Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json)
Hash identifier: NDBGuz3BXPOyrJfjlBLgH6dq1jpnQZ92dCqf5gX6/Qg=
Subject key identifier: 2B:C9:6C:28:C5:75:12:BA:21:8A:7D:89:B2:46:04:DB:3E:09:B7:27
Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
Manifest number: C6
Signing time: Fri 31 Jan 2025 05:02:37 +0000
Manifest this update: Fri 31 Jan 2025 05:02:37 +0000
Manifest next update: Fri 07 Feb 2025 05:02:37 +0000
Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: 9oTvO5ojnxaJUfY78oGC/NJTBh8WzKSbmoPfsv9OLzE=)
2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: Cg10Lh1/jWjaqO5EBHv5C6vMK3khuwZ/+iMJMpvh7AE=)
3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: lJjM0vXxFGkR8fpKRXKFywWPgH/0gbH+qkVNiWKRaAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Validity
Not Before: Jan 31 05:02:37 2025 GMT
Not After : Feb 7 05:02:37 2025 GMT
Subject: CN=679c596d-31f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:22:e8:5a:8a:df:69:df:4d:52:73:ab:a0:
44:5c:91:5b:cc:b7:1c:70:ff:57:6c:66:91:71:bc:
51:d0:9e:4a:ac:13:66:2a:58:8c:8b:48:d4:cd:08:
7d:5d:0f:e1:db:46:a2:3d:86:08:ae:5b:09:e2:47:
1c:dd:48:a6:08:a3:cb:5a:f6:59:d2:74:0d:d5:e0:
aa:f5:f5:e6:b6:f4:f9:57:59:d1:ff:d7:34:3e:63:
a7:ba:cd:50:ea:2d:23:70:0c:7d:a5:dd:65:98:88:
72:8f:c9:fa:33:10:f2:a5:89:3e:9b:6c:d8:52:69:
8a:6f:eb:27:23:57:fe:09:c7:1c:36:3a:d7:ab:f9:
19:ca:36:23:41:93:03:ed:aa:47:0c:22:9d:b1:1a:
1a:41:87:48:12:e3:35:c1:76:94:04:51:fe:a2:43:
c3:75:cb:e3:ca:5b:8d:d0:c0:c9:51:17:46:34:ef:
74:a0:d7:bb:87:67:ac:63:43:c3:51:eb:eb:78:09:
ca:fb:22:b6:7a:41:f4:5e:a8:cb:32:62:50:94:ff:
3c:09:49:c7:5a:13:75:e0:5a:55:33:c7:37:81:58:
a0:b3:a6:53:c3:f4:d7:1d:f2:ad:a3:93:fb:8b:75:
e8:35:11:69:ba:5e:90:18:8b:d2:b4:b0:8e:56:01:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C9:6C:28:C5:75:12:BA:21:8A:7D:89:B2:46:04:DB:3E:09:B7:27
X509v3 Authority Key Identifier:
keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:a9:e9:26:4c:c1:67:6c:d9:1b:df:2e:a8:bb:88:a3:7f:73:
7a:5a:f2:8f:fb:e1:1b:ef:6b:cd:d0:88:39:73:d3:22:10:1a:
bc:1b:03:64:56:d6:0c:e5:dd:61:98:3c:06:bf:ae:06:bb:64:
32:fa:bd:1e:78:52:99:97:b3:2f:d4:a5:76:51:81:36:ba:75:
93:3d:f2:9b:c2:af:4c:10:3e:4a:db:20:84:3b:bd:f7:3a:e9:
8c:ea:f0:6f:a2:14:b2:c6:4b:fe:07:b7:27:78:7b:e3:9c:6f:
98:0e:c9:39:6c:96:73:d9:e1:ae:38:10:8b:d7:88:47:c8:3e:
fc:22:47:f7:a2:b6:5f:c4:5f:6e:80:19:f4:52:6c:4a:18:45:
88:ff:fb:ef:b5:0e:dd:1f:71:1d:1c:6c:5a:23:40:8b:08:be:
41:a0:df:15:d4:71:ab:0d:fa:0b:04:b9:9d:8b:0a:28:0a:92:
46:0b:36:a0:e0:1f:80:8e:47:c2:81:46:69:91:1c:c7:2e:8c:
7b:6b:37:8b:44:90:5a:68:f5:19:f1:af:16:72:c9:07:cd:32:
0d:3c:90:45:c1:6e:71:bd:9f:8c:a3:32:11:11:6b:79:21:60:
12:d8:6f:9e:12:7a:d7:86:85:e9:c7:a8:24:b7:b4:99:b8:53:
cd:f1:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:24 2025 by rpki-client