Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
File: UPqOjU4pl_9d5gjaeMrGVMzRabY.mft (raw, json)
Hash identifier: umAEccFvsYy1+HX+WQqJd9G2D2Nl5huQDhsS5RKdClQ=
Subject key identifier: AB:8F:12:97:A8:EB:95:E9:B3:37:92:97:55:0C:3D:9C:C7:63:2A:8D
Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6
Certificate issuer: /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
Certificate serial: 08CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
Manifest number: 08C2
Signing time: Fri 28 Mar 2025 20:45:15 +0000
Manifest this update: Fri 28 Mar 2025 20:45:14 +0000
Manifest next update: Fri 04 Apr 2025 20:45:14 +0000
Files and hashes: 1: UPqOjU4pl_9d5gjaeMrGVMzRabY.crl (hash: ax3qrI+AojHdCabjhtcbULFBoTsBUDISlSaXb7vpTww=)
2: CD095756AF1211EAA486D140C4F9AE02.roa (hash: Z259vozdwtPUaPkxXgMTZo8w1xwG+zonsUhvjUkyWKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEE26
Validity
Not Before: Mar 28 20:45:14 2025 GMT
Not After : Apr 4 20:45:14 2025 GMT
Subject: CN=67e70a5b-b19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:5c:91:c2:46:72:b2:b2:2e:a9:6e:67:1d:
ad:ee:d6:b6:53:59:3c:6f:b1:37:cd:41:14:9f:2c:
f2:d4:7b:45:59:c5:9e:30:71:10:ec:53:3e:aa:8b:
1e:76:1a:c9:48:03:d0:32:26:05:fd:7b:b3:89:77:
65:cf:78:b4:4a:fb:de:bb:cb:a8:fa:b4:96:51:2a:
f8:b4:6f:e0:03:72:ee:dc:3f:28:d5:59:a5:1a:31:
95:e9:b6:e0:2b:50:5f:75:51:11:59:55:a1:76:67:
1a:f9:3b:5b:16:3b:b0:9e:44:2e:3b:4e:6b:22:90:
92:46:0b:e2:79:2d:a9:94:fe:15:ce:35:36:60:62:
42:ab:85:75:84:71:30:c9:92:a1:e2:f8:98:61:cc:
f3:11:79:f3:ab:48:9f:f4:ac:f1:d1:1d:41:ad:31:
b5:25:4e:a5:37:0f:b2:89:d2:01:42:4f:ae:41:67:
d8:f1:61:01:51:3a:80:f5:9b:81:1b:1d:3a:24:4c:
65:2f:37:81:06:c8:20:0d:df:f9:75:75:19:42:8a:
32:1a:7d:c8:a3:67:63:60:8b:dd:47:54:76:7f:2f:
96:1b:51:20:37:82:51:c1:ec:42:2a:f1:6b:7e:a7:
23:9b:d8:1e:f5:1c:ec:3e:91:c3:e7:3e:40:f8:38:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8F:12:97:A8:EB:95:E9:B3:37:92:97:55:0C:3D:9C:C7:63:2A:8D
X509v3 Authority Key Identifier:
keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:2d:25:a1:2c:ee:d6:ac:76:cb:fe:a6:13:a6:d4:90:a3:2c:
7f:80:0d:83:22:ad:1d:2c:95:5a:30:19:37:a8:76:1c:03:76:
16:02:d7:57:65:33:2f:c4:5c:00:e0:d8:64:ce:be:09:71:a5:
2d:81:37:32:95:3d:d6:d9:5f:b7:db:08:23:32:b1:1a:0c:25:
ee:28:ca:31:09:79:bd:06:91:40:1b:b5:aa:c2:8b:81:f8:ad:
c3:57:28:2c:79:aa:3c:91:50:06:19:57:27:90:e6:a3:ee:2e:
c4:6b:61:95:8d:41:ad:ad:c3:4a:8e:0f:db:0b:ab:6a:4f:6d:
4d:76:8b:77:20:c2:6a:8c:01:83:cc:53:32:52:d4:87:fa:1e:
5c:18:2a:d5:3f:72:06:36:b8:fb:de:3c:42:a8:f8:ba:40:bd:
90:69:30:74:56:35:2a:b4:c6:18:4b:31:86:b0:bb:74:7d:5c:
ba:7b:d2:a2:ed:46:23:e3:97:e5:c9:22:40:56:f7:15:77:b1:
ee:38:6a:45:53:68:e9:83:35:c1:04:14:ac:c3:46:10:e3:0e:
51:69:59:10:90:82:d1:06:22:cf:91:1f:df:99:51:33:d8:06:
90:17:4e:9d:96:11:89:b3:4f:fe:3d:b6:e3:be:e3:c1:55:c4:
fe:7a:3f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:34 2025 by rpki-client