:55:70:48:85:57:76:19:ba:35:c4:d9:a5:f5:
d8:8d:ce:f9:bf:17:ce:26:75:1a:54:73:d0:fc:30:
32:12:c5:8a:e6:cb:76:b4:0a:0b:fc:24:71:4b:b2:
a2:51:45:66:71:1b:d9:a2:eb:b4:80:33:ef:d8:45:
9f:78:91:39:5d:e2:ad:bd:1e:25:a7:d5:a8:0b:0a:
0b:0a:e2:e6:91:bc:7c:9d:9a:36:d3:df:15:b2:32:
12:a2:ae:6b:d6:23:20:e9:c4:62:e9:1b:c2:79:0c:
59:2e:c7:2c:17:2d:b9:28:b7:6b:a2:de:93:1c:c1:
b3:74:ee:54:73:a4:6f:7b:a9:61:cf:1d:4f:34:c1:
2f:c3:b5:0d:08:e2:33:23:8d:d9:91:78:c0:d9:15:
f2:6c:6c:f2:14:93:80:43:10:07:70:46:f9:12:e6:
a7:23:69:b5:6d:af:72:ee:b1:e9:1c:75:6e:9a:dc:
ce:17:02:87:a5:f1:61:21:18:a5:58:12:f3:d5:a3:
ad:02:45:2f:40:aa:8f:98:58:ff:f3:ab:16:ca:46:
bc:39:04:8a:b8:71:bc:91:f4:65:85:b4:e0:09:7a:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4D:CC:F3:E2:51:F7:DE:3F:98:D5:0B:05:80:D0:31:FD:19:17:23
X509v3 Authority Key Identifier:
keyid:BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:fc:f3:72:84:4b:84:82:95:90:8f:48:6a:35:62:3c:75:61:
59:2e:73:91:b1:64:c7:41:50:c1:1f:97:08:d2:04:55:fd:51:
f7:95:73:a6:f9:9a:40:79:7c:a7:70:f1:a3:84:59:7f:68:c5:
5b:8d:be:e2:4b:f3:36:13:89:82:59:4f:77:e0:1b:9c:a9:5e:
a3:d3:38:c4:c5:71:c3:10:80:49:38:e7:63:21:84:e8:ad:0b:
17:77:1f:49:05:1f:8b:80:78:96:f5:4f:29:e7:54:09:fe:db:
1a:63:e9:bb:43:ec:ad:20:a1:5b:51:e5:05:77:57:53:11:bb:
9b:c0:b7:1c:65:7a:55:e4:a6:4b:37:84:51:28:2d:3c:b7:a4:
e8:90:da:f5:a3:2f:31:58:a9:72:6e:56:c4:4c:bc:7f:87:cd:
eb:98:26:b5:99:85:f3:ac:24:76:64:d3:94:6c:62:6f:ef:0d:
c6:c9:0e:66:b6:84:99:af:99:5e:0b:d9:4e:f4:b9:1a:12:93:
04:65:df:0e:65:1d:28:47:9b:41:7f:2b:22:d8:fc:39:22:d1:
06:bb:36:62:2e:6c:7d:a9:bc:cc:be:ec:7d:94:82:4c:78:b8:
9f:76:48:60:3d:f8:a7:cb:c3:79:f4:f2:ad:ab:6b:05:24:c0:
92:15:ad:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:04 2025 by rpki-client