Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json)
Hash identifier: nst5d+OK671f6ordF9PQ95fsOWZwuiRROOWfriMJLv0=
Subject key identifier: 9E:EE:16:14:29:55:E8:0C:9C:27:8B:E1:28:53:18:B0:4A:21:1A:A3
Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
Manifest number: C7
Signing time: Fri 31 Jan 2025 04:59:22 +0000
Manifest this update: Fri 31 Jan 2025 04:59:21 +0000
Manifest next update: Fri 07 Feb 2025 04:59:21 +0000
Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: w6tBt4DIQ/mBuDhKr91gtKyVQZFr9RZg9yKQmruu/xA=)
2: 5C0778D42FC011EF8A6D832FC4F9AE02.roa (hash: KcSGSJdJ4hjBIrByd6Jh9h10gk3ySnfjjKKxTLLFHX0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
Validity
Not Before: Jan 31 04:59:21 2025 GMT
Not After : Feb 7 04:59:21 2025 GMT
Subject: CN=679c58aa-4fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:68:95:1f:35:d9:e8:dc:03:19:72:bc:05:
ab:80:a8:b3:d3:65:9a:3f:94:59:b1:b5:87:bf:ea:
b1:9e:2e:df:ab:65:1e:56:a3:e9:87:50:0d:20:95:
81:44:1c:0a:bb:eb:ce:e4:9a:d3:29:1b:d0:bb:78:
14:8e:43:6b:f1:bd:a4:5b:ba:a0:7a:8e:ba:bc:6c:
27:ba:12:e9:17:06:01:a4:c5:46:de:6b:bd:6b:c0:
c9:f2:4a:d8:bc:1b:01:3b:51:cc:48:9c:a1:ca:3b:
d8:e7:18:fc:b0:f8:92:31:f3:a8:5f:c9:d4:c2:55:
86:82:11:e2:be:01:80:11:53:ec:32:9b:52:31:6b:
ca:5b:52:1b:7e:3e:ad:73:21:19:fd:f7:fd:64:75:
b5:3b:c4:4b:13:9a:d7:49:0a:28:ef:4f:a6:f6:88:
6d:6f:23:4c:4d:7f:b9:f0:6b:96:bf:7e:af:a3:cc:
40:c0:4a:4b:bf:f5:54:47:37:3f:5f:51:a2:00:d7:
95:c6:f6:7a:0b:2f:39:5d:1e:76:64:a8:03:44:73:
52:d2:76:4d:ba:b2:3c:9c:08:50:02:34:a3:0d:08:
97:33:3c:1e:90:44:0c:1a:6d:58:4e:0d:e7:1e:bc:
3b:da:c0:66:79:90:44:0b:f0:51:a7:10:47:7c:6c:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EE:16:14:29:55:E8:0C:9C:27:8B:E1:28:53:18:B0:4A:21:1A:A3
X509v3 Authority Key Identifier:
keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:88:d4:f5:27:ea:3d:61:6c:58:3a:0e:70:f3:1b:5b:2c:97:
f0:a6:46:7b:8b:a0:3b:1f:13:06:5c:7a:fb:c0:2b:06:68:01:
91:06:cd:49:95:2e:8f:67:25:76:50:ad:56:b3:91:ab:28:a0:
09:fe:bd:b4:cc:c6:6f:cc:71:57:91:d5:f4:6c:d9:15:76:4a:
63:40:34:82:70:7a:bd:01:50:f6:fb:21:ca:cb:d0:93:4c:2c:
80:d0:1a:e0:25:07:2e:0e:e2:04:cf:a4:95:03:a6:a9:cd:a4:
c0:b2:ae:bf:db:7a:71:63:b8:fd:fa:43:32:6f:33:8f:8e:29:
9b:57:82:87:31:22:f5:f4:2c:ce:78:76:a6:c5:c0:e7:0c:13:
bd:46:9b:d2:e2:1c:85:b6:0b:89:fe:c1:89:30:4f:29:8a:c9:
dc:1e:cc:6a:e1:0d:7e:06:6a:58:03:bf:3c:be:bb:4d:06:8e:
2e:33:df:b2:e4:11:5a:91:15:30:4c:8e:2a:d2:26:95:ee:e5:
c6:67:17:1b:fd:f1:10:9a:cc:1e:ac:2b:95:b7:3b:44:94:dc:
1a:e0:26:2e:ef:57:a7:3c:c3:6f:06:02:39:45:ee:46:1b:37:
14:d9:6a:0d:c7:f0:ff:21:43:69:c1:00:c9:9a:57:26:9b:44:
d9:23:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:41:43 2025 by rpki-client