Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
File: UHRCEm0jxuW-SuMZdJsnbhcum1w.mft (raw, json)
Hash identifier: jqddDlkNYoRyiC6RJNDdJaIcwK9AiGoLETVIKa0czd4=
Subject key identifier: 9F:B6:7A:55:D2:96:F0:6A:5F:12:08:72:F7:EA:74:4D:90:75:6B:21
Authority key identifier: 50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C
Certificate issuer: /CN=A91790ED/serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C
Certificate serial: 0E0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
Manifest number: 0E0F
Signing time: Fri 31 Jan 2025 17:44:06 +0000
Manifest this update: Fri 31 Jan 2025 17:44:05 +0000
Manifest next update: Fri 07 Feb 2025 17:44:05 +0000
Files and hashes: 1: UHRCEm0jxuW-SuMZdJsnbhcum1w.crl (hash: z2nLHms8AWrrw4X37YEyjOCGdLJHdylVJquXOS70Gqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3599 (0xe0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91790ED/serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C
Validity
Not Before: Jan 31 17:44:05 2025 GMT
Not After : Feb 7 17:44:05 2025 GMT
Subject: CN=679d0be6-1550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:88:a1:9b:2a:81:ca:0c:5e:ac:8f:ec:48:
77:d2:d2:6d:c8:53:ab:9a:ca:97:a3:b5:8e:44:16:
53:11:f2:55:6b:d7:61:22:09:39:69:a3:ac:8a:19:
88:51:e5:9a:21:e9:3e:91:64:e3:fd:08:a6:cf:5d:
df:b2:7a:d3:68:7b:c5:54:60:6b:16:1d:6b:57:60:
b6:4d:13:e3:b7:a3:25:6e:db:61:13:bb:14:7e:a1:
66:ca:34:b9:08:9c:fc:e3:82:88:56:47:fd:27:1f:
62:4e:f5:f2:73:b4:0c:31:3f:01:8b:02:86:28:eb:
1a:62:04:67:1a:63:a7:af:13:d0:96:d5:27:f8:ad:
b2:b5:ae:82:85:55:ce:67:f5:b1:8f:80:3e:f9:77:
4f:04:56:3b:20:6d:a7:d7:54:e6:57:4d:a2:73:62:
20:08:c3:6b:33:eb:d3:1a:3a:0f:cd:0c:5b:e0:13:
5c:ae:26:54:73:cf:e3:53:e1:45:31:ba:d3:db:36:
e6:c3:69:0e:ca:4f:14:41:ae:14:f6:36:94:08:da:
9c:4a:fa:cd:53:a2:fa:0f:01:7b:97:8f:1e:34:c3:
72:27:bd:00:83:54:a9:e2:9a:23:a2:58:61:b6:7f:
4c:91:a5:e6:4c:76:0c:44:d1:3e:57:9b:05:4d:64:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B6:7A:55:D2:96:F0:6A:5F:12:08:72:F7:EA:74:4D:90:75:6B:21
X509v3 Authority Key Identifier:
keyid:50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e3:8d:5f:7d:57:df:9e:cf:2d:f2:ca:4f:5e:a5:b9:80:6c:
9e:b3:f1:76:6f:16:2e:52:27:c9:12:af:09:50:a0:0d:55:35:
c9:59:31:5c:db:eb:c1:ca:69:da:a4:67:e9:2e:3a:b6:a3:1e:
c4:2c:bc:3e:94:98:d4:c5:01:78:67:4d:43:13:5d:ba:e6:9e:
90:04:7f:a8:72:8f:bb:44:36:57:e8:4f:0d:64:91:30:69:20:
c7:7f:3d:1f:ab:22:3b:35:23:04:6b:f0:04:ee:7e:52:37:5b:
5d:7d:06:74:d1:85:90:d4:50:4e:cd:4d:da:68:75:fb:20:6c:
89:00:f1:d2:d5:7a:f7:3f:4a:87:17:bc:0c:00:f3:dd:61:4d:
98:c5:10:0a:d6:3c:e2:7a:81:dc:c7:33:a8:20:b9:70:d5:75:
16:93:dd:00:12:02:74:37:71:b9:b5:6c:be:05:e8:a1:97:58:
a2:91:24:78:b6:0c:56:af:0a:c8:16:44:53:d0:4d:20:1f:4b:
18:a6:50:32:51:5b:84:c2:bb:5f:26:36:f8:69:4d:7e:96:17:
2d:b0:15:d4:9f:9a:d1:1b:84:b9:a8:40:ff:a0:ff:6a:44:ff:
8d:ad:17:f6:58:93:70:1c:ee:93:92:50:b9:a4:56:da:95:a6:
11:2d:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:48:10 2025 by rpki-client