Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
File: uKIid-zGsQo9ICqjkMyn-7kqRuA.mft (raw, json)
Hash identifier: UpTTipeJ7ZQF8ZN6njKrsltsr5aLhfETpd3vnZlM+xw=
Subject key identifier: 6D:8C:3E:7B:64:42:A1:9B:A3:0B:19:40:78:57:8E:26:E5:78:91:13
Authority key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
Certificate issuer: /CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Certificate serial: 034B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
Manifest number: 0347
Signing time: Sat 29 Mar 2025 01:16:55 +0000
Manifest this update: Sat 29 Mar 2025 01:16:55 +0000
Manifest next update: Sat 05 Apr 2025 01:16:55 +0000
Files and hashes: 1: uKIid-zGsQo9ICqjkMyn-7kqRuA.crl (hash: Oe8cmScuC7CWkBsDUgYKdF+LMO4nV4XLz94/CSBbmPo=)
2: AF08CB4CC77511EC81DCA645C4F9AE02.roa (hash: fCg3LsUh16wFnDfXkxVhThF2ZOUkgckgr+TaTcI9RIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975CC
Validity
Not Before: Mar 29 01:16:55 2025 GMT
Not After : Apr 5 01:16:55 2025 GMT
Subject: CN=67e74a07-eded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:a7:d6:5c:ee:98:bc:a9:52:91:a2:2d:3d:
10:8d:9b:73:45:05:8f:c6:af:5c:2f:50:74:7a:83:
c0:7b:4f:92:b6:61:1a:70:c0:5c:a9:3f:7e:8b:e8:
7c:72:28:f7:3f:c3:88:c1:ca:eb:cc:16:ec:11:dc:
74:76:7b:9e:7b:7f:44:83:25:1a:ac:6d:10:1c:47:
0b:bb:08:99:e9:8a:9d:dd:72:b4:e7:20:b7:9e:30:
51:a9:8a:8b:7a:f5:53:c8:e1:81:fa:bc:16:8b:32:
77:a0:ba:5f:86:b2:87:f4:31:78:e5:f5:90:04:cd:
c8:22:50:2e:0e:34:bc:d3:63:10:dc:11:e9:f3:5f:
74:cc:27:f7:a3:d1:21:01:59:5c:45:cb:6a:dc:66:
42:b0:92:f5:04:2c:15:62:30:3e:86:18:45:88:51:
39:67:54:1e:f6:93:dd:e6:3c:4b:56:0a:73:7a:78:
d1:d4:02:ee:aa:5b:61:81:8c:0d:4b:75:66:4a:7d:
af:09:35:93:5d:27:2f:72:f9:e1:05:98:99:1f:e5:
61:83:2d:f1:04:7c:ab:02:a2:43:bb:4a:bb:4c:ec:
f5:99:e0:da:0b:a8:66:6f:0c:ed:82:52:17:60:18:
86:2b:19:4a:e8:55:83:30:c6:45:ad:8c:bd:64:30:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8C:3E:7B:64:42:A1:9B:A3:0B:19:40:78:57:8E:26:E5:78:91:13
X509v3 Authority Key Identifier:
keyid:B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9a:dc:25:43:10:b7:a8:c2:75:94:1e:a6:ae:5b:ec:02:a9:
ab:5e:a0:73:a1:5a:50:8f:84:98:fb:42:41:37:8e:fd:a8:5e:
1b:f5:08:b1:32:6d:c8:af:ee:61:6c:a2:02:de:c5:26:65:23:
8b:88:f0:43:88:f2:b6:ac:0c:5f:e4:e4:21:e5:84:5d:93:77:
1e:0c:f8:49:c7:3a:ae:e1:6d:22:c0:8e:a3:21:96:5b:57:5b:
13:41:42:67:ad:f8:23:ee:2c:0f:f7:8d:3b:0d:2f:37:9c:d0:
60:a6:1f:87:08:da:90:59:03:b8:c2:cb:f0:96:8d:08:4a:5c:
e5:5c:58:ab:aa:e5:e1:5f:b6:34:a3:39:c6:bd:81:ab:7d:56:
24:1e:69:9e:ba:06:47:5d:21:af:8c:b4:42:7b:4f:5b:a8:e4:
6b:be:74:11:64:25:ae:2b:5a:c8:f9:62:2f:f9:80:0c:77:80:
de:b0:88:dc:fb:9a:31:1b:ee:d3:fe:16:bd:20:b8:91:33:d7:
20:69:16:9a:e2:83:7b:4a:c6:5f:bd:1b:3a:cf:6d:44:2b:2e:
89:27:f3:78:2b:c6:8c:0b:8f:6f:7b:09:a9:8d:ef:d7:85:48:
19:e8:19:1f:47:ab:be:ff:93:be:04:c7:a7:77:02:8a:c5:ee:
24:6a:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:36 2025 by rpki-client