Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
File: PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json)
Hash identifier: HtrDcTjlHzncwT1a5MUknva8QbePB0nMoBv7EPFo5Oc=
Subject key identifier: 15:F5:FB:DC:8A:E2:2F:67:F1:2D:D1:8A:51:8E:77:72:5D:74:9C:71
Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
Certificate issuer: /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Certificate serial: 3447
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
Manifest number: 3447
Signing time: Fri 31 Jan 2025 14:41:59 +0000
Manifest this update: Fri 31 Jan 2025 14:41:58 +0000
Manifest next update: Fri 07 Feb 2025 14:41:58 +0000
Files and hashes: 1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: p4YxSkNlQKUHK/O9q2UWb/gqF+EbFuoDmiFBJiisntY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13383 (0x3447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Validity
Not Before: Jan 31 14:41:58 2025 GMT
Not After : Feb 7 14:41:58 2025 GMT
Subject: CN=679ce136-a156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:54:37:01:b7:75:78:e1:aa:a7:5f:b2:b6:
42:91:44:13:4d:26:4a:7f:53:ea:06:dd:98:e2:bd:
cb:6c:80:b6:c8:a0:91:d4:27:bf:96:7a:22:a7:52:
36:aa:fc:cc:e4:6c:a2:2b:fb:b5:ae:6a:0a:9d:39:
46:8b:16:35:93:8e:5e:b3:9e:9f:82:f1:f3:1e:9d:
58:f4:7c:15:66:62:8c:79:f4:33:09:f6:02:f7:e2:
f4:25:94:b1:61:96:47:86:9d:5c:83:14:4f:7f:83:
81:70:e1:bc:ef:30:45:c6:2c:1d:08:2b:a8:f6:43:
65:a4:46:1e:4b:66:ce:22:70:f6:3e:1b:fe:70:82:
3d:83:17:e8:e6:d7:df:93:02:68:b1:df:c6:a6:cb:
d9:59:bf:18:47:29:0f:2a:bc:79:23:2d:03:2e:4f:
1a:3d:04:84:3a:40:a7:82:42:e1:2e:8e:08:28:4f:
b9:c6:2d:6e:06:71:31:e3:86:56:4e:79:81:b2:c5:
68:ad:d7:10:af:cf:d2:a4:55:c0:70:7f:c6:c2:ed:
b3:b6:8f:72:f5:01:85:86:96:fa:49:6b:a1:20:2d:
cb:b7:c7:14:76:bb:63:dc:6f:c7:41:a6:a8:d0:d0:
f0:d6:fc:d6:bc:d8:42:30:a5:e6:c7:ac:d4:28:be:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:FB:DC:8A:E2:2F:67:F1:2D:D1:8A:51:8E:77:72:5D:74:9C:71
X509v3 Authority Key Identifier:
keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:e1:c2:d2:51:9a:f7:b7:bc:47:f0:e0:bb:12:8b:dd:5f:9b:
a8:f7:ac:41:5a:c5:1a:c3:2a:6f:98:10:af:39:87:e2:80:2e:
a6:04:0f:e0:fb:6c:03:c4:ba:01:5f:4f:20:52:4c:e7:0f:af:
80:62:b0:df:7d:34:3e:6d:38:bb:ca:25:5b:ba:d9:f2:63:cf:
12:d6:b3:a7:c1:ce:dc:8b:d7:af:ae:6f:33:06:7e:6a:3c:6a:
eb:a3:a0:a1:c2:f6:9f:7d:b3:c2:b8:f7:4b:55:4e:e2:12:ca:
be:25:b5:89:0d:e1:f8:75:b6:8f:13:e2:c8:aa:5f:f3:ee:3c:
ed:38:84:89:0e:71:fa:b4:5c:8b:bc:aa:69:f3:0a:39:7b:42:
f5:ed:ab:24:1d:60:46:bb:b9:d2:41:15:63:b3:6b:ec:53:1f:
01:ed:db:30:7c:0a:4c:71:e3:cf:29:52:1b:0b:ed:69:7d:04:
d3:e2:d1:fb:46:45:fd:27:d3:ef:54:d7:7f:6f:6f:29:b0:37:
8f:5f:92:ae:bd:bf:be:36:fc:6f:42:87:fb:64:ef:c1:0a:28:
85:78:84:90:2b:de:5e:5c:00:74:da:32:f5:e4:1c:f6:a8:ac:
58:ea:2f:d6:d3:07:bf:74:08:4c:17:8c:3b:fd:de:e2:ba:77:
5a:d6:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:25 2025 by rpki-client