Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft
File: rUk9yaPSQDSDYoWHBR93lRWJFnk.mft (raw, json)
Hash identifier: G0xdw3ewZAPcstTOJKCHdizrW8hU4KuGxJI/bn1UR14=
Subject key identifier: E1:99:94:7D:1C:A7:54:BA:E6:3C:25:B3:72:52:4B:FD:65:49:64:AE
Authority key identifier: AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79
Certificate issuer: /CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft
Manifest number: 0214
Signing time: Fri 31 Jan 2025 02:08:35 +0000
Manifest this update: Fri 31 Jan 2025 02:08:34 +0000
Manifest next update: Fri 07 Feb 2025 02:08:34 +0000
Files and hashes: 1: rUk9yaPSQDSDYoWHBR93lRWJFnk.crl (hash: /tbLCLfoYDFOVqyPRVwoFquxQ4MuYXD0sqTihEJTs5Y=)
2: 8275E1721C5311EDA75CF137C4F9AE02.roa (hash: ylAjtSurS2AriNqYAWDXwI4mJ+u3ceX6ZX3mIJq8z+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679
Validity
Not Before: Jan 31 02:08:34 2025 GMT
Not After : Feb 7 02:08:34 2025 GMT
Subject: CN=679c30a3-d313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:65:a5:19:87:4f:88:54:f3:89:1c:ce:2e:
bf:9f:19:cb:df:45:e7:47:9e:41:1a:e0:a6:5d:4b:
a6:87:b8:cb:b4:a8:21:6d:6a:70:ea:27:80:0e:d3:
b2:b0:bd:1a:ae:6d:5b:f7:03:79:eb:36:35:92:23:
2d:15:dc:bb:6f:e1:9c:6c:a6:ec:f4:81:4e:ae:d7:
75:ec:e5:b9:97:ba:bc:fe:c9:02:51:9b:3a:8c:9f:
de:ef:48:2a:84:ef:31:4e:5c:67:29:10:be:18:cd:
9b:8d:09:1d:8b:b2:ec:e2:c1:9c:00:85:81:02:d4:
36:30:42:85:b7:2c:46:ac:96:5a:fc:40:c6:3a:c2:
2a:55:7a:53:09:98:ff:9c:64:5b:99:ba:f5:42:03:
b9:fc:7f:4b:06:57:f6:ba:ce:46:91:dc:04:23:13:
74:15:a3:06:af:f0:75:ab:85:2e:ed:4e:4d:01:61:
af:18:69:b9:92:04:55:74:20:59:9b:b2:99:b2:79:
cd:32:51:c3:ec:66:09:da:f6:1f:05:85:4d:ee:36:
9c:c9:1b:4a:45:68:e4:42:4b:07:68:37:27:d7:a5:
6b:a9:9d:15:f0:58:74:4b:3a:cd:af:c9:ac:81:18:
e9:4f:21:0e:94:25:83:eb:03:1b:6b:f4:95:9e:b5:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:99:94:7D:1C:A7:54:BA:E6:3C:25:B3:72:52:4B:FD:65:49:64:AE
X509v3 Authority Key Identifier:
keyid:AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c1:5a:01:38:77:96:c8:48:0b:48:de:14:c3:2e:c3:77:62:
54:10:d5:fd:12:a9:79:1b:e1:4d:80:fe:19:3a:32:ee:a1:bd:
4d:b4:37:c8:53:9d:45:05:98:8a:d5:2d:3a:e7:92:26:84:95:
b9:2b:f9:5a:a7:6f:a6:54:0f:24:09:63:66:dd:fa:d8:fc:93:
39:38:d6:13:02:92:2a:b9:c3:d4:f5:30:64:6b:ad:f8:18:21:
25:78:f0:cc:65:5b:83:ef:b6:1f:ff:15:8c:d9:af:31:03:5d:
8c:91:fd:2a:68:e5:b0:33:8f:bd:d1:81:92:5a:7c:37:93:9d:
08:c0:02:07:59:5e:ad:cd:f5:16:a7:ef:62:73:dc:97:68:b7:
fa:da:ca:65:47:59:8b:e9:34:65:da:97:ca:e3:2c:79:ad:4a:
ac:ee:68:46:4b:c4:84:6a:db:db:da:f9:8c:a1:ad:e2:ed:74:
ef:68:58:ca:7b:b9:11:65:74:ed:ea:3f:8d:4c:25:4d:a5:df:
3a:1c:f7:a1:69:8b:b5:e8:75:63:9a:79:90:ac:2b:59:bc:b5:
7d:64:8b:63:82:f8:b1:a2:8a:52:61:e3:fe:3f:42:bf:75:c9:
74:99:bc:07:58:97:a8:1f:c4:7b:cb:df:71:9e:f6:79:d1:25:
f4:75:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:43:10 2025 by rpki-client