Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json)
Hash identifier: 8FY3W2jcqr7ZWds7Rq6vKzwZIk8Zu5uNF7FJ+K/4L9w=
Subject key identifier: 40:10:38:51:E3:C4:88:10:E9:C6:AE:C8:EF:32:3C:67:6A:E6:D8:84
Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
Manifest number: 71
Signing time: Sat 29 Mar 2025 06:12:12 +0000
Manifest this update: Sat 29 Mar 2025 06:12:11 +0000
Manifest next update: Sat 05 Apr 2025 06:12:11 +0000
Files and hashes: 1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: 75BUhzErgA5PVe+wsKxQ9XpyHXw/NwxSEGrlrY42HeU=)
2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: DWOCYh9U3Wi0CtHFM/de9pIBC9zRoaOkBAZXQGO2U2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2D9
Validity
Not Before: Mar 29 06:12:11 2025 GMT
Not After : Apr 5 06:12:11 2025 GMT
Subject: CN=67e78f3c-21cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:40:ad:86:e2:62:68:61:bd:e2:16:cb:60:
00:18:42:36:81:bf:cf:6d:03:80:12:11:df:6c:bc:
84:9a:e3:1e:8f:cc:e2:fe:f2:bc:d2:d9:e1:42:be:
4b:aa:fc:e7:f7:40:ef:2f:1d:6b:19:d9:29:73:6f:
e2:a7:36:2b:7b:e2:f1:d2:95:48:e7:7e:59:d9:43:
d9:61:d8:8f:2e:48:84:07:51:93:a8:eb:b9:8c:e1:
e5:cc:25:9a:94:60:21:65:91:66:2f:ba:c8:d8:db:
8e:d6:ff:fb:aa:ef:f4:c6:b3:fe:8c:6b:64:7d:be:
dc:87:3a:87:7f:ed:1f:65:35:12:9f:e5:c8:55:77:
4e:5c:25:01:0f:d7:c7:bc:bb:ee:46:ac:01:42:8c:
27:fe:c3:50:25:72:d3:f6:d5:85:38:cf:0f:90:ac:
19:bb:94:27:a0:8b:88:2a:b4:85:be:31:c3:3d:71:
b0:48:35:eb:25:9d:82:69:d4:ab:6e:33:6f:07:e5:
90:0d:99:2b:35:02:66:d1:19:7d:16:aa:25:fc:59:
01:37:f3:38:26:d0:9d:17:53:80:cc:0c:3c:70:59:
74:e2:49:37:d5:41:ea:eb:18:fe:0e:b5:da:22:cc:
90:f6:38:23:70:f2:b1:1b:fe:cf:6c:29:27:61:49:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:38:51:E3:C4:88:10:E9:C6:AE:C8:EF:32:3C:67:6A:E6:D8:84
X509v3 Authority Key Identifier:
keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b4:f4:08:98:d7:71:dc:31:0a:81:09:47:bc:e8:6c:cb:b2:
09:fb:5f:1b:2f:b6:9e:4a:96:b9:a3:f8:dc:50:dd:fa:9c:5c:
b1:4a:a7:54:c3:0d:80:af:fe:fe:7b:10:99:b0:e3:9a:fa:db:
f9:2e:a2:2d:60:cb:34:8b:4b:19:61:7f:e9:33:98:51:c9:fd:
1c:8c:e7:bd:34:72:03:bf:00:50:1a:84:7f:9a:61:69:f4:08:
99:e9:27:17:a5:cb:9a:8a:3a:f0:58:75:18:ed:06:2e:18:33:
86:d8:47:4f:59:39:0f:4d:a1:6d:75:f8:d2:46:3f:b4:75:37:
de:21:82:ae:0b:3b:a7:08:03:e1:cd:35:82:ea:24:b4:b4:96:
a6:fc:ea:98:9d:80:2e:f8:c4:df:8a:79:b9:86:01:97:ac:dd:
84:5c:70:c2:c2:3f:4e:36:28:f0:73:51:13:e3:34:7a:f3:9e:
17:fb:a9:e2:48:c7:de:9c:2e:02:06:d1:7c:73:ca:a2:0b:75:
0a:3a:19:16:58:fa:97:08:2e:16:a1:c6:77:6c:9f:87:5e:33:
09:ac:46:cb:60:5e:d3:c9:d5:b0:cd:c8:0a:ae:68:7d:95:6f:
01:d5:5a:d2:04:61:4e:03:6e:0d:3a:b2:76:7f:d7:f7:9f:98:
00:46:69:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:26:25 2025 by rpki-client