Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
File: uKIid-zGsQo9ICqjkMyn-7kqRuA.mft (raw, json)
Hash identifier: E9Gsnj4iSNOkwS0pVpno81LpZtJzYyuf/1nPjDuqcYI=
Subject key identifier: BD:24:C5:62:B5:BA:F5:C1:72:4E:A8:C6:41:57:AE:52:54:08:11:F4
Authority key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
Certificate issuer: /CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Certificate serial: 032D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
Manifest number: 0329
Signing time: Fri 31 Jan 2025 01:15:19 +0000
Manifest this update: Fri 31 Jan 2025 01:15:18 +0000
Manifest next update: Fri 07 Feb 2025 01:15:18 +0000
Files and hashes: 1: uKIid-zGsQo9ICqjkMyn-7kqRuA.crl (hash: ZV/tmg87sMowJ3X3ntlbGfZBDkD148WFFxwlE8gnuvU=)
2: AF08CB4CC77511EC81DCA645C4F9AE02.roa (hash: fCg3LsUh16wFnDfXkxVhThF2ZOUkgckgr+TaTcI9RIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Validity
Not Before: Jan 31 01:15:18 2025 GMT
Not After : Feb 7 01:15:18 2025 GMT
Subject: CN=679c2426-3741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:c6:4f:88:87:c8:50:96:1b:26:51:59:e9:
64:ce:06:87:70:58:3c:5a:cc:45:5b:bd:1c:a7:2c:
b1:b5:02:7a:b8:c5:ff:a7:6d:7a:e0:84:10:00:5c:
a7:ed:0e:31:db:6b:f0:7f:42:ac:c2:b8:6b:4d:c4:
d3:c9:cb:ed:6b:77:57:5e:28:e0:ce:1c:61:00:39:
de:bf:a1:87:32:a8:e7:fe:66:9e:ac:15:a0:bd:af:
3f:4e:43:a4:06:bc:fe:56:79:71:3f:2e:1b:40:0b:
c5:9a:83:12:cc:77:89:dc:0f:a1:ad:f3:73:b6:ec:
85:6c:cf:eb:bf:be:d0:c9:a6:80:cf:43:fe:0b:40:
ea:1b:bd:5b:7e:33:32:28:a9:b2:e2:ac:22:3e:5c:
0f:b6:aa:f4:83:2d:37:e3:90:9f:9f:6b:7c:ac:f8:
8a:37:3b:9d:55:ab:b9:f0:24:6b:72:2e:20:ee:fb:
b1:40:20:1c:77:4d:5a:5f:97:ad:38:60:fb:56:df:
27:8e:18:e0:69:05:37:1b:39:e3:f1:b0:b0:e7:6e:
83:d5:00:c4:f9:8b:7f:3b:5f:d7:1e:25:a8:99:f3:
7c:b4:44:e2:a7:a2:1c:f8:44:fd:bb:8e:7c:31:fc:
2e:97:e3:cb:b3:98:cd:04:00:60:ee:e7:ed:cf:c4:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:24:C5:62:B5:BA:F5:C1:72:4E:A8:C6:41:57:AE:52:54:08:11:F4
X509v3 Authority Key Identifier:
keyid:B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:64:9d:a3:9f:6e:2a:ae:98:83:aa:4d:e2:a9:f7:7a:41:fa:
3e:92:c7:45:05:47:df:36:c0:8f:c7:15:33:0f:b2:47:64:93:
25:6a:4b:69:e4:68:52:51:05:ab:02:d5:52:60:f2:60:ee:fc:
59:24:0c:b9:70:38:e2:0f:08:cf:46:c7:17:27:82:20:ef:3a:
ad:1f:ca:6b:3c:b0:02:c8:41:1f:6c:37:37:0e:59:94:ac:c9:
38:a9:4e:5d:5c:40:84:b4:27:6d:66:32:f6:5e:19:63:07:5b:
7b:9d:b0:88:8d:84:8a:65:e1:89:3d:15:7b:65:20:0b:17:aa:
d5:32:84:f9:d3:ab:08:2f:85:33:ca:d5:cb:0d:59:64:49:26:
55:d0:14:82:af:f3:78:0d:6e:a5:42:61:54:bc:f9:bc:69:71:
f4:cd:8d:f2:81:b1:db:3c:45:61:f6:33:89:d7:6d:5a:d8:d4:
70:e4:4b:08:bc:19:d9:f3:ac:0e:71:0a:53:3c:53:d8:b7:9e:
61:e4:6c:51:8d:ce:70:2c:0e:e4:a5:3b:b6:6f:a7:41:d6:16:
00:35:fb:c1:08:79:cf:40:5e:9f:c1:7e:b8:2f:2e:6b:76:eb:
ed:21:ff:d7:30:81:fb:13:ab:72:e4:e1:ae:19:70:79:63:db:
85:c1:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:59:07 2025 by rpki-client