Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft
File: udznqYvOfA4oMosTy-q1Qx0PZr0.mft (raw, json)
Hash identifier: dF/HOY7R5neAeQKDT8D+uZ0m7WZ+kXnIhjcgSenUs1A=
Subject key identifier: C3:C4:27:FD:53:8F:66:8D:93:1F:39:60:12:7E:97:53:79:F6:1E:17
Authority key identifier: B9:DC:E7:A9:8B:CE:7C:0E:28:32:8B:13:CB:EA:B5:43:1D:0F:66:BD
Certificate issuer: /CN=A91C0C0C/serialNumber=B9DCE7A98BCE7C0E28328B13CBEAB5431D0F66BD
Certificate serial: 039A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft
Manifest number: 038E
Signing time: Tue 29 Apr 2025 01:27:36 +0000
Manifest this update: Tue 29 Apr 2025 01:27:35 +0000
Manifest next update: Tue 06 May 2025 01:27:35 +0000
Files and hashes: 1: udznqYvOfA4oMosTy-q1Qx0PZr0.crl (hash: z4c7/4t1+IuO8o3lGQgeSTwtA+XtzXT2wpyNEMJYhMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C0C, serialNumber=B9DCE7A98BCE7C0E28328B13CBEAB5431D0F66BD
Validity
Not Before: Apr 29 01:27:35 2025 GMT
Not After : May 6 01:27:35 2025 GMT
Subject: CN=68102b07-96f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:83:00:f1:dc:4c:9d:b6:3d:f3:3b:6f:da:f6:
0c:2a:8f:f7:38:9f:d3:86:dd:ad:ec:d6:61:c6:a4:
e4:d8:67:e4:27:34:a1:c4:08:9f:a0:26:00:76:b4:
f3:1b:78:6e:cc:cf:19:fe:da:3f:c4:1a:85:04:2f:
b0:fe:8b:93:14:df:3a:8d:38:1d:7b:09:4e:b1:76:
07:3b:c7:90:7e:68:c7:b6:46:cf:75:36:ca:87:fa:
94:83:3b:35:68:8d:2d:a4:7c:35:9a:5b:32:59:b9:
ab:ba:9a:0c:5f:28:b3:0e:8d:29:fd:d9:d9:ee:79:
f3:e1:a4:c9:99:a8:9c:e5:fe:b1:1c:c2:bb:4b:ef:
16:e7:9d:48:0d:b4:57:ad:69:0c:13:cf:0a:00:d1:
15:92:fc:73:18:08:ce:f7:3e:5e:24:05:58:21:2b:
02:8c:30:3b:00:d5:d3:0d:e1:69:20:63:f6:c6:22:
2c:f2:bf:3d:f6:01:a4:51:77:e0:3b:2c:c5:22:d5:
68:67:23:5d:17:4d:6f:ca:8d:72:c4:0b:fa:33:17:
aa:f9:e9:c1:fe:14:91:4d:55:3a:37:d0:27:89:33:
d5:ab:f3:47:1c:c4:6d:f6:92:61:11:94:5e:3b:5a:
83:01:8d:b2:23:5c:e2:fc:cd:17:e6:12:ea:7e:c5:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C4:27:FD:53:8F:66:8D:93:1F:39:60:12:7E:97:53:79:F6:1E:17
X509v3 Authority Key Identifier:
keyid:B9:DC:E7:A9:8B:CE:7C:0E:28:32:8B:13:CB:EA:B5:43:1D:0F:66:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:67:bd:7f:59:4e:a1:c8:45:ea:90:9e:e8:b5:7c:aa:19:4d:
28:32:b4:54:c0:66:07:1e:7a:76:2e:93:86:4d:94:1d:cb:97:
0e:da:d8:e4:b9:f3:43:af:19:6b:15:91:97:46:7f:90:53:9f:
af:01:8c:e5:6a:85:1b:80:ac:29:dc:ea:f4:48:6f:8d:80:7f:
fb:76:f8:6b:fe:a1:a1:80:28:20:1c:9a:84:b6:a9:0d:ee:21:
21:58:9a:fc:e5:b6:a5:02:61:c0:80:1b:7d:b3:d5:cb:6e:b4:
69:81:bb:90:4e:b7:42:df:88:93:e1:e8:5f:0f:e9:7c:3b:27:
62:cf:75:5c:b4:a5:8d:ea:c5:9d:4c:35:d8:ca:30:c0:27:3c:
47:e7:42:f6:23:96:a4:f4:48:5d:1c:90:d4:91:e0:fe:0c:64:
c1:ff:9b:6e:e0:93:e4:60:24:e3:b8:d3:88:04:1e:50:e2:c3:
1f:75:d1:65:ba:a6:7e:da:cc:85:c5:e1:f7:f4:3d:07:78:07:
7c:f1:5b:27:2d:34:5e:8f:0f:2c:05:9a:ac:22:c2:49:12:8c:
f1:f1:3c:61:43:85:b3:14:f4:eb:bc:05:60:74:d6:67:56:ee:
90:65:6d:ba:f6:ca:be:3a:c9:18:29:2d:5f:2d:ef:eb:58:d9:
e6:bd:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:59:20 2025 by rpki-client