Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft
File: UNqjonFb7c_nFOVthUH381hubvc.mft (raw, json)
Hash identifier: i/KdNyPMxsDcrHhAQZgdSXiVEIKeZARgjee7q6cmegk=
Subject key identifier: 4D:13:E5:E1:99:4C:FE:C4:0B:44:46:B3:B1:3D:D0:D6:D7:60:05:F3
Authority key identifier: 50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7
Certificate issuer: /CN=A91CBBC4/serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7
Certificate serial: 04A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft
Manifest number: 0498
Signing time: Fri 31 Jan 2025 00:00:56 +0000
Manifest this update: Fri 31 Jan 2025 00:00:56 +0000
Manifest next update: Fri 07 Feb 2025 00:00:56 +0000
Files and hashes: 1: UNqjonFb7c_nFOVthUH381hubvc.crl (hash: KJ7BcGHsEqgDstSGo75tWxJIujoZ2SRojGXTyH19kfE=)
2: 8E8A375A1FA211EC8159E249C4F9AE02.roa (hash: UmJY1BD67VDnKp5rZ226vLsxoH0ZrDVh7W0eseZRq3E=)
3: 2B6A29201FA011ECB867890CC4F9AE02.roa (hash: 4+mLuZV5Nt0cl9Ubgj32YK1pqSi8VCWk8bD6pptyrXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBBC4/serialNumber=50DAA3A2715BEDCFE714E56D8541F7F3586E6EF7
Validity
Not Before: Jan 31 00:00:56 2025 GMT
Not After : Feb 7 00:00:56 2025 GMT
Subject: CN=679c12b8-76c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:f7:80:64:68:62:2b:89:c5:ae:0d:14:21:
11:a1:50:11:70:74:e0:0e:dc:50:77:97:3e:3b:c3:
c0:90:4f:c5:df:10:54:af:92:72:a8:5f:c6:82:b8:
06:ac:31:4d:61:73:9a:35:cd:bd:54:5a:ea:59:27:
68:8f:aa:97:a5:6b:df:be:81:c4:03:74:8a:60:0f:
15:bd:e0:e4:16:69:6a:79:d8:b2:d0:90:c4:96:78:
05:57:2c:9f:85:05:92:cc:ca:4e:83:1b:b3:31:29:
ac:9c:29:32:4d:ab:f0:08:25:68:89:c1:fc:a4:01:
ac:4d:90:90:0f:1b:6e:8c:c0:8c:62:6b:75:e6:84:
52:e3:5d:51:47:31:dc:d6:e2:fd:ad:96:6e:40:95:
9a:75:0c:32:77:2c:7d:6f:6d:86:41:b7:9a:f6:e7:
86:c7:ff:b2:d1:16:53:e1:28:1e:af:3b:8f:50:e7:
0e:d0:bb:3d:65:09:90:a1:6f:cc:b8:7c:7b:81:a4:
92:e6:3a:db:ef:a1:a7:d0:cf:46:87:ea:72:11:01:
a5:99:7e:bd:ea:13:8f:34:e4:4b:90:b6:a8:fb:6a:
50:b5:68:6d:b1:a8:aa:7c:e7:9e:ae:59:91:45:d6:
d1:2d:92:0b:4e:f4:56:fe:ed:38:7b:ca:0e:a2:8b:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:13:E5:E1:99:4C:FE:C4:0B:44:46:B3:B1:3D:D0:D6:D7:60:05:F3
X509v3 Authority Key Identifier:
keyid:50:DA:A3:A2:71:5B:ED:CF:E7:14:E5:6D:85:41:F7:F3:58:6E:6E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNqjonFb7c_nFOVthUH381hubvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBBC4/3C4B01321F9C11EC9094F05DC4F9AE02/UNqjonFb7c_nFOVthUH381hubvc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:49:2b:f6:90:35:a0:7c:cc:c3:39:aa:36:c7:be:7e:53:80:
cd:10:ee:78:c8:4d:30:f5:ff:36:90:6a:c7:10:36:b1:87:86:
b4:e8:7d:49:30:44:df:db:b6:1a:f9:9d:5b:81:59:44:3d:16:
75:45:0c:f1:e3:37:09:48:18:a5:c0:f7:8c:c2:a8:9f:2a:f6:
0f:0a:8e:19:09:ac:63:21:c9:7f:23:6d:a1:e8:15:8f:50:12:
77:2f:b7:7b:33:78:45:25:78:74:fe:ed:70:39:3e:dd:a8:c7:
fd:03:59:49:81:5e:b8:bc:93:fd:f8:1b:ae:1a:67:fd:21:3a:
43:b8:9e:ef:f7:f9:f0:88:a6:c7:0f:28:8e:f4:2d:d3:f8:3a:
6f:4a:bd:90:93:ea:a4:a0:bb:a5:d2:37:1f:18:15:76:54:fc:
d0:ed:b9:3b:ae:40:94:72:d0:07:80:1b:e3:ab:a8:95:d6:89:
42:98:8b:e1:9c:e9:af:ce:e2:fa:82:ed:eb:fb:59:37:f5:bc:
5f:e9:66:fc:64:43:69:fc:82:04:06:0c:d9:72:b8:af:3e:2c:
6c:72:ff:05:60:3d:6e:75:58:f1:97:6c:68:fd:95:29:b1:f7:
b9:cc:10:f2:59:94:98:2e:1a:29:88:5b:e8:0a:c0:cc:51:b2:
df:54:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:49 2025 by rpki-client