Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
File: UyaKJzal_1VLlAcD83T8NXkijDA.mft (raw, json)
Hash identifier: tliCiFkuZnk6nzf5XWAgKtjwLja0lzPYHTkdQ4xCuyQ=
Subject key identifier: 2C:E0:66:63:63:EA:50:6A:9E:0E:5E:FF:A2:D4:B4:02:95:1C:D1:22
Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30
Certificate issuer: /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30
Certificate serial: 09F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
Manifest number: 09E9
Signing time: Thu 30 Jan 2025 20:00:56 +0000
Manifest this update: Thu 30 Jan 2025 20:00:55 +0000
Manifest next update: Thu 06 Feb 2025 20:00:55 +0000
Files and hashes: 1: UyaKJzal_1VLlAcD83T8NXkijDA.crl (hash: 7SWmh/NhWLt/F1r8q4NBn8n4ky8vPwKiYiAYqNK+ePo=)
2: CF072592709211EAB1D2FA0FC4F9AE02.roa (hash: ZFArAKV3zxqhsKeUT1pzygcRoAdRSBE7vBttPv/BKqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2545 (0x9f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30
Validity
Not Before: Jan 30 20:00:55 2025 GMT
Not After : Feb 6 20:00:55 2025 GMT
Subject: CN=679bda78-47ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:de:df:53:33:f3:69:0f:75:42:ac:6d:2b:
bf:da:76:27:85:9f:2f:d9:46:d1:1d:45:ad:1d:c1:
ad:e3:63:81:2d:d8:1c:be:f2:d2:1f:aa:ba:c2:58:
67:05:9f:1b:ce:45:a8:cd:b7:c1:72:77:90:ed:fe:
9b:ea:59:8c:28:66:7c:cc:f5:66:30:f3:fb:1b:a8:
7a:44:47:5f:86:19:d4:3f:b3:af:b1:82:ed:9f:ed:
ca:fe:3b:0e:ca:c4:17:cb:94:3c:ed:b1:42:36:80:
f5:e6:2a:fe:d7:bb:58:d5:1e:a4:30:21:7e:ef:e4:
04:da:29:64:c3:e0:59:3b:8f:10:61:14:ce:50:25:
a4:26:f5:ca:89:9c:f1:d4:71:50:7b:4e:62:f4:26:
3a:06:be:b2:80:09:ea:24:7c:0d:71:8e:94:26:7b:
97:58:b9:bb:0c:ff:1b:c5:6c:f0:a5:0a:1c:80:34:
09:a0:17:e5:71:3c:0f:02:a4:fe:ef:23:42:28:96:
a2:22:08:b3:c1:a7:a0:26:23:e3:9e:40:05:b5:a5:
23:44:5f:7d:f8:b7:b9:86:1d:d4:b9:57:8d:ce:7b:
17:19:94:a6:b6:e0:20:db:29:61:e2:19:5d:c4:c2:
11:7c:05:ae:44:67:46:56:52:e5:21:2f:8d:89:db:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E0:66:63:63:EA:50:6A:9E:0E:5E:FF:A2:D4:B4:02:95:1C:D1:22
X509v3 Authority Key Identifier:
keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:9d:f5:6a:49:28:6c:b7:fc:4c:09:65:02:b4:f7:f6:db:58:
0c:22:bf:3a:83:1e:07:5d:81:42:0f:b4:f5:7a:18:1d:18:20:
b2:b3:ee:e7:49:77:31:7a:43:0e:3f:98:57:91:67:8e:40:bc:
b2:79:d9:cf:f8:43:b9:60:35:59:09:49:87:c7:6d:37:a7:21:
3c:5c:a3:96:3e:2d:f2:08:c8:19:b0:71:c9:45:31:f6:b1:68:
15:20:32:e3:d9:50:3e:c3:ed:45:dc:94:48:fd:c1:76:8c:89:
c2:16:06:3f:e8:4a:64:ce:d0:0b:e9:c5:ad:42:d9:87:97:93:
6a:0b:51:03:07:4f:3e:f3:6f:47:7f:4b:92:f8:48:cb:97:fb:
0e:0d:e3:66:0c:06:b0:a9:82:9a:29:3e:2e:91:c8:4a:57:34:
65:c5:ab:67:ec:96:79:2a:69:82:be:05:0f:ad:5b:c9:fe:43:
61:ea:a8:41:85:2f:a6:29:2f:d7:54:c4:3b:c0:69:5a:36:77:
19:8a:a7:c3:49:42:9a:18:c2:10:a7:08:dd:2a:c5:a2:17:e6:
c2:0d:7b:b0:89:e6:a6:e1:82:72:3a:6a:2c:d6:1a:a2:7a:00:
97:65:41:35:49:8f:88:db:d9:6e:6e:69:bd:0f:eb:47:fc:e4:
c9:03:59:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:02:58 2025 by rpki-client