Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
File: UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft (raw, json)
Hash identifier: rwuoVAwGW/NrSagJZDCq0vmAIWPjqpk+4XfXu5HJnkA=
Subject key identifier: B3:01:1E:36:22:C9:C5:BF:76:65:39:CD:33:36:E4:00:12:39:22:35
Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
Certificate issuer: /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
Manifest number: A3
Signing time: Fri 31 Jan 2025 05:23:26 +0000
Manifest this update: Fri 31 Jan 2025 05:23:25 +0000
Manifest next update: Fri 07 Feb 2025 05:23:25 +0000
Files and hashes: 1: UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl (hash: WS9VZvvHFEyJ6h95qceBlFodBRYrSjWZeHAAaignM6Y=)
2: 6EAE50E8EBFA11EEA937307AC4F9AE02.roa (hash: n4jE/JU888DErTDFi7j6yPAf5IRm3HLfX3pJFCp7TIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Validity
Not Before: Jan 31 05:23:25 2025 GMT
Not After : Feb 7 05:23:25 2025 GMT
Subject: CN=679c5e4e-4002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:65:a1:e2:09:ae:9b:0a:6f:7e:78:25:3f:
62:a1:77:80:f1:ec:e0:a3:da:03:b2:1c:95:98:85:
37:ca:47:48:9a:dc:95:20:4a:c3:b8:d3:58:17:ca:
7c:b2:85:29:03:07:39:44:61:82:b2:29:ee:46:ea:
e4:3d:0c:4e:42:cc:6b:7c:2a:d0:8e:6c:bc:e2:f6:
27:b0:08:80:d2:4e:32:ee:72:94:1d:c5:57:5b:fa:
c2:18:2b:1b:83:e4:a7:59:d7:c9:a1:27:d5:6a:45:
c1:eb:e1:ef:7b:a9:40:cc:f7:4d:c8:5c:01:cf:d6:
49:0b:9b:59:9c:d0:31:ec:ff:b2:ab:3c:0d:2c:c9:
eb:ea:60:9d:90:4c:84:85:1a:3e:19:34:13:d9:3a:
a0:c5:0e:ff:54:b7:dd:cf:7a:a7:ea:53:3c:58:04:
d1:68:ca:e6:2d:fc:01:c0:d6:eb:90:73:28:ea:d3:
a3:83:c3:73:b5:7d:81:53:c6:a8:48:1e:16:30:11:
83:30:58:3a:77:df:e3:57:22:9e:22:dc:4c:0e:72:
73:6d:45:0e:25:1d:d0:2f:08:a0:14:0f:17:a6:2a:
1b:a6:4e:08:2c:7b:45:f2:03:97:6b:8e:db:58:2c:
78:ac:0b:86:f9:79:9a:db:f5:3b:72:f7:82:f2:e1:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:1E:36:22:C9:C5:BF:76:65:39:CD:33:36:E4:00:12:39:22:35
X509v3 Authority Key Identifier:
keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:bc:bb:56:90:11:6f:9a:ee:27:95:b3:46:b9:8c:d8:dd:25:
ac:07:43:90:e6:97:f9:b4:79:ee:b4:a6:91:3d:04:57:62:2a:
aa:01:7d:69:3c:b0:71:9a:20:de:ce:0d:72:73:c8:69:a9:11:
83:1f:df:fe:97:65:62:88:01:eb:87:46:5c:90:af:d3:cd:f6:
34:2c:67:f4:c7:47:63:9e:bd:c3:a8:ab:eb:83:7b:ee:06:a0:
1e:fc:1a:ad:ac:16:20:98:dc:c9:e1:ec:3b:60:59:ca:d7:1e:
c6:dd:62:31:01:ec:b2:3c:39:cd:88:34:10:64:f8:ac:16:50:
3e:af:fa:5a:bf:e3:6f:30:e4:0d:a2:0a:df:07:bd:c8:7d:19:
69:36:17:81:3d:34:54:80:ae:74:18:14:ff:69:2f:32:40:81:
0a:3f:ad:72:c5:8b:38:dd:06:dc:3f:dc:30:19:95:89:f0:76:
10:1b:4f:73:31:c0:89:6e:97:5b:c4:f9:33:95:0b:a6:78:aa:
80:0b:a8:2a:b1:7c:66:9c:97:18:36:87:36:02:5a:f8:f3:07:
db:e5:81:bc:03:cc:83:32:92:76:a8:65:86:a9:de:da:ff:32:
62:0b:86:52:13:79:97:48:a1:68:35:15:d1:2f:98:00:46:d1:
b4:c3:9b:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzMxOEUxMTAvBgNVBAUTKDUwMEY5MjAwRUI4NkRDNUZEMDZEQjc4NkMwQ0VBNDUy
RDBDRTcyMzAwHhcNMjUwMTMxMDUyMzI1WhcNMjUwMjA3MDUyMzI1WjAYMRYwFAYD
VQQDEw02NzljNWU0ZS00MDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnMploeIJrpsKb354JT9ioXeA8ezgo9oDshyVmIU3ykdImtyVIErDuNNYF8p8
soUpAwc5RGGCsinuRurkPQxOQsxrfCrQjmy84vYnsAiA0k4y7nKUHcVXW/rCGCsb
g+SnWdfJoSfVakXB6+Hve6lAzPdNyFwBz9ZJC5tZnNAx7P+yqzwNLMnr6mCdkEyE
hRo+GTQT2TqgxQ7/VLfdz3qn6lM8WATRaMrmLfwBwNbrkHMo6tOjg8NztX2BU8ao
SB4WMBGDMFg6d9/jVyKeItxMDnJzbUUOJR3QLwigFA8Xpiobpk4ILHtF8gOXa47b
WCx4rAuG+Xma2/U7cveC8uFo7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMBHjYi
ycW/dmU5zTM25AASOSI1MB8GA1UdIwQYMBaAFFAPkgDrhtxf0G23hsDOpFLQznIw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzE4RS82QTkwQUY4NEVC
RjkxMUVFOURBNzlCNzdDNEY5QUUwMi9VQS1TQU91RzNGX1FiYmVHd002a1V0RE9j
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VBLVNBT3VHM0ZfUWJiZUd3TTZrVXRET2NqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzE4RS82QTkwQUY4NEVCRjkxMUVFOURBNzlCNzdDNEY5QUUwMi9VQS1TQU91RzNG
X1FiYmVHd002a1V0RE9jakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyvLtWkBFvmu4nlbNGuYzY3SWsB0OQ5pf5tHnutKaRPQRXYiqqAX1p
PLBxmiDezg1yc8hpqRGDH9/+l2ViiAHrh0ZckK/TzfY0LGf0x0djnr3DqKvrg3vu
BqAe/BqtrBYgmNzJ4ew7YFnK1x7G3WIxAeyyPDnNiDQQZPisFlA+r/pav+NvMOQN
ogrfB73IfRlpNheBPTRUgK50GBT/aS8yQIEKP61yxYs43QbcP9wwGZWJ8HYQG09z
McCJbpdbxPkzlQumeKqAC6gqsXxmnJcYNoc2Alr48wfb5YG8A8yDMpJ2qGWGqd7a
/zJiC4ZSE3mXSKFoNRXRL5gARtG0w5sM
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:15:36 2025 by rpki-client