Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json)
Hash identifier: Q+GSuRGxbCQRibw7MeoeSRN8PhbQxrXn2MXhSOux+Pw=
Subject key identifier: 9B:E1:33:AE:A0:2F:F0:09:25:FD:7C:89:98:6E:6C:32:19:27:A2:45
Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F
Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
Certificate serial: 0C08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
Manifest number: 0BFF
Signing time: Fri 31 Jan 2025 18:30:15 +0000
Manifest this update: Fri 31 Jan 2025 18:30:14 +0000
Manifest next update: Fri 07 Feb 2025 18:30:14 +0000
Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: LP/zJx+SGxiL6WAtAeoL1lesJGYu8NBExFh8cfLnFLQ=)
2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: hOu5ZeqxYN16DF3xRjjzQeKfwsoZQp+9xHJC5zCyNDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080 (0xc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
Validity
Not Before: Jan 31 18:30:14 2025 GMT
Not After : Feb 7 18:30:14 2025 GMT
Subject: CN=679d16b7-39ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:04:ba:9a:8e:cd:d1:93:25:b3:fd:18:66:
1e:06:bb:1f:69:eb:1e:43:9f:f7:8e:7f:c6:8c:6d:
17:50:2a:d7:c5:51:10:80:68:18:9e:c1:a7:e7:8d:
77:a2:08:4b:18:04:76:19:11:85:03:d3:66:79:2f:
ec:21:5a:f9:60:fe:f9:3e:4a:ab:b7:c5:98:fc:80:
2c:13:6d:40:73:34:05:93:1e:af:3a:b2:b7:bf:72:
65:62:f8:f9:04:c3:2f:29:bb:48:46:6e:c0:a2:b6:
d7:ab:cd:42:9e:d0:8a:41:53:e5:bc:f6:cd:17:d3:
51:94:31:79:53:56:08:da:19:2e:83:9f:e5:3e:cb:
c7:cf:b9:ba:41:ce:6c:05:c3:7c:a2:0a:41:7c:fc:
63:d4:ce:da:16:23:95:1b:f4:4b:66:bd:7a:90:26:
95:7e:55:64:7b:f3:2d:83:87:cd:4d:ff:cf:17:b8:
df:6e:1f:e2:7f:09:44:83:68:02:c3:02:22:81:8b:
f2:6f:04:a1:12:07:05:97:e5:2f:a7:42:2d:6c:ee:
f3:a1:ff:ed:0f:0e:e9:e7:bd:84:9e:fb:f5:ab:b3:
4a:2d:49:b1:40:5f:9d:fc:f2:2d:ba:a6:de:e8:88:
93:71:fb:74:97:ca:d6:5a:c5:16:80:02:a2:14:1c:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E1:33:AE:A0:2F:F0:09:25:FD:7C:89:98:6E:6C:32:19:27:A2:45
X509v3 Authority Key Identifier:
keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:93:33:bf:84:e5:0e:00:96:e7:29:0b:d4:51:05:35:d8:db:
c2:31:b8:86:eb:91:ba:d2:21:e0:51:36:1c:6a:85:f1:7e:de:
d5:fd:92:a2:16:dc:f1:e9:08:cf:ee:1c:4e:1c:65:65:96:61:
b9:90:f7:6b:fe:de:b4:69:eb:a2:76:cd:fc:c4:81:a9:2d:7f:
44:7b:a4:e4:e8:e4:63:48:86:e7:15:3d:f9:e8:5a:98:d3:ce:
ac:2b:40:4f:c2:46:da:c8:40:2c:22:2d:0b:c1:fb:e9:26:44:
cf:da:6d:fe:16:76:33:59:f6:c5:e3:3b:32:e2:c7:1c:ba:2d:
d5:22:de:a0:31:3b:b7:13:90:8b:2a:e0:e7:74:44:07:25:fb:
d6:3b:7b:4b:1a:cb:8c:84:d2:1e:51:b4:d7:21:2a:c1:a2:a7:
c9:3e:11:54:a3:2a:1a:28:cd:99:dc:16:3d:7f:35:7d:05:6e:
f0:c1:90:a7:59:c1:1d:9b:51:9a:a0:33:a3:01:4f:92:90:31:
68:29:1f:e6:a4:22:dd:44:6e:14:87:c1:7d:1c:90:d5:08:0a:
a1:dc:09:18:9b:fa:bb:35:35:ae:9f:b6:73:b4:cb:44:5d:a7:
ff:c2:77:28:bf:c0:36:db:93:7f:81:42:68:3a:44:bb:e5:bd:
61:4a:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:04 2025 by rpki-client