Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft
File: udznqYvOfA4oMosTy-q1Qx0PZr0.mft (raw, json)
Hash identifier: wMqOyv/otkZwHxpwYQHfLYM3T2SIVRFyXwNj6/LqiMU=
Subject key identifier: 1E:89:FF:C8:37:20:15:A7:9C:D0:39:95:AC:42:A1:F7:F4:B4:12:29
Authority key identifier: B9:DC:E7:A9:8B:CE:7C:0E:28:32:8B:13:CB:EA:B5:43:1D:0F:66:BD
Certificate issuer: /CN=A91C0C0C/serialNumber=B9DCE7A98BCE7C0E28328B13CBEAB5431D0F66BD
Certificate serial: 0362
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft
Manifest number: 035A
Signing time: Fri 31 Jan 2025 01:02:15 +0000
Manifest this update: Fri 31 Jan 2025 01:02:14 +0000
Manifest next update: Fri 07 Feb 2025 01:02:14 +0000
Files and hashes: 1: udznqYvOfA4oMosTy-q1Qx0PZr0.crl (hash: /9dNzVgr/85cwME44SkFnRHLYmbcy5hc6Bx0DqNvjyg=)
2: 5FD6BBF27CEB11EDA3D10364C4F9AE02.roa (hash: FeTKcL37y87AiZQuqO53nGkPmfENZeWjr7lrGLOMLWk=)
3: CA86B0DEFC4D11ECA947C41FC4F9AE02.roa (hash: j39oIouyNt6HwKg9AT6DRdXmatC+dHV5URxElCtlOp4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C0C/serialNumber=B9DCE7A98BCE7C0E28328B13CBEAB5431D0F66BD
Validity
Not Before: Jan 31 01:02:14 2025 GMT
Not After : Feb 7 01:02:14 2025 GMT
Subject: CN=679c2117-68a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:a9:2d:9c:4c:ed:fd:f7:9a:31:78:4c:99:
8e:3f:21:bd:55:b5:a5:03:8e:37:c5:ab:e6:60:b1:
2d:1d:cb:74:97:e5:2c:92:bb:cd:bc:29:94:14:6c:
86:dd:b6:a7:50:95:2c:ad:7e:eb:82:96:b7:f3:fa:
1e:21:71:bd:a0:37:1f:05:41:db:24:42:38:c2:0e:
9f:e3:28:ec:2c:49:c3:e9:4c:ba:62:52:10:d1:ea:
76:a6:22:d7:ca:de:d2:98:df:65:54:2d:fb:f6:e2:
9c:fe:bc:c1:b7:f0:39:2a:14:82:23:ae:aa:09:86:
7f:be:c4:e6:5e:5f:da:a8:45:ba:72:09:43:05:9e:
d8:a8:9d:d8:eb:7b:e1:ac:4d:e0:c6:ec:22:14:04:
23:1e:37:c7:6f:2d:7b:73:3a:bf:0b:d2:0e:1f:91:
b5:cc:4c:a2:cf:c1:83:a5:ce:6d:c3:09:bf:2c:a8:
fd:f5:2c:e3:3c:3b:40:41:91:c4:24:86:cb:d7:3f:
4a:51:c1:46:f5:88:12:f8:74:fa:fc:b1:ff:cc:d1:
8c:d7:c0:cd:6f:25:5d:10:23:b9:04:fa:f7:dc:40:
33:1e:51:74:a6:6c:b8:48:b2:03:e7:5e:38:23:06:
ce:5b:13:67:31:25:75:3d:65:ba:2f:6f:08:d5:89:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:FF:C8:37:20:15:A7:9C:D0:39:95:AC:42:A1:F7:F4:B4:12:29
X509v3 Authority Key Identifier:
keyid:B9:DC:E7:A9:8B:CE:7C:0E:28:32:8B:13:CB:EA:B5:43:1D:0F:66:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f2:8d:b6:25:8c:52:f4:93:4e:21:45:68:c3:86:87:2f:2d:
85:1e:6b:fb:61:01:fd:5b:ef:02:c9:cb:ac:e2:e2:76:1d:84:
0c:2a:f7:bb:a7:2f:2b:7a:9d:e7:8e:ec:17:e0:ef:e6:63:52:
d0:75:2a:d8:a5:53:df:c0:60:e5:4d:e8:ec:be:fa:bc:d4:48:
bb:6f:80:01:9a:0e:eb:e3:2a:7b:ca:36:cd:e6:24:da:56:69:
0e:0d:d2:ba:71:de:66:56:e0:dd:9b:13:94:34:9c:9b:68:3b:
12:00:7f:11:bf:b7:ea:dd:59:1b:5d:30:df:db:49:ea:0f:3e:
09:8d:64:da:cc:cf:cb:6e:82:b9:c4:8d:3b:4c:78:41:96:33:
2e:64:38:20:4f:37:fe:79:b4:0d:38:cd:78:b4:4b:54:c8:77:
23:79:5b:c6:cb:1c:06:c2:01:da:16:2a:cd:48:fa:e1:8a:5a:
a3:d1:75:7c:a5:1f:49:1f:72:3d:0c:fd:c5:f3:16:83:e2:0b:
d5:75:8d:d2:2b:69:d0:00:dc:80:e5:3e:eb:41:5f:50:4c:29:
64:3d:9f:c7:3c:d6:b2:67:96:aa:9c:31:13:63:8d:5c:6a:9b:
cc:c9:5c:f0:9f:c0:33:40:03:50:f0:21:f9:f1:07:1c:dd:5e:
bf:10:7f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:23 2025 by rpki-client