Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft
File: UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft (raw, json)
Hash identifier: vLUNWbGN4p6EqirYSHdBMDLrIfhHyuyz9IPm8shN5gw=
Subject key identifier: B7:E8:86:5F:52:7F:9B:52:9A:A3:13:2C:A6:F3:D7:A1:51:96:CF:C1
Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB
Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB
Certificate serial: 222E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft
Manifest number: 21EF
Signing time: Fri 31 Jan 2025 15:54:18 +0000
Manifest this update: Fri 31 Jan 2025 15:54:17 +0000
Manifest next update: Fri 07 Feb 2025 15:54:17 +0000
Files and hashes: 1: UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl (hash: +HDjclOlFAhVJ0JcRw2J8ppbZ+GN4Ligk9QU0ze86S8=)
2: 6E12CFE0D6D511EEB73F802EC4F9AE02.roa (hash: fu2Y/ef9m4hYpradbNhhquwt+T6O3zblslaEMelPVBA=)
3: 8D93B9E0D8E911EE85D9881FC4F9AE02.roa (hash: AmGEU/vI25utL7crZoKrtfl5OSwvLwWyEhptdWMwqps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8750 (0x222e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB
Validity
Not Before: Jan 31 15:54:17 2025 GMT
Not After : Feb 7 15:54:17 2025 GMT
Subject: CN=679cf229-4c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:48:7f:67:14:12:49:b8:c5:43:b7:0c:1b:
65:bf:64:cd:73:76:04:8a:cd:c9:41:30:6b:bb:df:
dd:cd:3d:fc:54:88:e3:89:4b:fd:60:30:e0:aa:e9:
4c:c3:c1:d5:99:5d:90:7f:4f:cd:7f:ab:76:90:7b:
cc:c8:dd:1e:59:5e:d4:cd:81:af:46:02:78:05:a3:
c5:0c:b8:04:d5:d4:7d:4c:25:5f:f5:cb:70:9b:26:
58:63:4d:e3:72:d3:42:cf:3f:50:a7:c7:17:2c:93:
73:c2:92:9f:e9:37:2f:34:62:ff:e2:41:a0:ec:2f:
2f:00:c5:b7:7f:8f:95:ba:c0:98:ee:97:a5:88:74:
16:1a:2e:2b:61:fd:ad:6f:7c:a0:cb:f7:d1:01:3e:
4c:fb:60:1b:ce:dc:8b:94:37:79:00:f0:64:1e:8c:
1a:c9:d2:83:50:49:77:0f:7d:44:65:bb:80:4a:67:
b4:8d:29:79:79:45:9d:cc:80:c8:af:2c:81:db:8d:
86:44:64:93:de:22:7b:32:e2:91:a8:ce:1c:23:4d:
2d:d7:f8:c4:b9:aa:09:7f:02:92:bb:4a:35:97:30:
47:a1:dc:f9:34:73:2c:9d:db:2c:93:bc:10:df:b8:
b3:5e:5d:75:8d:6f:38:2b:91:a7:1b:e5:0b:e6:b4:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E8:86:5F:52:7F:9B:52:9A:A3:13:2C:A6:F3:D7:A1:51:96:CF:C1
X509v3 Authority Key Identifier:
keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:ee:84:1d:48:67:a9:6a:b8:44:5e:c9:51:66:66:ba:62:5e:
53:ba:19:3d:5a:53:c7:48:45:a5:1a:75:40:23:27:41:5f:05:
c7:d4:34:13:62:29:ba:06:b2:5f:20:5a:ee:2e:b4:02:92:7d:
29:e7:54:7e:1e:50:bb:db:33:b9:5e:9b:7b:dc:e4:a4:7d:f3:
9c:67:f5:84:ca:09:4c:17:a8:91:87:d2:a2:28:04:51:05:2e:
0c:36:ca:27:86:ae:2d:69:e6:ff:a7:cc:8e:c0:8f:d0:f9:e7:
a6:45:d4:9d:f9:93:74:92:ac:85:d8:04:35:38:fc:2b:54:76:
8e:4d:ef:64:4a:06:44:67:d4:a2:49:e0:b9:4f:59:f3:24:c1:
74:85:e5:0c:59:9d:0f:0d:77:ef:bb:f8:13:09:f1:8f:ba:84:
c4:1b:bb:e8:1c:7e:21:46:cb:52:30:f2:6e:88:b1:c8:f9:e6:
63:25:87:40:aa:fe:11:e3:d9:66:a3:21:d2:80:0d:42:16:20:
c0:3d:f7:e4:56:ce:c6:0a:d2:77:85:20:50:cc:b9:1b:96:67:
2d:ba:f3:ab:c4:38:c3:17:16:95:22:35:9f:7d:5f:17:64:12:
29:83:41:fa:b2:74:6d:97:31:cd:96:41:b4:1c:4f:42:11:96:
11:c7:dc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:28 2025 by rpki-client