Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
File: UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json)
Hash identifier: DgEp9IDxnpdQmYnJ3ywXG4+TithPRqekxkrsU+7kUHA=
Subject key identifier: 35:95:92:37:97:0B:CC:B7:CC:61:81:25:89:1F:53:F4:80:A9:7C:67
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial: 2039
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
Manifest number: 2026
Signing time: Fri 31 Jan 2025 15:59:20 +0000
Manifest this update: Fri 31 Jan 2025 15:59:20 +0000
Manifest next update: Fri 07 Feb 2025 15:59:20 +0000
Files and hashes: 1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: qx8fmOqSYRcrbpXOnfb474BZ79lzOVgIZZuWfAylk9Q=)
2: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: XR4NggtP2aJ+gorFn/k8FfyvP2VT6ewFIceWNa+UHwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8249 (0x2039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Validity
Not Before: Jan 31 15:59:20 2025 GMT
Not After : Feb 7 15:59:20 2025 GMT
Subject: CN=679cf358-7374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:02:1f:f0:6d:91:54:14:c2:ca:c0:53:80:
99:96:43:51:7f:86:55:d0:54:07:e8:87:fd:2c:c7:
ad:32:d3:d6:36:9b:86:80:2e:58:8a:57:d6:de:bb:
f8:03:31:17:c7:3a:0a:26:af:83:cc:e7:0f:2b:c1:
4f:bd:78:d8:d5:52:39:e9:ec:c0:6d:60:81:02:d6:
97:c0:f5:67:2b:85:11:b8:04:af:da:70:ae:3d:5a:
32:0b:f7:0c:28:21:47:4b:c0:c1:76:7a:12:d3:af:
c5:3a:0d:f5:9d:2c:57:61:b8:e5:b9:f1:0a:17:fc:
94:2f:1b:1a:e1:db:13:f1:b5:9a:6c:2a:f6:8e:b1:
89:c8:fe:a2:22:b6:8a:8a:95:20:2b:bb:81:c5:a8:
57:82:84:1d:cf:68:87:da:2c:c1:a3:c4:ca:96:b9:
b8:5d:d6:54:76:db:37:0f:31:8d:7a:5a:43:e3:2e:
08:82:e9:56:40:24:e3:89:d8:35:54:37:f6:1c:0f:
7f:55:be:5c:4c:28:67:72:6c:30:54:ec:9b:7d:b1:
46:ef:7c:56:ac:92:48:46:f4:0a:a5:c3:a7:ac:17:
39:ee:5b:f5:36:93:46:ad:48:59:95:2e:c9:a9:6e:
35:9c:c3:5e:0a:b7:83:07:69:62:d2:9f:5c:a3:b7:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:92:37:97:0B:CC:B7:CC:61:81:25:89:1F:53:F4:80:A9:7C:67
X509v3 Authority Key Identifier:
keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:f1:de:20:27:8a:dc:a3:8e:e0:ca:4c:85:af:fc:64:36:e5:
04:61:7f:aa:50:29:c2:06:c8:ff:80:5c:64:29:2c:e7:c3:c0:
4d:4b:b1:81:97:59:eb:19:19:3d:ee:5a:2c:5e:0b:48:2e:e4:
b9:f3:3c:8a:a9:2f:45:59:62:26:83:99:c0:1e:e5:b0:06:99:
f7:69:3f:44:dd:46:09:98:26:83:fa:52:0a:03:3e:d2:d4:70:
97:7e:19:19:79:e6:57:8d:b1:71:ad:e1:4b:10:6e:dc:fe:2d:
46:7e:eb:03:8b:7b:f0:26:e1:bb:e6:db:fc:84:0b:81:14:0a:
8f:5b:32:bd:3e:cc:51:c2:bc:9a:e0:67:b3:86:00:0d:29:8a:
ce:64:c0:b0:d8:a0:7a:a4:2e:4c:eb:74:fb:90:b0:46:fd:c5:
05:86:e1:d0:da:e9:58:7a:6d:d0:f9:eb:4a:92:e1:29:39:25:
a2:db:d7:f2:f1:79:bc:9b:b0:c8:52:88:81:03:59:64:56:48:
d4:9c:20:7b:7f:ae:0c:73:8f:70:86:76:e0:79:49:96:51:f6:
a5:8d:74:9f:2d:98:69:03:dd:6a:fd:a1:6a:a6:22:e2:82:bd:
63:b6:63:be:d6:a2:87:d9:ea:4f:25:28:dc:63:f2:9e:3a:13:
48:55:5c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:36:40 2025 by rpki-client