Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
File: UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json)
Hash identifier: G0g2nHei5EDIOaV1LjhjeGF7Wkr7MzBAlLqitU2Hvik=
Subject key identifier: F7:1C:32:6B:56:65:46:B2:2A:40:5D:F2:9A:9C:15:2E:3B:44:36:5F
Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
Certificate issuer: /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
Manifest number: E8
Signing time: Sat 29 Mar 2025 04:53:37 +0000
Manifest this update: Sat 29 Mar 2025 04:53:37 +0000
Manifest next update: Sat 05 Apr 2025 04:53:37 +0000
Files and hashes: 1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: ayz80nlgjOwjypN6r8NmAsa2iFH93/Qh3Jvmtr8ArVI=)
2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA851
Validity
Not Before: Mar 29 04:53:37 2025 GMT
Not After : Apr 5 04:53:37 2025 GMT
Subject: CN=67e77cd1-12be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:f7:a6:3f:99:c6:bc:39:fc:d6:16:8b:07:
8c:30:70:dd:7e:87:d1:cc:b1:d7:2d:a8:8a:13:74:
5e:2f:4f:be:51:ce:d6:a0:0a:12:8b:da:09:42:2c:
b5:80:20:07:41:b4:d9:86:67:d1:ff:c5:44:55:99:
0e:be:fb:d0:f1:2c:9c:25:06:fb:4b:4f:77:89:a0:
d3:89:8f:ee:3a:28:ff:3a:5d:6c:52:3b:9b:37:6e:
fc:23:64:c8:e6:b0:02:ce:cb:f8:6b:4a:28:35:de:
58:da:9b:e7:61:1b:e3:46:ef:6f:41:9e:30:ca:04:
7b:b8:ae:02:fc:84:4e:ba:96:e4:eb:e9:24:d8:e0:
02:66:1c:25:37:30:b4:8f:68:00:59:32:20:c8:6c:
48:2e:7a:14:63:1e:c9:3a:7b:7d:8f:fb:a7:27:5a:
0f:44:c4:3e:ff:5d:ca:5c:bb:92:7d:f8:86:9c:ac:
5b:9f:c8:de:a2:be:ba:95:83:cf:af:6c:0f:67:c0:
96:e4:9c:f5:47:0c:87:ef:22:bd:9b:39:ff:62:40:
6f:57:78:8d:45:30:26:d0:f1:c1:03:7c:5b:88:83:
34:8c:72:96:ca:3f:af:81:04:ab:56:3d:66:3f:65:
4a:76:da:e4:ef:70:76:27:f7:94:6f:ae:16:ed:4c:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:32:6B:56:65:46:B2:2A:40:5D:F2:9A:9C:15:2E:3B:44:36:5F
X509v3 Authority Key Identifier:
keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:53:1e:e5:7a:b2:30:be:07:5c:93:07:da:c3:0d:96:1d:78:
62:9f:a5:88:63:b0:15:e7:16:cd:7d:52:8e:05:04:b9:04:a0:
ea:20:77:52:78:11:ee:78:85:39:04:cc:5b:2b:cb:20:33:36:
d6:36:29:af:6f:1e:52:da:5e:b9:14:db:50:52:a7:c0:db:be:
05:c7:72:0d:39:b4:c5:cd:d6:f9:23:54:08:b3:ee:bf:99:0e:
28:5b:11:46:ff:ce:de:60:26:b4:7d:e6:c2:16:13:d0:3e:f3:
d9:f4:32:0b:ca:f4:f7:2d:9a:a6:5c:2b:bb:54:e7:06:19:a7:
6b:00:b7:cd:00:df:3e:2a:51:7b:79:28:ab:6b:d4:f1:e7:07:
17:1d:5c:87:68:5b:97:dd:51:60:cf:75:46:e9:47:bf:61:90:
3c:4b:de:69:ea:41:bd:53:d8:23:75:8b:c1:6b:ed:c0:d7:12:
46:76:d1:33:a9:d3:41:bf:a9:f4:2b:b2:36:9f:da:80:e6:05:
1e:85:f9:12:42:78:2e:cf:4f:d7:38:3f:12:2a:a2:8b:c2:64:
4d:aa:cf:9d:c7:08:8b:3b:50:e4:fe:ab:fb:83:ce:02:de:62:
3d:7d:e2:b6:d9:f4:5e:73:6f:29:31:44:63:a6:d5:7f:41:91:
88:cf:b8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:18:47 2025 by rpki-client