Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json)
Hash identifier: US6sb7aQfbKWNPDSFs7y4K1I+Yb4nkxv8NXx4eU0Org=
Subject key identifier: D3:98:3F:23:BA:9D:43:F8:A6:90:0B:F3:9D:70:95:78:92:1F:06:C9
Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Certificate serial: 039C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
Manifest number: 0398
Signing time: Fri 31 Jan 2025 00:50:40 +0000
Manifest this update: Fri 31 Jan 2025 00:50:39 +0000
Manifest next update: Fri 07 Feb 2025 00:50:39 +0000
Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: 6MkKTHJCMbLk5kz6pg35i9dYzqnoTrKvD6SQZ7HbWwo=)
2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: 30fVbVXq/CoDMc17wH079VESP30cAy3Gw17NlarsviE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924 (0x39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Validity
Not Before: Jan 31 00:50:39 2025 GMT
Not After : Feb 7 00:50:39 2025 GMT
Subject: CN=679c1e5f-9d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2d:a5:cd:4c:20:3d:b3:4e:d3:c3:47:88:5b:
fe:a7:10:b3:09:21:9e:19:3f:b8:b9:f9:c8:10:ee:
ed:f8:a1:22:85:d8:29:4e:52:af:af:66:3a:a2:f8:
6b:71:1e:76:ac:b2:be:9c:b5:5a:fb:37:d4:24:9c:
7d:d9:98:6b:17:4b:a6:b0:86:42:a9:1b:af:a9:2b:
b5:fb:7d:6b:c6:b9:9f:e7:69:4a:0d:23:d8:59:00:
e4:34:e8:30:91:02:32:a9:01:94:34:aa:c8:91:3a:
e8:2d:21:9c:ef:c1:71:e6:c5:5d:5d:65:2e:d3:75:
a6:e3:91:27:a5:e8:52:f2:17:54:1f:e9:17:df:c0:
de:0d:7d:ac:ac:dc:01:1a:a6:06:96:23:89:d8:c6:
4b:9c:4a:18:cd:e8:8f:76:d3:dd:e7:19:e0:0d:aa:
71:bf:04:4d:1d:89:07:b0:b6:de:d9:cd:02:18:09:
92:6c:5e:52:19:58:5c:1f:01:b0:f0:64:03:fc:5b:
7c:db:5b:e6:b5:d1:10:5f:8c:6b:fc:ec:bd:d6:b8:
ff:2d:c0:5d:86:8d:35:c3:b4:b6:8d:9c:d1:9c:ab:
97:3a:97:dd:0e:3d:29:3e:7d:bb:82:84:da:24:32:
ed:9f:a7:bb:86:fc:ab:c0:c8:55:a1:4b:7f:82:dd:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:98:3F:23:BA:9D:43:F8:A6:90:0B:F3:9D:70:95:78:92:1F:06:C9
X509v3 Authority Key Identifier:
keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:8b:e5:a0:29:5d:4d:60:fa:eb:eb:c7:98:c4:eb:e4:25:e8:
2a:39:80:55:15:d0:05:36:ef:9e:70:94:5d:7c:06:8d:f7:70:
d4:f8:46:c3:7d:7b:cb:67:6a:02:18:09:33:25:8e:27:37:50:
7b:d4:7c:e3:e5:56:f2:9c:15:be:62:f2:cc:be:8d:a9:d9:57:
83:0a:2f:70:21:26:15:91:b1:5b:cc:a4:68:bc:3d:c5:ad:ee:
1b:02:e7:7e:ce:10:9f:cb:4d:9d:bc:10:11:aa:73:75:b6:d9:
7b:7b:9b:3b:a7:75:ab:87:da:8e:ca:07:32:1c:41:19:c7:46:
f7:3b:92:af:af:3f:1d:2b:e0:c7:b1:3b:b4:28:4d:8e:a6:33:
37:8d:3f:75:76:a2:ab:36:6d:3a:3b:78:6f:33:9a:68:ab:f5:
7f:5a:c7:93:77:83:7d:28:de:3c:c3:46:a5:2c:da:85:21:20:
95:55:cb:b8:7a:2f:6a:1c:7c:9d:b8:f4:2d:8d:7a:32:97:43:
f6:d9:68:a5:e4:7a:72:04:3a:f9:42:67:14:45:79:49:89:fe:
02:8a:49:8f:a3:3a:cb:52:8f:0f:d0:e3:d3:d0:16:a8:51:e8:
73:29:50:49:9c:d2:0d:b4:e2:da:a1:87:c3:8b:21:86:d7:d2:
5c:f3:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:36 2025 by rpki-client