Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
File: UHF-n6DMN8QGf4M-kPt-chDzxZM.mft (raw, json)
Hash identifier: zTdQNEXslVLB5ihNHtm6+/S+NH470lO5LhjJRg9np2o=
Subject key identifier: 71:52:AE:35:57:40:56:7E:B2:63:24:F3:FC:89:72:DC:58:C3:56:3D
Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93
Certificate issuer: /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593
Certificate serial: 072A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
Manifest number: 0724
Signing time: Thu 30 Jan 2025 21:44:07 +0000
Manifest this update: Thu 30 Jan 2025 21:44:06 +0000
Manifest next update: Thu 06 Feb 2025 21:44:06 +0000
Files and hashes: 1: UHF-n6DMN8QGf4M-kPt-chDzxZM.crl (hash: zdAriosHLVlcaUHWn0wqltkWRAO4oW3D1CYqHoepKHw=)
2: BDAC3ACA1E7111EB93874336C4F9AE02.roa (hash: nkmWs3iqAu0OPxxjsFN0b2stVXj3stQjYTM1Oq4SJSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834 (0x72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593
Validity
Not Before: Jan 30 21:44:06 2025 GMT
Not After : Feb 6 21:44:06 2025 GMT
Subject: CN=679bf2a6-3daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:e5:a2:a8:34:ab:9c:8e:7a:34:a4:97:22:
31:ff:5a:2a:27:33:4b:a3:41:6c:f9:bb:d5:7b:7a:
ed:c8:1d:67:db:ea:bf:50:ea:86:fc:bb:ca:cf:c2:
d6:b9:ad:18:89:5c:e0:48:08:e1:51:2e:b6:34:88:
00:21:a4:c6:a9:60:df:8a:44:1d:e4:4d:b2:eb:81:
67:a8:76:09:84:2f:05:4e:91:63:29:bf:11:a8:7d:
22:a3:89:44:c4:75:7c:e8:31:63:04:45:f0:3d:51:
f2:da:cb:4c:05:51:15:77:99:6b:56:b6:c2:b8:65:
27:18:ab:e1:c4:65:15:fd:22:2a:1e:ad:0f:b3:45:
26:32:a8:4d:9a:f5:db:a4:39:7e:cf:59:08:48:10:
84:f7:f6:2f:a9:fb:6e:c3:82:a6:21:36:36:01:ab:
f6:9e:3f:46:ba:20:4e:7c:d9:36:e6:16:5a:22:2c:
05:55:43:ce:97:13:40:2e:d3:40:a2:fd:9a:d6:d5:
9c:5f:18:e4:50:f5:73:2c:8d:0d:40:a9:39:bf:b2:
5c:27:e0:a4:0f:1f:31:b7:92:aa:63:44:ae:90:aa:
77:c2:25:3c:97:5d:5f:49:0b:e2:e0:0f:76:76:eb:
71:d7:42:b8:1e:fa:c9:4e:f4:dd:3b:c0:97:16:77:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:52:AE:35:57:40:56:7E:B2:63:24:F3:FC:89:72:DC:58:C3:56:3D
X509v3 Authority Key Identifier:
keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:c2:fa:b7:bc:cb:55:8a:0e:d0:62:4f:2c:75:ab:2b:b1:90:
84:e5:e8:5a:dc:e3:64:8b:c4:f2:9c:00:bb:4e:62:0c:b5:c0:
75:01:0b:cf:8c:17:aa:ab:69:aa:1a:98:79:8b:b4:86:6a:00:
af:ee:4f:19:cd:d4:d8:72:3a:90:62:0d:d2:13:2d:c5:03:f1:
c7:ee:bb:4a:51:13:22:77:17:b8:1d:a8:cb:dd:44:2e:8a:3a:
9b:ed:5e:e2:21:2c:09:ad:3d:2e:7f:8a:4e:29:2c:ad:0d:e0:
27:9c:f3:af:c4:db:90:68:89:d0:14:5b:33:89:79:8e:c6:75:
60:46:4e:11:c2:6f:ad:f7:ff:71:0a:ff:3b:ff:2a:22:4b:50:
d7:30:40:b1:58:ae:ad:92:90:98:60:9b:8a:12:28:5c:d7:73:
83:15:32:ab:29:14:65:57:3a:bf:0e:59:d3:d1:58:71:f0:71:
0f:93:9c:b6:ec:4c:cf:33:69:2a:6c:fe:a7:a7:34:3e:29:a1:
42:51:b4:ac:41:23:33:41:bb:38:9a:b0:9b:2e:0a:9f:a7:b3:
a4:35:26:22:d4:07:f8:0c:d5:e7:15:56:b5:32:a8:87:af:d0:
bb:94:ba:70:97:9c:58:06:c1:ac:9e:3f:4a:dd:c2:ca:9a:1c:
6f:3f:89:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:17 2025 by rpki-client