Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File: UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier: o3BPZ9eRfmm/084NkKzv9BTJjBNf6RKc5c08Rby9y7I=
Subject key identifier: 12:D4:7B:90:88:3C:1A:28:1D:1D:8E:30:86:07:A5:BA:F7:88:64:D7
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial: 0BAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number: 0B9C
Signing time: Thu 30 Jan 2025 19:00:50 +0000
Manifest this update: Thu 30 Jan 2025 19:00:49 +0000
Manifest next update: Thu 06 Feb 2025 19:00:49 +0000
Files and hashes: 1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: qvWeK9M+mOuO4koxb4tOMiZlDtScf+vfKlYrs76R9aw=)
2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: 7j0YGYj1RqHQkRdbQBx20wV0PO4RbHrIjhOnv/h1yok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2988 (0xbac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Validity
Not Before: Jan 30 19:00:49 2025 GMT
Not After : Feb 6 19:00:49 2025 GMT
Subject: CN=679bcc61-8ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:ae:c8:c9:34:10:e4:e9:3b:3e:71:03:40:
57:13:7d:08:e7:87:70:5a:39:f3:a9:47:cf:dd:87:
fb:95:51:a5:cf:8a:bb:e9:89:18:17:6c:74:42:40:
b7:0c:5b:aa:be:94:fb:12:28:31:c1:f7:8c:0d:0b:
07:66:6d:56:9e:4b:50:6d:49:37:ac:38:f1:e0:ec:
7b:df:f1:6e:51:f3:6d:24:59:a7:54:41:03:fc:1f:
21:7d:45:73:65:b0:66:d8:2f:c9:5f:dd:e4:6c:a2:
97:da:17:81:2e:45:c7:84:a0:9a:f6:58:f2:0a:00:
ee:1f:e7:82:25:28:38:e5:11:f9:41:0b:95:b9:ca:
3a:b6:33:7a:b0:10:57:87:dc:8c:e3:8e:e8:24:4e:
0c:7b:b0:2c:fa:98:c7:35:af:57:64:9d:4c:6f:e5:
ec:6d:aa:53:d7:69:e4:8a:c0:de:69:b5:7b:f9:f2:
ab:d7:65:0f:8d:75:de:a9:40:cd:99:d8:72:02:e7:
c1:cd:2c:5a:24:8b:e4:33:20:6e:38:9b:49:20:11:
99:a3:c6:99:c4:c4:84:38:8a:d8:4a:82:6c:52:9f:
ab:69:e4:6c:42:46:19:9a:6b:c0:c2:fb:1a:d0:6c:
6f:34:4c:98:90:d2:ba:4c:fa:e2:79:23:76:5a:82:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D4:7B:90:88:3C:1A:28:1D:1D:8E:30:86:07:A5:BA:F7:88:64:D7
X509v3 Authority Key Identifier:
keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:5e:aa:1f:13:e2:50:27:4a:e7:eb:05:65:12:b8:12:b7:52:
04:59:ac:d9:64:f1:b3:db:b4:10:54:bd:97:55:fe:77:da:25:
1e:1f:66:17:f9:4c:e8:cc:b9:e7:d0:b1:62:96:fa:66:b1:50:
38:d7:56:c0:13:25:3e:b1:07:71:cb:04:7a:4a:75:3e:3d:33:
d2:7a:ed:ae:49:5a:c0:86:77:12:bc:8b:a6:9d:e6:04:f0:bf:
cd:07:2a:1b:f7:5c:30:99:eb:cf:53:a4:e2:12:68:bd:0c:f6:
25:86:62:9e:6e:6c:97:0e:fa:81:10:7b:c0:fd:75:87:11:d5:
40:73:28:38:12:60:41:99:ba:c6:c2:7f:28:3d:e7:f6:06:64:
ad:86:c7:b6:da:c8:af:3e:61:93:9b:f3:34:fa:5d:aa:22:fb:
92:29:f5:67:91:28:e4:84:e9:36:9b:c9:f8:02:0d:15:3a:bb:
fd:26:6d:35:c8:d9:a6:88:99:53:38:02:c3:92:0c:eb:78:53:
05:96:5a:9a:1c:15:bc:8a:71:33:df:da:1f:4f:ea:16:15:59:
3b:03:e6:cd:94:11:b4:a2:08:b0:a3:5d:dd:7b:4c:c8:e3:d7:
00:88:19:2a:bc:69:33:df:b8:f0:36:04:82:70:ae:89:44:24:
82:6a:e1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:30 2025 by rpki-client