Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json)
Hash identifier: rHCsWNBN9W/XoOsWMlNQkspK62LBdtcXfr1lFTJnM64=
Subject key identifier: 78:0D:65:EA:BA:0A:80:08:53:6F:80:AE:59:C5:DE:6A:48:10:FA:22
Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Certificate serial: 0445
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
Manifest number: 0441
Signing time: Fri 31 Jan 2025 00:19:19 +0000
Manifest this update: Fri 31 Jan 2025 00:19:19 +0000
Manifest next update: Fri 07 Feb 2025 00:19:19 +0000
Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: S7KFoa+go/nd8F+Lp56VKb95H+AVeSTp0hI6aGKTEN8=)
2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: JRIJmi6CkdzwRl9tqXcDbUlpayemlqeCYja07bnQOys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093 (0x445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Validity
Not Before: Jan 31 00:19:19 2025 GMT
Not After : Feb 7 00:19:19 2025 GMT
Subject: CN=679c1707-35ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:fd:69:88:15:86:1f:de:31:a0:5f:9b:34:
ef:57:8d:06:be:51:66:ee:c1:bd:b0:1d:12:de:f2:
61:27:d5:42:27:46:bf:90:85:d6:96:e2:ef:1a:40:
71:61:65:b9:2e:53:b9:67:8e:06:55:75:c9:f2:82:
6a:ec:d7:6e:7e:0e:2d:25:69:18:7d:f8:40:c2:ab:
92:46:ac:b8:0f:32:36:33:46:76:12:e2:43:0e:05:
03:dc:ae:9d:68:b8:4b:bd:a8:af:d8:fb:a9:0a:b3:
79:2c:ff:3b:ee:e8:35:e7:32:05:3d:6d:b2:e4:63:
e5:1e:91:5c:2b:96:da:7e:a5:1c:ef:6e:0b:a2:43:
2f:da:2a:74:f4:4c:74:43:f3:cb:1a:2e:03:42:f5:
7b:04:2f:5f:17:b0:e2:83:f3:e8:63:e1:d4:fa:e9:
f8:93:59:48:e0:33:87:14:a8:66:64:80:d2:4d:b9:
8c:08:16:ce:e5:b3:8b:04:16:3d:4e:cd:0f:85:7e:
48:7c:ee:ce:d9:c3:65:ad:29:ec:5b:02:b2:94:c2:
39:c1:75:40:a9:ef:c1:55:52:79:f6:25:5a:0f:28:
08:67:61:d5:e1:9e:b5:bb:36:fd:a7:e6:97:59:75:
a9:50:fc:60:6a:d3:59:40:d2:2e:7a:cf:60:66:d9:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0D:65:EA:BA:0A:80:08:53:6F:80:AE:59:C5:DE:6A:48:10:FA:22
X509v3 Authority Key Identifier:
keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:83:99:5b:41:4f:ca:cc:80:27:4a:f9:bc:88:89:73:49:20:
74:45:91:b0:0e:c5:37:94:cb:aa:a7:41:bb:7d:d2:5e:96:f6:
92:d8:cd:ab:58:16:e7:8a:17:f0:dc:83:81:b0:16:fc:76:39:
7c:76:38:4c:72:ba:fa:93:f6:ce:1c:26:af:49:f0:b8:58:9f:
9e:64:80:60:05:a4:4e:31:01:62:ab:52:4f:e7:a2:2d:b7:9f:
a1:c6:1f:d2:90:a5:f9:d2:83:47:65:bf:86:bb:44:eb:2b:08:
72:1d:cf:0e:77:a3:1c:e0:a5:4d:6b:4b:74:74:76:af:9e:24:
dc:21:6b:4e:da:31:2f:d4:6c:2e:d4:e3:2f:e9:38:9a:d3:95:
56:65:93:2a:21:08:83:f7:a0:87:69:7b:66:06:d8:71:05:aa:
49:02:3a:24:59:02:93:fc:2c:19:f1:66:ff:4a:4f:9f:f9:69:
5e:8a:f9:59:e7:89:88:08:07:b2:ea:73:52:b9:c8:08:d9:c0:
d8:28:d8:4b:8f:84:6a:6d:f3:8c:c3:fa:eb:2f:09:69:bc:fc:
cd:8d:d6:0d:7b:68:17:6c:e4:e4:1a:28:04:c2:50:55:a3:8a:
58:80:90:dd:22:ea:c0:d4:c2:dd:94:a7:f2:7b:a7:4d:55:00:
b1:7d:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:43 2025 by rpki-client