Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json)
Hash identifier: ID+Jyv3t4PcWm822W1W3YlpK10JHUlNxyuLse+ovBmo=
Subject key identifier: DF:36:F6:56:DE:89:6D:F4:A3:39:D2:73:64:03:49:21:34:EF:A5:F0
Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Certificate serial: 0C33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
Manifest number: 0C1B
Signing time: Fri 31 Jan 2025 18:29:01 +0000
Manifest this update: Fri 31 Jan 2025 18:29:01 +0000
Manifest next update: Fri 07 Feb 2025 18:29:01 +0000
Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: Yg7h+QtIYu0jutoquagDtjO2SJVfxhcKDaFJIr8QZ50=)
2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: I8Ss/Oj3Q9umSrFxZnObaXQe/cu017hGcC027pv/vs8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3123 (0xc33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Validity
Not Before: Jan 31 18:29:01 2025 GMT
Not After : Feb 7 18:29:01 2025 GMT
Subject: CN=679d166d-0de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:91:ec:8f:c1:a0:fd:b4:57:76:12:1a:bd:
9d:f7:c6:f1:09:15:b1:fe:ca:f8:7b:84:a4:4e:d7:
e8:72:ef:ed:22:03:61:32:bd:e1:35:4f:11:48:02:
4b:9a:0d:f9:85:b5:dc:f2:a3:fa:de:e6:0f:6d:c0:
e5:cd:2c:4b:76:49:7d:e9:a8:52:52:83:e1:30:98:
77:05:20:61:2f:e0:20:7c:04:01:8a:98:74:14:40:
4c:55:d5:2a:35:19:d6:23:c8:57:a6:b4:54:7d:20:
90:73:61:5c:b6:e3:76:b1:dd:90:b3:5a:22:b0:ec:
c8:22:80:1e:43:90:b8:00:92:ec:6a:22:d0:f2:28:
60:4b:79:32:4b:21:4f:25:64:30:cf:be:ab:2b:70:
28:cf:cc:27:13:4d:71:05:74:46:80:b5:10:4e:0d:
56:5c:ab:bc:b2:ef:94:8d:0f:63:eb:7d:0c:59:57:
db:e3:74:20:6d:34:55:c0:be:45:6a:94:29:06:0e:
e6:61:3c:1d:e4:b8:38:fc:bc:ae:1a:fc:45:8e:20:
17:90:64:29:ff:bd:f1:e1:7c:e2:e4:a5:7b:3c:73:
61:b1:17:be:c1:bf:7d:fa:1a:fb:6b:d6:08:ff:69:
9a:3d:11:60:b0:c3:73:42:18:68:f6:28:d9:12:6d:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:F6:56:DE:89:6D:F4:A3:39:D2:73:64:03:49:21:34:EF:A5:F0
X509v3 Authority Key Identifier:
keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:2f:a0:9b:e7:54:9c:d6:23:ad:5a:0f:11:84:cb:36:b8:a2:
19:42:e0:61:a1:49:37:42:be:3c:21:ec:c9:ac:6d:74:1c:b1:
87:f4:7d:01:db:37:cf:30:39:20:ab:86:58:8f:28:a3:5c:36:
78:30:01:f6:94:d0:02:cd:aa:02:5b:a8:da:e3:08:23:3d:20:
70:41:b4:59:c7:f5:e5:76:eb:2f:e9:8a:7a:4c:0d:97:17:7e:
a7:25:89:1f:6f:f7:31:64:2e:c7:bc:16:85:f3:6c:e4:c2:7d:
04:44:c0:8c:d4:85:c6:63:b2:29:24:14:b2:67:05:31:25:51:
04:2c:94:a4:dc:04:53:0d:a4:cb:52:ce:d9:ce:46:db:b6:0a:
1c:78:e0:77:64:74:c4:1f:ea:c1:89:cb:30:a9:56:33:99:6a:
7c:f3:71:42:d6:30:61:71:e8:ea:1a:0a:b3:0a:62:2e:40:71:
9a:15:ae:bf:55:76:e0:52:2f:09:43:a9:1e:65:3b:6f:3e:21:
73:8b:d3:ce:71:20:3a:3d:45:f7:d8:4d:7b:8f:00:60:ce:21:
81:20:c9:d0:d0:7b:0c:3b:96:b0:85:25:54:e8:c7:3b:59:e6:
95:2a:1f:80:ac:68:2c:78:fb:74:fc:28:66:52:59:14:e8:21:
99:e4:22:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:46:05 2025 by rpki-client