Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
File: ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json)
Hash identifier: UDRM5buCg3MyWITKsjb/CB50/w9NUUPyy6EU30mOxqo=
Subject key identifier: 6F:3E:0C:EA:32:63:6B:FE:B5:9A:7F:FA:75:02:08:F0:C6:92:96:8C
Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
Certificate issuer: /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
Manifest number: 07
Signing time: Fri 31 Jan 2025 07:14:56 +0000
Manifest this update: Fri 31 Jan 2025 07:14:55 +0000
Manifest next update: Fri 07 Feb 2025 07:14:55 +0000
Files and hashes: 1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: TQ+XgMkxxPBg2bjwr4ydWyjNH8Mv2HTr4DJYncNKizw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Validity
Not Before: Jan 31 07:14:55 2025 GMT
Not After : Feb 7 07:14:55 2025 GMT
Subject: CN=679c786f-2402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:6a:cb:e9:a4:5e:11:4d:18:97:8e:42:f8:
5e:e6:db:87:31:a8:85:0b:20:d0:ea:bf:ff:e5:95:
92:84:11:d1:f5:c5:ad:ec:1c:46:8d:7a:25:27:02:
c0:c5:bd:8a:0f:c7:d9:bd:06:ff:92:57:f6:bc:f5:
40:cf:1c:e0:6a:67:42:64:af:f0:37:18:34:37:98:
cf:de:2a:41:9f:4c:19:bf:b1:27:c7:97:96:58:7b:
d7:de:8f:c0:96:3c:02:0e:d1:1e:23:4d:25:4c:23:
44:37:7c:9e:0d:01:a7:f3:3b:86:2c:c9:36:03:63:
2e:69:e6:cd:f1:c8:29:0a:df:b2:08:2e:d6:f7:be:
c7:31:1d:1c:4e:24:af:c7:f1:2c:de:5a:9b:87:b2:
57:34:ee:95:00:4a:63:74:ea:a7:c6:e5:4b:ae:89:
95:14:65:92:8b:12:5c:77:89:e5:16:e8:2e:32:35:
8a:3f:93:e9:f6:fd:fb:4f:93:eb:e0:d0:51:cc:c7:
56:8a:6c:bd:b1:4c:12:c2:cc:8b:e8:0e:26:75:82:
5b:58:bf:c6:6e:b4:2b:13:cd:55:11:56:59:e8:67:
7a:13:1e:83:23:ed:4f:5b:f5:76:2e:4b:18:56:99:
58:41:c9:2b:db:3d:40:83:05:1c:c3:78:97:81:0c:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3E:0C:EA:32:63:6B:FE:B5:9A:7F:FA:75:02:08:F0:C6:92:96:8C
X509v3 Authority Key Identifier:
keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ac:a7:e8:a2:23:47:12:4e:00:2d:39:8c:bd:9a:53:1b:55:
4a:fd:62:41:30:c6:1e:f2:22:3a:95:b2:a9:2f:3c:91:60:ff:
f5:98:f8:bd:13:9d:8f:20:91:09:7b:30:b3:61:a5:1a:10:a5:
72:03:e1:fa:a4:0f:58:da:85:f6:13:ac:a6:bb:7b:5a:ed:e3:
2e:49:6e:d9:5b:bb:5f:5a:a0:fd:73:17:ea:30:be:79:1b:04:
54:c0:6a:bd:79:ed:dc:dd:12:93:52:60:46:c8:00:0c:6a:c8:
5e:28:09:99:fb:f9:59:cf:97:8f:ff:10:fa:52:14:be:3c:84:
08:76:da:38:b3:a5:2b:fd:86:e0:86:64:32:0d:b5:f8:14:1f:
b4:29:1e:89:ca:01:61:ac:98:ce:f6:91:b1:40:58:83:82:9a:
dd:4d:e8:72:7a:0e:5e:e3:0f:e4:54:e7:f2:a3:27:df:a9:76:
b8:8e:05:05:68:8a:ba:93:93:15:a8:83:2e:16:ff:ba:ea:4a:
20:40:d9:ca:b1:37:7a:98:a9:04:b6:d9:0c:dd:51:3e:47:1f:
cc:06:bc:41:a0:b4:5c:9d:b2:07:45:ba:77:80:92:ae:f4:75:
ae:54:6e:51:f8:56:dd:a1:83:c4:28:b5:87:42:79:4e:98:51:
07:0b:97:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:56 2025 by rpki-client