Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
File: _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json)
Hash identifier: NMXOtBowq/2rzFeGcWd0/EocDTovUuHZPhongSJhTr8=
Subject key identifier: B0:28:40:67:5D:28:0B:08:4C:C0:22:EF:CC:49:1C:37:93:CE:96:C5
Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
Manifest number: 010B
Signing time: Fri 31 Jan 2025 04:05:34 +0000
Manifest this update: Fri 31 Jan 2025 04:05:33 +0000
Manifest next update: Fri 07 Feb 2025 04:05:33 +0000
Files and hashes: 1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: Cg+8ym508ANg0zUUIyxslOOLPiPX/EnzAEUWcyEjgj8=)
2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: 3T/MseZ6JXWgLESYBTBgDLBC7fpGasfK+B1pI77N9vU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Validity
Not Before: Jan 31 04:05:33 2025 GMT
Not After : Feb 7 04:05:33 2025 GMT
Subject: CN=679c4c0d-2a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:46:e1:db:2e:8c:b0:ab:f9:74:97:bb:05:
c8:ed:94:dd:d8:5a:54:a3:17:07:dd:53:0c:97:7f:
fc:2e:48:80:61:a5:78:a1:93:4e:04:4c:9a:10:fd:
5c:4a:e3:a3:75:f5:0e:8f:3e:d2:81:f8:34:ce:a6:
f1:63:43:b8:ca:4d:2f:dc:5e:12:1b:ef:5d:37:15:
57:22:6f:0e:39:e4:43:c2:4d:98:2b:83:64:da:1d:
4e:4a:5a:9c:d5:4b:2f:87:2a:33:f2:bd:84:46:fb:
3b:96:b6:c2:59:69:77:b8:49:9e:0b:9d:60:cf:cc:
0d:40:23:72:d8:45:04:fe:83:7d:20:cb:01:d7:73:
2a:16:1b:23:25:45:b4:e5:ed:11:6a:20:86:f2:e7:
3e:2a:51:13:c5:7f:c5:d5:29:b0:ce:1e:9c:db:c2:
5f:04:17:b8:17:3a:ec:d9:15:eb:28:7b:e8:57:a9:
4d:59:bd:9f:b0:43:69:e5:c9:35:90:f2:7a:d9:73:
7f:18:f8:61:4b:01:a2:ba:50:30:33:af:1a:cf:10:
b5:7d:41:ef:f1:de:9c:c8:6d:62:d0:62:e7:ff:59:
b5:87:39:3a:10:0f:b4:65:10:24:2c:5d:1d:76:82:
cd:8b:0e:95:49:bd:d9:fa:08:ec:17:1b:59:07:ff:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:40:67:5D:28:0B:08:4C:C0:22:EF:CC:49:1C:37:93:CE:96:C5
X509v3 Authority Key Identifier:
keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:84:4a:e3:92:13:73:21:7f:86:16:9e:fd:d9:aa:85:75:24:
cf:c5:86:68:bd:5e:26:43:d1:ae:8c:fd:5a:da:b9:f8:c4:56:
11:a0:ea:d1:95:e4:e2:99:9f:b6:7f:d3:e6:0c:8d:f2:dc:da:
ee:c3:9e:6b:ee:ed:cc:7e:05:24:99:b2:1f:ce:92:0e:49:24:
33:0c:8d:5d:94:fa:c0:54:fc:b7:8c:34:7f:d3:26:71:71:9f:
31:52:94:e2:ca:be:10:58:b4:52:83:8e:64:25:82:51:c9:e0:
f1:e6:b2:4e:5e:28:f0:25:93:07:de:e2:ed:e9:24:c8:f4:a2:
f1:43:20:f3:18:39:1e:c4:f1:ed:eb:4b:02:90:d6:c6:72:bc:
5e:cf:9b:f2:71:65:1d:5b:55:03:7a:c1:e4:21:7b:c9:91:db:
73:ff:c3:d0:f8:9f:41:7a:57:f5:68:38:c6:63:a3:9b:0d:e3:
16:9b:8e:6a:ac:3a:b8:6f:7d:cd:8b:27:67:6a:7b:3f:7a:7a:
82:23:df:6f:fd:28:bd:ac:bd:7e:de:42:3d:25:8b:e1:c6:bc:
33:78:af:e6:77:a7:94:27:4b:c9:a1:24:37:00:28:71:d5:d5:
e4:5b:49:47:d3:71:bf:08:aa:c7:3d:fd:0c:e6:ef:90:91:6e:
7b:c7:44:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:41 2025 by rpki-client