Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json)
Hash identifier: hLcYj+rU+ZUjtHGNvtwIhsFow3Tz7J/ZdohzmDeYLbU=
Subject key identifier: E3:85:00:EF:BA:A4:91:38:DE:A7:A4:60:AC:D1:7E:FD:5E:EF:CF:A6
Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Certificate issuer: /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Certificate serial: 0AEA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
Manifest number: 0AE2
Signing time: Thu 30 Jan 2025 19:22:30 +0000
Manifest this update: Thu 30 Jan 2025 19:22:29 +0000
Manifest next update: Thu 06 Feb 2025 19:22:29 +0000
Files and hashes: 1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: 2h0rXgLVXrqO5UlsTVdjvYfu6M3vi5exI4tpHjpsIX4=)
2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: wRvd5l9La3MSVA49dLn9S92nbQQvOi4LJr/5XnlTFpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2794 (0xaea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Validity
Not Before: Jan 30 19:22:29 2025 GMT
Not After : Feb 6 19:22:29 2025 GMT
Subject: CN=679bd175-a40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:92:be:c3:b6:a9:1e:38:e1:a5:db:5c:7f:
90:3d:88:b8:23:3f:bd:25:db:7d:d1:66:0e:e3:75:
0f:bb:c7:fc:75:f8:34:cb:22:07:61:f4:36:49:48:
d6:91:7c:52:8b:ca:a9:ce:ce:d5:63:0d:2e:07:ec:
fe:1c:d7:f8:73:71:ff:fb:e8:1a:a8:b8:a1:a2:71:
4b:fe:ef:45:58:1c:b8:1f:58:13:22:0c:5f:df:6b:
80:d5:b5:4b:f6:5b:be:84:88:b6:01:01:08:89:e2:
70:b1:b1:3c:e4:39:73:01:f1:d7:d0:4c:dd:ad:30:
bd:88:83:80:82:04:6b:2c:e2:d6:cd:74:6d:e0:80:
5e:75:b8:46:89:16:3b:04:c7:2d:0b:70:29:e8:36:
2b:c2:bb:0d:ca:21:df:1c:79:48:c5:16:6c:2f:c9:
08:72:ad:1b:b3:dd:24:94:da:ea:1c:e9:c8:6e:6b:
ae:ae:c9:35:c6:31:8d:6a:a9:41:92:9c:10:16:a2:
05:44:4f:e8:a4:74:63:e5:d5:77:2e:f7:05:95:81:
74:ff:be:f2:49:e4:5d:ac:e4:72:1d:7e:b6:b3:c7:
84:c4:3f:65:ff:1f:c4:15:04:10:5b:82:70:c2:36:
5c:88:66:60:57:4f:99:1e:0a:dc:1d:04:25:ea:4d:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:85:00:EF:BA:A4:91:38:DE:A7:A4:60:AC:D1:7E:FD:5E:EF:CF:A6
X509v3 Authority Key Identifier:
keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:64:a1:74:20:98:d2:51:ce:f6:ca:5d:ba:25:14:8d:d4:38:
8a:20:67:4d:8e:b8:2a:cc:fa:70:66:ed:3a:07:85:b0:35:51:
ab:71:1d:7b:39:36:1f:2d:3f:c0:de:e8:b0:bb:a6:4f:e0:15:
16:6c:e4:ee:39:fa:92:ab:9e:e5:fe:f5:c5:9e:4a:99:38:5f:
f0:4a:9b:2c:ae:de:b6:9b:f7:14:c5:40:f0:9b:98:6a:bb:bc:
3c:4f:24:c1:5e:7c:55:b6:ef:20:fa:43:4d:6e:99:82:3f:73:
31:a0:f2:a1:59:91:21:02:59:0a:40:e3:fc:e5:ea:42:d5:98:
84:e1:a5:df:c7:b8:d2:4b:2c:20:9a:09:51:73:7a:d8:f4:9f:
83:87:04:a0:11:a6:4e:8d:9a:2e:ab:8e:b1:07:59:18:48:97:
bd:7d:d7:4e:26:fd:ef:23:e3:f2:76:72:62:92:e9:09:4e:4e:
69:33:b7:09:fc:25:eb:82:7b:cb:aa:95:8d:3e:dd:6a:d5:60:
46:6c:8f:f3:da:1b:49:b4:1f:5e:ec:4e:f2:e4:a8:32:63:78:
c1:7f:97:06:62:79:50:b0:cb:96:aa:85:9a:6e:77:73:a8:ec:
02:19:99:c5:1d:08:ed:07:51:07:c2:48:00:2b:f4:3c:87:50:
35:ab:8a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:53:57 2025 by rpki-client