Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json)
Hash identifier: swyEF6M1eefptvztyjtdJ5Ag8yax6CLCyySDFsVxmZk=
Subject key identifier: 67:0E:D4:0D:33:96:7B:8B:EB:54:25:80:FB:4F:13:7E:24:5A:00:8A
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial: 303F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
Manifest number: 3031
Signing time: Fri 31 Jan 2025 15:28:58 +0000
Manifest this update: Fri 31 Jan 2025 15:28:57 +0000
Manifest next update: Fri 07 Feb 2025 15:28:57 +0000
Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: 599da7DlkgRLG+QoalxmHm/gkg5pSgScVZTUxW8I3vM=)
2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: 8yPXIp2srpOMXwXrVDBAhf+m6VYRXr2aEaNExsEirN4=)
3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: WamiUU84cAcc5WGx4lslvANbP3TtO/lIaFT/y7zUmEY=)
4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: WhKdctnJM8x/P3lLuqtSYgwShQQZa8r7EVnRQb0csbo=)
5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: T37Xr3jND0OgDmWZSLZeRiJ8MSQ6+oBhyzh33K0Hddg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12351 (0x303f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Validity
Not Before: Jan 31 15:28:57 2025 GMT
Not After : Feb 7 15:28:57 2025 GMT
Subject: CN=679cec3a-049d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:fc:b1:85:e6:6e:8e:63:7b:84:bd:92:7c:
7b:ef:69:75:31:bf:0d:7a:85:c2:b7:a0:43:dc:d6:
3f:98:5c:86:5d:67:0d:06:b9:3e:28:ae:53:73:3c:
80:2f:65:08:77:26:49:42:a9:5a:68:9a:e3:e7:d5:
f4:bf:d1:f0:e1:40:99:86:75:9f:0b:f9:33:8d:fd:
8c:4e:8b:b1:fd:9a:0e:b8:8e:6c:6d:2f:b2:2d:d2:
5f:3b:83:17:53:ee:59:1a:22:9c:cb:09:02:61:40:
df:27:83:e7:7d:b1:47:e0:cd:54:ed:c0:61:68:31:
4a:0c:31:f7:ab:f9:6f:38:a3:b8:93:fa:0b:e6:25:
64:2e:9b:63:f0:8b:d1:3b:bb:e6:96:d1:40:a2:27:
5f:36:ea:4c:96:f2:a1:9e:dd:57:25:a4:b5:b8:b6:
05:d0:40:13:53:69:93:da:d5:45:07:17:64:32:75:
3c:9b:ef:47:20:65:54:fe:a9:8d:94:74:c0:75:73:
27:33:12:f8:bf:ec:c8:c1:db:41:8d:43:a2:cf:c8:
e2:7c:71:12:19:18:2b:c1:24:e0:c5:a1:e4:8f:da:
8c:85:b2:23:72:b8:50:41:7a:64:d0:a8:59:08:47:
db:d3:9a:a5:ed:36:cd:a2:b8:df:94:e3:12:f4:d3:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0E:D4:0D:33:96:7B:8B:EB:54:25:80:FB:4F:13:7E:24:5A:00:8A
X509v3 Authority Key Identifier:
keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:36:9d:f6:9b:81:6a:eb:4b:fe:99:41:92:b2:70:d1:1e:d3:
db:c8:55:4b:23:01:e1:a8:01:26:17:2e:36:e4:7e:aa:86:c1:
7c:7f:61:15:cd:79:3b:96:79:c4:ff:83:b7:d9:2b:8a:ad:de:
79:5e:e8:26:59:63:40:fb:4c:ac:48:3b:17:92:98:a7:3d:d3:
6e:78:a6:b1:88:f5:92:81:a8:76:48:54:08:11:c4:73:67:75:
12:86:f0:b6:9f:4f:36:7b:19:8a:78:f3:62:59:30:6b:e1:5c:
bc:75:0b:00:1b:33:bd:68:43:17:60:aa:5f:31:79:94:ed:9f:
4e:e1:62:01:57:af:97:35:06:69:26:e6:6e:fc:02:9b:a7:01:
83:8b:a9:40:ea:c4:75:e3:74:b2:5b:06:dc:fa:a3:4c:69:5f:
ea:52:77:8d:41:f8:9c:1e:a3:e6:ca:72:68:36:3c:77:dc:8b:
64:c9:0e:80:e1:4a:7d:97:7c:05:d8:7e:40:fe:78:26:e3:d4:
d8:f3:36:45:fd:88:c7:a1:94:4c:05:d1:1c:cb:87:43:32:43:
43:95:13:e7:d4:33:82:17:29:82:26:38:df:af:45:a4:d5:32:
c5:58:e1:51:3d:3d:79:85:1a:eb:b0:13:96:79:44:a9:06:66:
fa:82:e3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:14 2025 by rpki-client