Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier: 4NNUkt9fmA0nPgvyq2rocl77SMG4BooEgC5DlfDq6V4=
Subject key identifier: 43:65:26:28:79:2E:62:BB:71:34:50:8D:08:80:D1:34:DF:A1:B7:F2
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial: 0324
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number: 0315
Signing time: Fri 31 Jan 2025 01:17:58 +0000
Manifest this update: Fri 31 Jan 2025 01:17:58 +0000
Manifest next update: Fri 07 Feb 2025 01:17:58 +0000
Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: TiZKpJqHPqrRBFXJ7aPZrgowALZlGDfbxvwx3fP1K0Y=)
2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=)
3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=)
4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804 (0x324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Validity
Not Before: Jan 31 01:17:58 2025 GMT
Not After : Feb 7 01:17:58 2025 GMT
Subject: CN=679c24c6-510f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:05:b6:52:67:0e:d7:29:db:e1:3d:14:72:80:
0d:4c:ae:98:3c:dc:03:b8:dd:ff:35:f0:68:c4:aa:
bd:48:26:cc:b3:8b:49:ff:a3:d4:78:fb:a4:90:44:
6b:b0:24:52:7b:27:db:48:0d:8a:e5:5b:eb:b1:97:
f3:be:80:11:4a:5e:78:b9:40:5f:19:92:ab:dd:f3:
83:17:14:58:6e:09:45:6b:d7:19:17:50:61:f2:89:
97:5a:24:ae:e4:83:a8:5b:3f:76:e8:9b:83:dd:65:
68:da:08:33:4c:0b:98:ca:91:29:06:ae:39:88:c2:
88:a5:4f:11:f8:af:0b:3a:0d:27:74:9b:2b:e7:64:
4c:d1:2d:98:26:03:77:68:61:01:a4:73:4e:2c:51:
6e:03:5d:fa:4b:6d:bf:d5:91:04:ed:84:21:23:77:
49:fc:e2:76:8d:c5:8c:ac:22:14:4b:41:c4:28:d0:
36:fa:33:5a:f0:e0:39:2d:47:42:3c:08:39:36:ac:
69:9f:8c:d8:fb:56:36:81:d0:db:b2:31:c3:05:9c:
06:56:11:2d:f3:48:d6:b8:f3:91:16:41:35:23:74:
a7:51:08:a2:24:21:02:92:12:2f:a9:b5:b7:92:3d:
15:9e:bd:7c:5f:b2:ce:1d:84:db:56:34:5c:c8:6c:
d0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:26:28:79:2E:62:BB:71:34:50:8D:08:80:D1:34:DF:A1:B7:F2
X509v3 Authority Key Identifier:
keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:3b:bc:6b:d5:03:ac:64:6b:48:d5:84:b7:ab:73:81:1f:
8e:f7:7d:c6:34:f9:de:70:91:6e:12:12:70:ef:02:50:ac:51:
e2:d0:7e:d5:32:7f:d7:22:21:9a:54:11:59:d5:30:34:ac:71:
89:4c:a9:c9:5a:32:e9:55:99:21:97:8a:c0:de:4d:26:1e:84:
71:5b:ec:b6:96:fb:ca:6f:db:1c:3d:60:06:77:56:c7:2c:02:
c8:5f:89:3b:a1:1d:20:0f:97:e5:71:f4:bd:df:d4:9c:08:e5:
9e:8a:5f:c1:cc:92:25:72:51:77:63:ce:7b:d5:d7:58:06:07:
dd:50:52:25:5f:05:dc:39:e8:6e:68:fd:08:98:af:35:98:2e:
7f:8d:f2:b4:66:c2:54:14:ed:bf:6d:64:65:b9:2f:4a:1d:a8:
f0:46:78:3d:bd:95:f1:e6:4c:91:68:f6:02:1b:62:0d:42:7d:
5b:35:02:6f:ae:b5:72:00:2a:d7:7a:17:d0:4f:85:15:ba:bc:
29:d8:5d:3a:36:89:04:8a:9c:50:e6:54:11:74:e3:df:e7:17:
c5:ed:a1:b6:fa:20:8f:df:a7:17:a2:22:fc:61:f4:31:66:d0:
03:2c:26:0d:c4:7d:a1:88:e2:b3:8c:25:97:a4:6c:dd:2b:24:
bb:68:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:14 2025 by rpki-client