Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json)
Hash identifier: Qrzmv9JblsP1jkESaUOoSwG/jm8BG51qTQ2lekaXA6A=
Subject key identifier: 8E:16:84:F3:7A:AA:61:06:61:F9:12:B4:C7:C2:D7:BA:37:B5:E0:10
Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Certificate serial: 0B33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
Manifest number: 0B2C
Signing time: Thu 30 Jan 2025 19:14:06 +0000
Manifest this update: Thu 30 Jan 2025 19:14:05 +0000
Manifest next update: Thu 06 Feb 2025 19:14:05 +0000
Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: c7W2yrFXXSr+rBa6y3Ep6DtNOb/XXnlbNZITlVM9M50=)
2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: UpiX7Cqqtl0g5R+6w/YacrFNgDs2XRQxBgBI8gsoR+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2867 (0xb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Validity
Not Before: Jan 30 19:14:05 2025 GMT
Not After : Feb 6 19:14:05 2025 GMT
Subject: CN=679bcf7e-5b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:27:95:c5:9f:8f:2d:8a:93:50:4f:e7:3d:
e6:66:6d:aa:f9:2f:e7:44:5a:6e:49:61:8e:60:18:
29:75:40:5b:f7:e7:a4:db:b6:93:d7:62:a2:ac:a1:
2c:1c:87:33:44:65:2c:37:33:9b:50:93:8c:a3:2c:
72:ee:5a:c8:1d:91:d5:08:45:09:22:ab:92:cc:c5:
49:37:56:a9:6d:88:ca:13:ff:d1:21:4d:35:61:02:
9e:3b:17:02:1b:2a:3c:a3:b5:82:8e:5b:1f:47:a4:
d8:71:42:dd:1b:53:2c:5d:56:1a:08:cb:b2:60:b6:
12:f1:dd:c0:3a:be:f7:9b:f4:52:de:09:61:77:1d:
02:d9:d6:ee:50:44:0c:f1:9f:fc:55:54:30:6f:29:
f2:30:60:32:e8:4b:67:cf:fd:51:29:8e:fc:59:c1:
97:39:54:66:45:d9:1d:4d:6a:9b:45:69:29:ec:ad:
dd:69:1e:bd:52:ca:70:50:a6:63:8e:55:62:1e:92:
0c:b3:a2:ec:d1:aa:e5:03:df:1a:d3:cf:19:49:74:
73:e9:7c:3e:3b:76:38:5f:99:0d:d4:e3:de:09:ee:
39:8d:57:ef:eb:8d:72:fc:90:84:2e:4d:10:1e:d4:
c9:24:ff:92:b6:8c:60:bb:51:0f:51:64:67:03:a0:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:16:84:F3:7A:AA:61:06:61:F9:12:B4:C7:C2:D7:BA:37:B5:E0:10
X509v3 Authority Key Identifier:
keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b4:f6:ed:3f:d4:56:98:78:1f:ab:57:8d:be:51:65:68:28:
2d:cc:37:a2:12:ed:e0:14:95:56:12:d2:46:a1:f7:ce:3b:1d:
da:97:7b:9d:28:57:30:cb:3f:13:62:a5:ef:ea:a6:bf:df:25:
05:40:c1:fb:15:4d:a2:76:92:05:0e:f7:03:1c:27:6c:ca:8c:
9f:7d:d2:5f:20:ac:8a:c3:bf:55:98:c3:12:e1:77:bc:71:e2:
0d:de:44:33:d6:24:d7:5c:95:03:94:2f:1b:34:55:a4:03:e9:
fb:dc:1b:41:32:91:99:d3:7d:d7:90:da:86:36:87:dd:2b:ec:
cb:ab:fa:e1:1c:ce:b4:1b:a6:ba:db:01:2a:d1:aa:b7:d1:d9:
f6:10:b1:a3:6e:c1:21:6a:76:c3:94:84:ef:54:f0:eb:4d:b0:
ad:4e:15:d2:b4:32:16:29:f0:60:e4:c2:7a:5d:dc:6d:2a:f5:
73:3d:d4:4d:c4:2c:b5:2e:cf:7a:92:12:97:c0:0b:b1:27:5d:
b5:1b:83:a6:4d:5d:85:5d:e7:47:0b:ca:17:86:d4:a5:c8:55:
a3:e5:6b:76:1f:1f:9f:11:b6:e5:47:3f:34:d4:b2:2a:33:e4:
65:07:8e:7b:2f:bb:14:5b:5f:d8:5d:d5:73:db:f4:20:2a:97:
0d:f1:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:34:01 2025 by rpki-client