Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json)
Hash identifier: GwXmJxHUco4IEp9r1ziGf8iX0cJU1XpseluTDfSbK78=
Subject key identifier: F4:00:18:6F:67:35:21:4F:7D:6E:B9:49:01:32:D2:B3:85:F8:88:96
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial: 033C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
Manifest number: 0332
Signing time: Fri 31 Jan 2025 01:10:10 +0000
Manifest this update: Fri 31 Jan 2025 01:10:09 +0000
Manifest next update: Fri 07 Feb 2025 01:10:09 +0000
Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: uoUf8yfPCJi/bEXq3+N0ckimnAOf0QNJ621B3ZnobNg=)
2: 82230EB20A7211EE8FA2CD58C4F9AE02.roa (hash: pFtPdQMMb/WQBA6aWqz7vT25hbAFdZnwC3pUZe1i/Ks=)
3: 80FAEBF40A7211EE8FA2CD58C4F9AE02.roa (hash: Sf1R/khEpR4iFJR+AM7kGD6260NMhorWrh2A7K0OVyw=)
4: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: TyBxPxhfQAireAxlWMgdzu2oa+eead1thRrfD4eJkU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828 (0x33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Validity
Not Before: Jan 31 01:10:09 2025 GMT
Not After : Feb 7 01:10:09 2025 GMT
Subject: CN=679c22f1-2146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:64:56:43:3f:11:82:63:bb:54:37:1d:9f:
9a:51:b3:e8:84:3a:b7:a2:a7:4e:1d:4e:b9:9e:72:
96:78:d4:34:bb:57:17:90:dc:e0:65:e8:3d:69:16:
b4:a0:8d:19:30:c2:f9:6a:4a:0b:9c:1d:2c:99:ea:
2d:be:46:25:26:79:a5:37:f9:70:66:45:fa:9c:20:
0d:07:14:01:8c:e1:17:ca:b9:94:31:fd:b7:f7:e9:
c4:3c:cd:c2:d4:e5:c6:85:76:2f:f5:be:ec:bb:9d:
40:eb:2c:16:1c:a5:3a:3c:3b:c2:5d:c1:f0:8c:d3:
50:9d:af:e4:27:70:21:ef:93:45:1c:e7:b3:f7:59:
92:9a:1b:87:72:db:94:e8:ce:ba:97:e0:43:75:c3:
a7:3a:12:12:42:09:73:66:cf:5a:61:1e:f7:df:3c:
85:06:0e:ed:78:73:97:31:de:8b:b1:32:8b:1c:55:
d4:2f:61:26:e0:f9:b3:3b:03:bd:3f:90:b0:be:74:
f9:92:81:0c:14:b3:23:ff:ee:5e:0d:aa:d4:88:00:
6b:66:a9:aa:b9:58:ac:9c:ca:e9:66:18:37:b2:e0:
12:14:e0:48:56:6c:21:5a:f5:24:d7:09:0c:da:39:
8c:fd:0b:da:da:5a:31:c5:69:49:e8:59:29:7c:3b:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:00:18:6F:67:35:21:4F:7D:6E:B9:49:01:32:D2:B3:85:F8:88:96
X509v3 Authority Key Identifier:
keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e6:ba:98:b1:32:ca:ff:91:1c:77:a9:7f:61:6a:6f:5a:c4:
c8:2c:89:52:ba:d2:33:45:25:2e:8f:44:5a:2b:52:98:2c:83:
28:05:94:36:35:02:ef:d1:1d:0f:80:36:21:4a:1c:4d:76:1f:
2e:c8:e0:4d:48:ef:a5:28:3c:ed:29:d6:aa:f7:3d:16:1a:41:
c5:8a:85:8f:ac:1a:14:c0:da:04:30:7a:07:2c:ab:40:f2:6f:
7d:49:91:24:77:8b:2e:9d:b5:d4:b7:a2:6d:87:ee:e3:34:93:
a3:88:11:a7:68:4a:6a:24:30:03:52:c5:0f:c9:96:f6:53:09:
21:e8:a2:c4:8e:fe:49:bc:db:86:06:d5:e7:9c:0c:ee:7c:fe:
cb:fc:40:11:05:e8:48:00:82:ba:9d:05:65:44:f7:c7:a4:63:
ee:b1:42:a7:53:39:46:9b:52:a3:c6:75:e8:d8:3a:f0:1e:08:
97:bf:4d:e0:f8:9c:1f:98:ef:d9:af:3c:3a:b3:80:20:6c:50:
76:90:1d:4a:ce:d3:70:db:ed:58:1d:0c:d3:66:34:9d:33:ea:
87:bd:14:19:7b:c3:7e:0f:d5:1f:8e:42:1f:54:99:2b:ba:54:
fb:c1:01:7d:f7:e1:4e:2c:8c:79:48:9d:c1:26:2e:23:ab:2d:
75:09:2d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:45 2025 by rpki-client