Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json)
Hash identifier: M7UkkYbeM4QfsbVv96xPG2lnEv46JGrfYy8kxKqXIJA=
Subject key identifier: A5:7B:46:61:88:D0:35:A6:F7:36:F8:E7:18:DA:F1:DC:99:62:82:6A
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
Manifest number: 0157
Signing time: Fri 31 Jan 2025 03:26:50 +0000
Manifest this update: Fri 31 Jan 2025 03:26:50 +0000
Manifest next update: Fri 07 Feb 2025 03:26:50 +0000
Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: G7EYz25pGqlbBMDOIQztR72yOHmy3UxVIg0TZQL5vXU=)
2: D77FA53AB01D11EFB299352EC4F9AE02.roa (hash: 4eEXJC4TtO3yoI9oMhK5BKgEqI0bbNyeYSuDBkBIfCM=)
3: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: 0WQaR8S054hLwCn1MoV1G9i5V6cDOsk2ngljhs03hhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Validity
Not Before: Jan 31 03:26:50 2025 GMT
Not After : Feb 7 03:26:50 2025 GMT
Subject: CN=679c42fa-2a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:9d:11:69:00:d5:98:79:4a:5b:33:5a:9d:
3a:4e:fc:e5:fa:a8:5e:f2:92:46:a7:ca:b8:99:a4:
2d:5c:6e:05:2f:05:87:fb:55:0b:8d:cf:30:71:88:
07:28:53:69:19:19:03:b7:9a:6b:49:3b:db:4c:5a:
e7:f7:5c:10:cf:0a:0d:8a:61:e0:89:87:76:8d:17:
8d:4d:95:9d:f9:ce:cf:40:48:23:97:4c:69:6a:87:
92:03:7e:23:23:3b:12:f6:86:f9:a9:5d:a5:52:76:
f4:dc:5e:a4:0d:1d:fd:43:cb:65:26:03:8d:05:f1:
14:4e:71:a9:b8:0a:ac:9c:d5:2d:66:9d:35:5c:25:
d6:1c:dc:17:a8:e7:c9:a6:3b:2b:a3:66:b3:f8:7c:
02:55:fb:63:21:8e:bd:6d:90:7a:0f:0c:46:18:f3:
cb:be:8f:59:cf:45:79:de:f3:1c:84:5d:84:cd:0e:
29:15:51:cf:ed:b1:27:30:24:a6:b5:13:de:0c:c4:
de:6d:e6:6b:8d:e2:46:2e:2f:df:18:a8:f1:6b:e9:
1e:83:6e:7e:25:76:84:fc:c6:af:91:54:80:96:e1:
db:cb:84:11:c2:0a:72:c7:ff:f1:93:2c:d6:db:a5:
68:e4:54:cc:b4:3c:b9:91:6a:9e:a8:79:25:85:d2:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7B:46:61:88:D0:35:A6:F7:36:F8:E7:18:DA:F1:DC:99:62:82:6A
X509v3 Authority Key Identifier:
keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c9:c5:cd:fe:68:01:04:17:45:3d:6d:1d:91:5e:be:75:2d:
9b:0c:63:23:31:cf:64:44:3e:e8:ad:8b:09:f8:fc:aa:62:8d:
4b:23:7f:93:2f:74:ed:50:40:26:3e:f1:01:c2:6c:71:a5:99:
a3:06:91:cf:57:1a:c2:d7:76:29:59:21:f7:cc:a5:8d:db:14:
d0:24:d2:27:88:f9:b6:dd:ac:3e:84:46:e3:09:61:1c:8d:d1:
75:ab:36:3d:d7:dd:29:7c:19:b1:76:18:cd:83:86:36:8b:ad:
bb:f0:10:39:9d:43:23:06:12:c6:67:58:a2:f6:10:6a:57:dc:
76:be:7b:e5:dd:e0:8b:24:cf:29:57:4d:2b:ce:b4:43:21:23:
5c:21:b2:84:d4:93:29:37:9d:9d:33:fe:cd:fd:4d:f5:01:a0:
96:31:05:7c:8c:a1:cd:c4:2e:8d:c6:bd:da:82:07:83:a3:fe:
2f:50:ed:80:63:00:84:00:cd:05:23:4c:7f:06:e4:82:2b:e7:
51:ba:6b:31:8f:30:e2:28:14:64:b4:39:3b:6e:ea:bb:bc:cd:
39:26:c9:c9:ea:37:2b:47:af:0f:1a:bf:df:91:ac:d6:05:81:
b3:09:3c:40:e2:e9:2c:4e:9f:d4:16:6a:fa:73:ae:f3:b3:e6:
ad:a1:06:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:13 2025 by rpki-client