Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json)
Hash identifier: FRyn8ysBzfXelEeJW04yPmfYa04JpSw8/1BcRMjNKHM=
Subject key identifier: D8:E1:43:5B:8B:13:5D:15:AD:F0:9C:14:C1:6C:91:8E:EA:E4:DC:35
Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97
Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397
Certificate serial: 0818
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
Manifest number: 0812
Signing time: Fri 28 Mar 2025 21:06:56 +0000
Manifest this update: Fri 28 Mar 2025 21:06:56 +0000
Manifest next update: Fri 04 Apr 2025 21:06:56 +0000
Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: ripwYYFVcaWxuRNaFSEbmY5gdLNQzLPpnXcECf8iero=)
2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: P441cSLHyLoUjwh77ci4OGTBUeTeIRb4uG1co2Vb+f8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072 (0x818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA022
Validity
Not Before: Mar 28 21:06:56 2025 GMT
Not After : Apr 4 21:06:56 2025 GMT
Subject: CN=67e70f70-d9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ab:39:86:8f:55:ce:15:5f:b7:82:13:02:cc:
ab:6b:56:52:74:fc:8b:61:8f:10:bb:38:d2:d8:37:
89:e8:41:3b:b5:5c:45:6b:1e:5e:66:88:9b:2d:2d:
40:92:95:1f:04:c5:ec:77:72:ca:dd:d1:0e:b5:95:
f3:ab:cf:26:bc:c7:18:80:fa:bc:ec:ae:c4:c5:23:
9b:48:2c:43:bd:7d:c7:fc:e6:18:08:6d:27:56:3c:
bc:81:05:e0:98:13:b8:0a:9e:0f:5b:29:82:d2:e1:
01:c0:58:88:15:b2:f7:8a:6b:d2:8c:c3:ab:2e:c6:
f5:92:ee:cc:be:86:e5:6b:cb:80:ac:fb:48:c1:56:
1b:42:a8:d4:a9:eb:ae:34:d3:ad:34:84:a6:15:67:
35:99:77:fa:85:a5:7c:d9:7e:1f:60:f3:9a:47:2c:
06:90:f6:f9:d1:ce:2a:1e:e7:78:ce:83:b7:bf:e9:
42:80:6a:8b:09:45:3f:a7:ba:3b:2a:6a:b9:79:6f:
39:05:f4:ed:46:bb:51:88:f0:d7:7b:8d:33:8d:c2:
19:3f:35:a9:00:50:20:8f:c4:da:27:8a:7e:d1:a7:
10:b4:87:44:c5:8c:45:e2:ad:65:db:d2:51:b8:6e:
f8:e3:1c:58:01:21:22:0d:16:c1:d4:c9:51:92:59:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E1:43:5B:8B:13:5D:15:AD:F0:9C:14:C1:6C:91:8E:EA:E4:DC:35
X509v3 Authority Key Identifier:
keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:df:a7:a7:26:76:ab:9a:22:48:29:a5:fe:92:da:89:50:9d:
cb:3a:97:6c:11:6d:34:29:01:1f:59:dd:98:09:d5:cd:8e:72:
38:f9:8b:e9:93:c5:d8:5d:c8:15:ad:c4:94:b0:77:5b:44:d5:
68:58:48:a4:fc:d2:04:f0:9b:75:11:a1:dc:b0:95:05:8c:d3:
db:ab:c0:98:af:a7:fe:62:52:a0:66:45:f4:35:90:9d:d4:7a:
4d:3d:50:cb:4f:dd:20:d7:ea:7d:ab:72:bf:f2:15:5e:91:1a:
57:4e:1d:ac:52:85:33:c8:f5:a7:ee:71:3c:ab:18:67:b4:67:
13:d5:1f:6c:cc:24:51:bd:f0:52:1d:aa:d0:ac:28:26:6e:c9:
74:f4:be:7e:04:c1:80:9e:3f:ea:b7:35:09:aa:8e:e7:74:a6:
9f:71:fe:fb:ea:5a:d4:cf:90:a3:75:8b:4d:ab:e8:58:6b:9d:
1c:38:b5:b6:66:e6:65:34:8b:30:b2:af:65:18:81:62:f7:54:
72:2f:d8:5b:8c:e3:c9:df:cc:74:9e:37:2e:a2:9d:25:a8:95:
dc:3d:40:8e:88:42:c3:98:3c:20:0b:0f:b5:70:ff:00:6c:b4:
5a:ed:d0:c1:50:b7:ff:3f:c5:ad:5b:77:a2:01:89:9f:65:65:
25:aa:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:48 2025 by rpki-client