Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json)
Hash identifier: UTGgcZMux38Dj5Z9xdSRCLi6R6rc99TsRXykN7DYhnw=
Subject key identifier: 03:57:CA:D6:0A:29:69:17:F2:04:21:EB:0F:FD:B0:96:B2:2E:9D:8C
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
Manifest number: F4
Signing time: Fri 31 Jan 2025 04:35:26 +0000
Manifest this update: Fri 31 Jan 2025 04:35:26 +0000
Manifest next update: Fri 07 Feb 2025 04:35:26 +0000
Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: GOydJQPuyctJWl/OZJNIOZ/IaLI1Z6Sst4vYU2qzSBE=)
2: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: h5rk3Xz6VW0VeUtdbytEnw8Pa8H3Io324xwpZFHPhXc=)
3: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: Vl/bZ/gdPwuufyZFmfVq5SymVLQXqPiJLzDWamKz3l4=)
4: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: ROYJghlVOvaMnbHvL/73QuVNi54B62NVGwKlydNJjfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Validity
Not Before: Jan 31 04:35:26 2025 GMT
Not After : Feb 7 04:35:26 2025 GMT
Subject: CN=679c530e-510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:f6:f0:ad:0d:fe:bd:97:23:70:9f:d9:45:
93:97:57:c4:7d:9f:83:01:a2:08:b0:c7:47:b8:33:
dc:6c:5d:4a:23:52:2c:f5:86:bd:0f:ba:ab:66:6b:
5b:27:0c:03:e4:d6:01:40:ed:16:40:31:a0:a4:6b:
14:6e:9a:de:c9:54:4a:48:7b:b3:21:32:b3:21:fd:
03:6d:c4:d4:25:20:97:02:d3:14:60:f3:97:a0:32:
4b:02:be:d8:15:6e:59:cd:22:7d:e3:16:5b:c8:fe:
36:34:b2:c4:16:56:51:f1:ef:f6:a2:d5:6d:76:53:
0a:79:72:6b:cd:93:61:2e:dd:5d:ab:a8:8e:52:7f:
96:fa:7d:42:ec:cc:eb:32:50:f9:89:a3:18:f1:22:
48:79:b3:9c:5e:af:f2:27:93:37:22:a6:93:27:6e:
3b:1b:24:42:50:3a:57:7c:6d:1a:a0:8b:26:cc:ae:
70:3b:b8:f4:30:38:d7:37:40:c2:cd:5d:ff:ea:17:
c0:57:95:4d:64:a8:17:10:bc:a2:9e:cc:20:dd:18:
f7:e9:88:58:2c:31:72:bd:87:b7:01:35:fb:e5:81:
d5:a4:54:b4:96:9e:9c:94:29:c3:d8:d4:d6:fa:5b:
51:54:85:66:3b:a4:81:1d:b1:61:e6:6d:0d:68:02:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:57:CA:D6:0A:29:69:17:F2:04:21:EB:0F:FD:B0:96:B2:2E:9D:8C
X509v3 Authority Key Identifier:
keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bf:97:41:db:8c:a4:da:3c:80:e9:d2:1d:eb:97:9a:90:23:
d9:42:1e:c5:c8:fd:02:e2:15:ec:c3:c8:d7:2a:a6:b7:a0:83:
e0:39:10:fc:ff:62:55:dd:03:80:57:2e:e5:58:b8:12:0c:68:
d8:5e:55:a4:3b:42:13:8c:50:cd:52:c5:44:aa:21:1b:40:c2:
fd:3e:88:5d:5d:dd:3b:63:41:04:a2:eb:e8:7d:9e:af:f4:40:
06:58:0e:7a:2b:75:ad:9a:4c:8a:53:b9:10:37:96:12:fb:2a:
3f:db:ce:f9:68:92:bd:3f:74:c0:45:28:36:0a:21:b5:ed:87:
cb:1a:ef:af:31:1a:30:5f:3f:2e:5c:fc:7c:6e:ea:f3:58:38:
33:1f:97:0e:cf:07:ff:6a:d3:2d:f4:e8:3f:5d:35:39:29:41:
b2:27:bd:85:24:72:27:77:b3:1a:9e:93:0c:99:c5:5b:8a:17:
12:20:d2:e9:a9:7e:f8:9c:79:52:ed:a3:40:cb:96:c9:58:fb:
96:aa:89:63:2c:b1:59:a3:d3:fd:06:3e:b7:63:f3:bd:ac:58:
e5:19:b1:aa:e8:1c:46:15:7d:b4:42:3c:1a:53:51:11:03:85:
8f:8e:ef:96:93:3a:4b:67:72:8f:a5:d2:84:05:6c:3a:ab:72:
11:96:87:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:11 2025 by rpki-client