Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
File: UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft (raw, json)
Hash identifier: Ew+IXFn1UvWInSh+V/lqgx2oFU9kNeIfjfpt5Lct5SA=
Subject key identifier: B1:F0:26:47:85:E6:15:D0:3F:8F:C2:17:F5:24:69:9F:72:EF:BA:BD
Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79
Certificate issuer: /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279
Certificate serial: 03AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
Manifest number: 03A7
Signing time: Fri 31 Jan 2025 00:46:48 +0000
Manifest this update: Fri 31 Jan 2025 00:46:47 +0000
Manifest next update: Fri 07 Feb 2025 00:46:47 +0000
Files and hashes: 1: UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl (hash: ca59k5x91Jvr+qwVqkvblRYrAHq3KW23/RSzafDfCQ8=)
2: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (hash: Lvq52WHSVltoEw922TIW+iLgDfAEr7Jb9JVDiZhrEiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279
Validity
Not Before: Jan 31 00:46:47 2025 GMT
Not After : Feb 7 00:46:47 2025 GMT
Subject: CN=679c1d77-6813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:b4:0f:9d:0a:d5:87:6f:2e:72:ef:c7:be:
3f:1c:86:21:00:7c:f1:52:18:78:fb:0e:64:27:8a:
d2:d8:77:59:0f:72:01:3e:7f:74:90:d2:0b:82:96:
1f:47:cd:ec:67:1c:34:d8:fa:70:57:7f:bd:37:52:
12:a9:90:87:18:35:b7:ad:ba:ed:35:da:f5:f8:dd:
96:9d:38:a9:f0:92:a7:71:dc:b3:8d:f8:67:b2:0c:
3d:1b:2d:38:e9:dd:cf:39:c7:47:87:ee:ee:23:2c:
f3:74:07:b6:c2:7f:04:04:1c:4c:1c:6a:e9:9b:90:
29:76:90:1d:f0:33:ce:39:d8:11:a3:1b:66:c6:d1:
f4:53:ad:bd:b1:8b:ac:8f:f1:43:bd:25:23:9a:92:
35:82:1f:1d:ce:af:73:a1:6e:e0:17:49:46:11:02:
c3:19:06:e5:e2:c1:00:2a:91:ff:37:7e:ec:ca:23:
67:28:ca:17:47:67:49:1b:d6:d3:e6:da:94:c8:67:
a6:e9:b2:fc:02:b6:78:5b:60:8b:cf:b0:ae:0b:f8:
b5:a8:ea:fa:7f:84:07:53:32:eb:b8:41:04:6f:9d:
f2:1f:d9:13:3f:2e:2f:8b:93:d2:3a:fb:a8:32:63:
e2:09:d0:46:e3:2a:19:0c:ee:57:58:39:de:a1:bf:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F0:26:47:85:E6:15:D0:3F:8F:C2:17:F5:24:69:9F:72:EF:BA:BD
X509v3 Authority Key Identifier:
keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bb:87:28:c3:2a:93:e8:f7:bf:96:5f:5f:85:f4:c1:d5:53:
61:69:51:0f:25:07:94:69:a7:76:c4:58:ca:57:6a:b8:72:b2:
83:75:16:af:2d:e4:ce:69:83:ba:c4:f6:6a:85:17:e8:18:0c:
15:56:d2:68:e0:a5:c3:82:be:92:2f:e5:5a:b7:18:c1:64:a2:
a1:f1:43:4a:a6:0d:83:00:15:3e:e1:66:9a:09:46:e3:25:fe:
c9:f6:97:b4:6f:8e:4b:3e:f0:09:ba:48:59:bb:93:7e:35:28:
3b:5e:74:95:a0:72:cc:3d:80:ad:bd:8b:0b:7c:82:78:a4:56:
61:4f:62:39:c7:29:e2:b8:97:2f:05:1e:59:bf:c8:57:a2:2a:
06:fa:de:7d:48:27:45:2b:9b:7d:d0:ee:6d:3c:d2:d0:40:3e:
f0:28:8e:33:52:9a:55:31:52:a7:86:7e:48:a1:b9:75:1f:96:
62:21:05:9b:86:16:ed:1d:9e:dd:02:ec:14:7c:3d:4b:ac:13:
f2:e7:5b:69:12:5d:f2:67:e5:52:14:70:3f:02:af:be:d1:b8:
2c:dd:a4:26:be:5b:d9:9e:ba:62:00:80:ae:1a:82:3a:33:d2:
41:cb:9d:cb:f4:f6:d4:26:30:18:b7:58:5c:23:87:4d:2a:4f:
46:9d:a7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:49 2025 by rpki-client