Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
File: UPqOjU4pl_9d5gjaeMrGVMzRabY.mft (raw, json)
Hash identifier: V4UlEmGVxLPxD/CVXeKsjSvGSvDf8jtpFHS66q0v71c=
Subject key identifier: FD:93:A6:18:BF:29:04:31:92:F6:4B:71:85:13:0E:4E:57:D4:B0:50
Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6
Certificate issuer: /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
Certificate serial: 08AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
Manifest number: 08A5
Signing time: Thu 30 Jan 2025 20:36:12 +0000
Manifest this update: Thu 30 Jan 2025 20:36:12 +0000
Manifest next update: Thu 06 Feb 2025 20:36:12 +0000
Files and hashes: 1: UPqOjU4pl_9d5gjaeMrGVMzRabY.crl (hash: It+L8Vy2mi1gxpwUdjc9K1lbYCAROwfnu75e1drMjH8=)
2: CD095756AF1211EAA486D140C4F9AE02.roa (hash: Z259vozdwtPUaPkxXgMTZo8w1xwG+zonsUhvjUkyWKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222 (0x8ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
Validity
Not Before: Jan 30 20:36:12 2025 GMT
Not After : Feb 6 20:36:12 2025 GMT
Subject: CN=679be2bc-2937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:96:a7:9b:98:82:77:a5:81:7a:9a:19:07:
90:ff:57:50:43:89:e8:fc:22:7a:60:f5:a0:63:7c:
95:3b:14:5e:7a:a0:75:8a:28:f8:fb:f8:ea:a9:87:
2d:63:2b:b4:48:3c:46:6b:00:7a:c3:b4:ba:7f:0a:
43:eb:b8:67:38:17:16:a7:45:50:df:79:45:1c:98:
d2:16:da:30:62:d0:f7:42:9a:85:ac:85:e2:fa:8e:
1f:3a:2c:73:84:7c:74:e1:8a:78:83:05:c4:51:d8:
e5:19:1a:24:a4:52:f9:26:53:98:ca:d2:a9:02:e4:
b5:4c:8c:2c:e3:30:96:65:88:0b:5f:a0:c2:25:c5:
73:ee:15:f4:2a:a9:a0:1b:89:37:39:17:b2:d0:64:
c7:05:3a:de:79:98:14:c2:6c:1a:20:9b:99:4f:a6:
00:09:6a:b6:3d:37:fd:ca:5f:09:a1:b0:cc:19:ca:
92:3e:96:b1:49:89:c8:b5:7d:1c:cb:38:d6:8a:d0:
11:43:28:61:6f:5f:c2:90:f9:a2:9f:a8:f2:2c:4d:
ef:11:61:7c:98:71:10:8e:b0:6b:4b:2d:48:40:65:
d8:a3:3d:b6:ef:76:bb:36:3e:48:de:b3:57:51:7f:
63:46:29:ae:bf:0c:98:f8:e2:02:44:ef:44:68:7e:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:93:A6:18:BF:29:04:31:92:F6:4B:71:85:13:0E:4E:57:D4:B0:50
X509v3 Authority Key Identifier:
keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:53:e9:cd:54:a5:38:a7:0d:46:d4:53:90:98:2f:be:8f:89:
90:9e:d6:9a:63:0f:2b:ce:d2:c9:0b:8b:19:37:e3:a4:d5:90:
ee:04:51:45:ad:b1:cd:39:5a:a4:e7:cb:86:06:0e:0d:d2:c7:
5f:fb:5d:de:ab:a6:05:5b:b9:02:13:7e:dd:2b:28:23:7d:f2:
21:ae:05:8c:af:d9:6e:b9:7c:eb:d3:d6:16:93:44:e2:41:ad:
11:99:4c:0a:09:84:00:10:4f:8c:f7:61:d9:69:f3:cf:70:61:
a8:98:bb:9c:25:b8:3a:f5:2b:7e:77:77:95:43:be:a6:08:e5:
74:58:e5:0e:df:31:6d:7f:79:60:cf:c0:5c:f5:74:00:1c:ea:
4e:ab:f5:c0:0d:6f:29:ed:7c:7b:9d:7a:6e:e0:d9:ca:45:01:
60:d5:d2:06:2e:d3:bb:cc:d1:5d:9a:ea:25:fc:21:77:fb:92:
be:57:6c:7d:52:34:7f:ca:62:5a:05:d9:37:9f:ee:b6:68:01:
86:12:99:b8:0a:8e:ab:63:21:94:83:81:bc:b0:d3:01:0e:d2:
59:fe:37:df:37:60:1a:da:f8:99:68:06:69:63:95:39:cc:e9:
17:0e:96:87:a3:53:80:58:60:01:1d:47:4d:80:30:fc:4b:d0:
1d:93:83:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:32 2025 by rpki-client