Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json)
Hash identifier: paa16attXGjfxlDDS1w4liz/2HB1h3hM/4dfhbAKUUk=
Subject key identifier: 9D:02:B5:3B:DC:16:80:60:11:45:72:D3:5A:17:1C:E6:61:70:72:44
Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Certificate serial: 0A73
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
Manifest number: 0A6E
Signing time: Thu 30 Jan 2025 19:45:41 +0000
Manifest this update: Thu 30 Jan 2025 19:45:40 +0000
Manifest next update: Thu 06 Feb 2025 19:45:40 +0000
Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: 5yGzoAJB/5rJ1KICswMxMWwELubHsfQk3rusz2/DPTw=)
2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: le6qjqCzgyimHjECGdiCiB7624kiepl1Husd+YnK6FA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675 (0xa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA
Validity
Not Before: Jan 30 19:45:40 2025 GMT
Not After : Feb 6 19:45:40 2025 GMT
Subject: CN=679bd6e5-c46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e0:0e:fc:8f:f8:8f:07:e0:46:b0:09:76:90:
4d:cc:84:33:15:b0:a9:70:42:9a:ca:9b:d2:bf:91:
2c:d4:70:1c:b4:6c:fb:01:ce:e5:fd:e8:af:7e:1e:
74:33:a3:93:59:d2:85:4f:33:46:61:70:0c:0b:e5:
57:2d:9d:7f:fc:d6:59:14:9f:fc:4b:d6:6d:6b:26:
2c:d3:3c:ef:36:9e:36:3b:56:7d:39:50:03:b8:3d:
db:9d:37:33:31:7f:06:4f:95:9a:5a:42:82:ac:63:
23:a1:17:8d:4c:bd:72:c4:62:a9:d9:74:68:6a:11:
e8:8e:c5:c0:b7:9c:90:6c:91:31:33:ab:41:0c:8b:
2a:ee:d5:74:28:97:49:9a:68:bf:e4:fe:4d:87:27:
bd:4e:36:b3:19:b8:19:a1:5e:91:11:fb:45:7c:51:
99:ae:1b:20:f3:97:79:d9:9d:cb:9c:dd:65:78:1f:
6c:0f:d6:86:f9:60:94:50:b7:c6:d2:20:0b:fb:d4:
c9:7e:44:aa:26:5f:f2:58:94:30:dc:7b:99:e1:af:
d0:2f:b0:12:ea:13:a3:bb:b3:4e:f2:e9:78:06:b3:
e0:5c:8c:92:a2:10:f8:ef:78:f0:14:77:29:4e:29:
8e:e1:03:ab:03:1c:ba:56:83:3f:dd:96:07:a9:91:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:02:B5:3B:DC:16:80:60:11:45:72:D3:5A:17:1C:E6:61:70:72:44
X509v3 Authority Key Identifier:
keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d0:df:d6:3e:13:47:3b:bb:64:73:57:8f:cf:b2:11:2e:83:
fd:97:01:0a:dc:ad:5b:2c:b0:0f:9a:00:19:66:b3:72:6c:f7:
65:9a:cd:94:38:9f:0c:c9:54:22:88:28:92:09:41:12:0f:0e:
42:9a:25:8b:fa:d8:e7:11:d9:35:24:4e:d5:4b:9d:d8:86:c4:
17:4b:c4:48:4f:c4:7c:18:8e:72:7e:df:cd:1d:05:31:5a:fa:
77:5c:65:a2:12:b0:db:13:88:3f:2e:27:37:1b:e2:41:16:5f:
0d:e9:36:7a:e9:50:ab:32:20:64:6a:c6:6b:0e:33:22:f2:cd:
3c:1f:80:93:7d:32:2e:e5:e2:17:8a:55:56:60:29:bd:78:7e:
0c:06:88:4a:d1:0f:86:66:b5:64:b1:1c:16:33:04:71:3d:bf:
bc:44:27:a0:7f:fd:a6:ce:5d:d9:be:76:57:f6:7a:96:a4:a4:
35:13:82:dc:2e:c3:a7:33:9d:29:49:b6:d1:16:2a:33:ad:d4:
dd:3c:22:a2:48:c0:af:3c:ba:1d:bd:77:13:fb:db:89:2b:6c:
06:04:19:2d:4f:74:4b:f5:76:72:b5:c5:06:29:3b:35:d2:0a:
da:1a:8b:61:5a:23:c0:2e:75:54:1a:6c:5f:cc:ae:19:cc:20:
38:68:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:00 2025 by rpki-client