Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft
File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json)
Hash identifier: ZxSv284p/3STYNW7lG46B3vnee1hbQjYzH5b45tUrDo=
Subject key identifier: DA:20:8D:49:4F:7C:CC:E5:3F:13:D5:2E:7B:60:3E:F7:B2:BB:6F:42
Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD
Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD
Certificate serial: 09A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft
Manifest number: 09A1
Signing time: Thu 30 Jan 2025 20:08:14 +0000
Manifest this update: Thu 30 Jan 2025 20:08:13 +0000
Manifest next update: Thu 06 Feb 2025 20:08:13 +0000
Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: jx9ZpI0Ifup/+I+En0d6+wCmB5foxhAfq+maakZVckY=)
2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: 32MI8zjp+omn2pz5wQODlf3/KMVL7tiwkuXJGcfvP+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2473 (0x9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD
Validity
Not Before: Jan 30 20:08:13 2025 GMT
Not After : Feb 6 20:08:13 2025 GMT
Subject: CN=679bdc2e-aa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:b4:11:d8:32:7e:57:e1:5c:fa:41:38:4e:
25:4c:89:04:97:fa:b4:69:d9:ce:08:2c:b0:d4:f4:
30:4e:29:a8:75:66:d6:d4:a8:29:45:c0:7a:b2:ab:
05:5f:b1:06:72:2d:4b:56:b0:b8:01:15:a6:c8:f8:
8f:05:03:b6:de:a3:23:f4:a1:17:e4:a4:2c:0a:67:
46:1c:b9:fd:72:e6:f7:48:97:e9:5c:9a:f7:31:3c:
b9:df:2e:f5:70:c5:b0:8a:88:7b:2c:bc:b3:c3:6d:
9b:80:57:6c:67:be:27:3f:4c:c4:df:c5:a1:a2:7b:
8b:d2:ce:b6:7a:ee:22:7c:7d:2f:de:10:64:78:95:
3d:3e:23:95:79:74:7f:ee:5c:26:0b:72:d2:c7:bd:
77:f5:9a:ad:f7:0f:f1:5b:ca:52:a2:96:59:ee:1b:
0a:dc:c3:00:4f:30:b9:50:b4:f6:e0:32:27:b7:e0:
78:d4:fb:f3:1f:7b:6a:b6:22:1b:03:be:de:7b:ae:
16:1b:99:6d:18:91:52:40:ef:fb:13:bc:82:15:05:
e8:cf:b8:c8:db:f1:54:a6:3c:98:7c:28:f8:6c:78:
c8:cb:d2:bf:ad:7c:74:4b:10:53:5f:bc:1f:2e:1e:
60:d9:dd:4d:68:ea:93:e9:4c:aa:d6:5e:59:5a:d5:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:20:8D:49:4F:7C:CC:E5:3F:13:D5:2E:7B:60:3E:F7:B2:BB:6F:42
X509v3 Authority Key Identifier:
keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:0d:44:e1:1e:d9:9d:39:cf:8d:15:6d:52:59:e2:4a:15:a1:
59:5b:74:66:f3:b9:eb:e8:f6:4a:41:64:e7:18:7f:8b:da:1f:
6c:17:d6:3a:cb:ff:2e:df:50:e4:ca:ca:5c:b6:e1:64:e0:3f:
6f:90:09:d0:6a:45:68:2e:24:e5:6b:2e:00:1b:83:83:f0:d4:
b7:93:6a:ad:32:4d:9f:8a:e3:89:2d:67:67:34:db:7b:77:83:
44:9d:e0:a6:ab:52:92:1a:3a:6b:df:b8:b0:2f:64:6f:25:f5:
57:c2:95:1b:0d:fb:7f:96:7c:19:54:ff:e6:f3:59:91:76:2d:
bb:2c:23:54:76:0c:cf:04:50:b8:fc:95:5f:84:5a:e0:30:a5:
82:dc:64:ae:fd:6a:41:8d:3d:65:7c:26:e6:23:bf:1f:ff:f4:
37:b7:d7:fe:48:c9:ef:0d:43:94:9f:09:09:33:92:7e:f3:19:
18:93:16:11:80:69:e5:dd:de:c1:9f:a8:dd:7c:11:72:a4:de:
a9:c8:5a:96:53:06:42:10:00:5b:b3:07:5d:7f:ea:78:74:0d:
fb:80:03:1b:11:1e:70:72:c0:4e:fa:f6:9b:49:dc:be:68:dd:
e1:65:ce:91:be:44:65:98:75:83:da:c2:0e:b1:32:85:46:a4:
f5:62:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:15:31 2025 by rpki-client