Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
File: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json)
Hash identifier: QBfU63oL46j/uAnOAKdiBgkZMPzuN/jfCwof+z+qbFI=
Subject key identifier: 38:37:FE:D7:D8:94:10:D4:E8:DB:3C:9F:62:FF:57:2D:70:D6:35:61
Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Certificate issuer: /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Certificate serial: 0B07
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
Manifest number: 0AFF
Signing time: Fri 28 Mar 2025 19:27:23 +0000
Manifest this update: Fri 28 Mar 2025 19:27:22 +0000
Manifest next update: Fri 04 Apr 2025 19:27:22 +0000
Files and hashes: 1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: I7uL1OgeYRgDm2MF9TfOJkD56n4oGjs8S1rbaFACcU0=)
2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: wRvd5l9La3MSVA49dLn9S92nbQQvOi4LJr/5XnlTFpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2823 (0xb07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF51
Validity
Not Before: Mar 28 19:27:22 2025 GMT
Not After : Apr 4 19:27:22 2025 GMT
Subject: CN=67e6f81a-5108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:70:63:d7:16:40:e8:22:59:1c:3d:48:94:
6f:0b:4a:e4:8e:2c:23:ab:1c:36:5d:65:c6:a8:d4:
45:d6:2e:a4:01:55:b7:45:f0:23:57:ec:ee:6a:2d:
23:4a:f5:31:4b:b1:82:00:28:4f:f0:a7:0b:73:e8:
65:95:dc:ed:63:1c:24:39:56:dd:df:3e:df:93:b5:
dd:c4:0c:74:eb:ec:59:42:81:a1:5b:af:87:af:2f:
4e:6d:2b:48:e8:b9:02:ab:09:2d:d5:2b:82:50:e4:
6c:76:e9:3c:f5:3f:16:9c:ec:28:f4:26:ab:cd:23:
3a:c5:79:78:37:87:34:85:f0:d2:db:74:14:00:73:
04:5e:51:66:bd:d8:31:23:5f:6c:3c:8b:ba:4e:71:
f3:0d:7b:a1:e9:df:d0:7c:79:9b:02:4c:d2:e2:83:
a4:7a:44:db:94:ef:1d:7a:87:94:57:ab:65:be:55:
0b:ff:3f:dc:3e:fa:7c:b8:a9:7d:1c:7b:ec:b0:1c:
cf:ab:f5:62:b3:e1:64:24:95:06:77:91:f9:27:fe:
20:a1:48:81:81:8f:fc:5e:68:1c:8c:63:92:38:0e:
0a:8a:93:8a:9f:a4:28:25:3e:8c:ea:bf:03:f9:8d:
75:96:ad:7c:bb:f4:b5:58:73:0d:d2:83:1d:49:7c:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:37:FE:D7:D8:94:10:D4:E8:DB:3C:9F:62:FF:57:2D:70:D6:35:61
X509v3 Authority Key Identifier:
keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:0d:e9:dd:53:27:21:63:5b:b5:97:db:d6:b9:b3:20:d4:a5:
4b:56:4b:09:50:0f:8e:9f:b7:40:3d:a8:1f:b9:b0:ef:7e:f9:
f9:9b:a3:a2:a2:40:98:93:ec:cd:3c:95:50:53:e7:8b:bf:f6:
a4:8c:af:48:66:19:98:93:5f:41:20:f6:e5:ca:09:f9:b7:ac:
2c:7e:6b:a3:b8:6c:20:de:7a:20:51:10:45:25:2f:01:a2:b8:
11:a7:0b:8c:1e:96:69:45:43:87:70:62:df:1f:d8:21:74:b4:
84:e8:3b:38:4d:9c:a0:7b:f8:93:13:93:47:3e:73:21:1d:32:
e8:52:b2:07:e6:f7:4c:96:e2:20:4f:77:aa:43:ea:ed:23:66:
0f:e1:c0:f1:ff:95:ca:1e:77:44:6e:98:b7:1a:6d:63:12:ce:
de:77:55:e7:b9:6c:51:66:49:51:14:a9:d0:29:ff:37:16:b3:
68:7d:cf:66:12:16:4d:3e:14:b6:d1:8c:32:61:0c:3b:cf:2a:
b1:7f:b9:42:51:26:fa:7e:d3:ee:72:3e:ac:3d:67:85:74:1d:
a3:49:e5:db:6a:85:33:0b:56:4a:bd:ff:d6:36:c4:62:43:f4:
2a:9c:22:4d:ca:48:04:d4:20:d1:d6:c6:ea:26:ab:99:60:7c:
d3:c7:64:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:12 2025 by rpki-client