Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
File: piPcBe58I3DKREMQhN5RMh83pwQ.mft (raw, json)
Hash identifier: fun7QWdMMfUOTsC0hO26QNoVBK4IoYrwszJqot72aW4=
Subject key identifier: 96:DB:0B:E2:EA:25:1E:7F:4E:F0:7C:4E:1C:E4:8C:21:7C:A4:85:D2
Authority key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
Certificate issuer: /CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
Manifest number: 24
Signing time: Fri 31 Jan 2025 06:52:32 +0000
Manifest this update: Fri 31 Jan 2025 06:52:31 +0000
Manifest next update: Fri 07 Feb 2025 06:52:31 +0000
Files and hashes: 1: piPcBe58I3DKREMQhN5RMh83pwQ.crl (hash: 2rzQra+DrdRlaKa8CTaQiflihYy95PY/y56f8qolM3Y=)
2: B93E11C0AA7C11EFA2125D79C4F9AE02.roa (hash: L6gwOkLW0S9oSXFYmJ2NgzIUWM0zCt+FTxcWMzfbAlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Validity
Not Before: Jan 31 06:52:31 2025 GMT
Not After : Feb 7 06:52:31 2025 GMT
Subject: CN=679c732f-9fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:f5:9e:ec:d6:15:ee:b6:91:fe:0e:c6:62:
f3:97:99:2d:a1:7a:22:93:e4:8d:dc:43:78:98:89:
59:e5:d5:13:a4:ac:16:0d:76:ea:17:e1:7a:f4:15:
ab:6d:99:44:38:ec:0d:81:23:3d:5c:c9:2c:bd:28:
33:bb:a9:bc:40:60:19:43:da:d8:0c:92:7b:be:4b:
1e:5c:78:6b:db:4b:5c:7e:8a:44:6e:72:79:b2:b0:
65:f6:a9:78:24:48:ff:83:5f:36:6a:c4:de:81:f7:
cc:8e:85:e1:45:10:af:b9:ce:25:13:a5:ef:84:cf:
70:b5:2b:81:34:7d:1f:a3:04:db:55:42:99:3f:46:
12:83:16:a6:11:f5:53:a1:d7:23:69:f9:74:61:be:
c3:bc:28:c3:ea:98:6a:0f:12:45:c4:a1:60:19:9e:
cc:a2:d8:12:95:cf:96:87:97:ae:a9:bf:4e:fe:a5:
a7:82:79:6d:49:23:70:c0:8c:aa:da:4c:60:45:1b:
39:1f:0c:d4:f0:85:bc:f2:a5:0b:73:af:bd:21:22:
96:c2:5c:36:ec:30:0a:52:10:31:ab:b0:35:2c:0b:
67:c6:5e:c5:cb:b9:e8:a0:99:af:33:48:0b:63:22:
4a:e2:ad:51:80:d0:11:a3:d3:72:ee:b5:14:38:70:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DB:0B:E2:EA:25:1E:7F:4E:F0:7C:4E:1C:E4:8C:21:7C:A4:85:D2
X509v3 Authority Key Identifier:
keyid:A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ef:25:4d:56:dc:50:b7:29:12:1d:08:06:a3:d6:22:bb:cf:
ed:b7:9c:b4:3b:e7:b9:0b:db:59:ba:2a:40:44:cd:34:53:50:
28:88:50:97:69:8c:0a:32:9c:72:7a:9c:dc:39:96:d2:dc:f1:
e9:af:30:31:00:a5:aa:fa:1e:0d:16:7d:9b:0a:f6:f7:86:67:
0b:c3:b1:61:df:fa:f1:8f:ff:5b:bc:77:a6:b8:48:14:89:90:
ea:d8:03:98:51:63:03:dd:d6:25:79:a9:bd:58:6c:67:e9:9a:
f9:0b:9e:2f:2c:d6:fd:58:46:d8:98:59:1f:87:6d:44:22:1d:
11:8a:92:f7:7a:2c:a4:d8:34:df:d4:fb:34:08:cb:73:ce:a8:
dc:9c:85:32:d2:d0:d6:c1:79:87:af:de:89:65:c4:ba:14:01:
81:48:d5:2c:1e:a3:10:a3:da:a1:76:7a:83:e5:8b:cf:c8:db:
5f:e9:b3:ee:07:31:6f:c9:4e:64:a4:9c:78:2a:72:34:c6:58:
b5:7c:67:2c:fc:18:2d:9b:4b:c1:7d:a1:3f:44:58:22:03:07:
65:55:8c:8e:a9:dd:bc:ec:73:24:bc:3f:8b:f3:51:ce:d4:61:
fd:be:ee:3e:1f:6d:2d:0d:eb:de:21:d7:18:c8:fc:4e:f7:35:
76:3d:0d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:03:59 2025 by rpki-client