Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json)
Hash identifier: Fhypd1i/1oKuvBRxk7etIhnQSnh1m+IhfYrzsV58UrQ=
Subject key identifier: 3B:9F:E6:57:A4:88:ED:7B:03:BF:5D:1F:27:F8:DE:40:4F:71:00:A0
Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9
Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
Manifest number: 0115
Signing time: Fri 31 Jan 2025 04:03:43 +0000
Manifest this update: Fri 31 Jan 2025 04:03:43 +0000
Manifest next update: Fri 07 Feb 2025 04:03:43 +0000
Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: 3KBT6RAq2RZG9yECwg6kWXJqAvyCjL0aHJ1+1rOz9Bc=)
2: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: c3n7ErqEI7wUv0Zh/82IQ41rmFajxkaaakm4Lrf4zUE=)
3: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: OyzekySsh32QnXqLJ9xXpFy1GOqrIr4htNA7lulacc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
Validity
Not Before: Jan 31 04:03:43 2025 GMT
Not After : Feb 7 04:03:43 2025 GMT
Subject: CN=679c4b9f-e2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:1a:b3:4b:01:30:70:f1:d8:c7:1d:67:92:
f4:b0:82:b7:30:c5:7e:46:33:0f:ef:f6:a6:4b:02:
22:cd:49:cd:c3:f6:9d:59:b6:6a:56:6d:35:b4:b0:
a4:da:be:99:95:81:bf:0e:2d:2d:39:7b:4a:ed:af:
93:61:03:13:17:4d:ea:c6:03:2d:69:5f:9c:02:47:
d8:26:d4:f8:25:3d:d1:4a:bd:11:87:f6:bc:4c:c3:
d8:7d:ef:0a:3c:5b:5c:92:ca:15:fe:7d:51:8c:0d:
b9:6a:39:95:bf:e0:4a:a1:53:b9:23:d8:18:9d:80:
90:c6:bd:8b:b5:4b:9d:6b:e0:07:0e:d4:f6:2a:48:
06:69:80:67:0b:c7:a3:2e:0b:37:a3:50:1d:f5:d1:
bc:01:fb:4a:a9:5b:f4:48:11:19:b0:c0:4c:64:b0:
4e:a3:23:5e:cf:ad:d4:68:9a:a7:f7:fb:59:b2:39:
1b:1a:01:50:c9:cc:49:36:f0:a5:73:b7:e0:d6:c8:
b8:7c:8b:f9:52:4a:ce:51:0f:5a:0c:b9:cd:73:e8:
b1:f2:1e:08:31:c9:c4:f1:d5:1e:3c:49:5c:45:ec:
57:49:b0:a9:31:48:f0:1a:3e:f0:96:4f:c4:ff:60:
d5:89:2d:95:30:40:d3:59:ef:cc:ad:87:ab:2d:f1:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9F:E6:57:A4:88:ED:7B:03:BF:5D:1F:27:F8:DE:40:4F:71:00:A0
X509v3 Authority Key Identifier:
keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f5:a2:50:69:23:b7:6f:45:2a:cf:72:b9:13:ff:3b:91:a4:
69:d2:5b:49:54:c5:c8:8d:5e:34:aa:f0:b2:e7:ef:10:d1:c0:
50:ca:96:7a:8f:b9:1f:03:e1:21:09:4f:26:d4:81:0a:37:46:
81:db:36:36:ac:b4:a8:07:26:ea:20:bf:46:a0:6b:2c:f8:43:
7a:bc:d1:dd:e3:8f:93:9f:ca:40:dd:d9:a0:b3:11:f8:3c:29:
f0:2a:00:01:ef:d4:99:64:59:fc:ff:fa:58:29:75:f5:f6:3e:
5f:7b:51:ca:00:81:32:f4:cc:5a:8c:69:d7:e9:ba:65:12:29:
80:98:6a:af:ee:3b:c0:91:a0:bf:ab:18:db:ad:0b:96:57:0f:
a4:de:cf:2d:30:dc:6c:fa:7c:43:2e:75:29:5c:49:bb:16:5e:
0a:0c:bc:76:ea:7d:0d:42:8f:a7:56:2f:9f:0c:0a:4f:9c:a3:
66:0d:6a:55:d8:b1:13:7e:f3:77:40:a0:89:d8:44:51:06:67:
13:a0:71:59:18:2e:ba:23:67:06:3f:73:ef:de:35:25:4d:c5:
b0:19:be:f9:2e:7b:94:32:94:b3:65:c6:e8:4e:f4:d8:14:f1:
81:59:4a:3e:60:b1:c2:36:e4:59:68:93:fe:f6:e3:3c:92:1c:
ed:25:cc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:20 2025 by rpki-client