Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json)
Hash identifier: VTiRFOLQsg0f1lPCy/hm9cNcEY86SNQHkvxdI46sE/Q=
Subject key identifier: 48:59:0E:A1:A6:CB:18:20:BD:44:68:63:71:80:EC:87:51:D2:19:08
Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Certificate serial: 0E00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
Manifest number: 0DF8
Signing time: Fri 31 Jan 2025 17:48:57 +0000
Manifest this update: Fri 31 Jan 2025 17:48:56 +0000
Manifest next update: Fri 07 Feb 2025 17:48:56 +0000
Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: s4fEaX0YIgxozeoVlSMgyKtZI/HsFh5lWLmaQyk0ay4=)
2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: PT85jOUkAj1X0WXEwRPCdUqy+wM3om5TOq/+D9IWTpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3584 (0xe00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Validity
Not Before: Jan 31 17:48:56 2025 GMT
Not After : Feb 7 17:48:56 2025 GMT
Subject: CN=679d0d08-c248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:d7:e7:fe:54:d8:02:a6:f6:5e:e3:93:76:
c5:cb:15:e2:44:4a:ad:97:8b:2f:45:38:89:cd:e9:
4c:91:63:0e:95:11:b6:c3:bc:32:d5:77:38:09:67:
e1:f2:7b:68:3d:35:61:a4:50:ae:a8:a9:d0:44:c6:
17:e0:77:5f:5b:d9:d6:fc:d1:aa:8f:04:91:15:c9:
b3:4f:27:16:bb:ea:36:c7:07:99:81:94:a0:c5:61:
f9:58:7e:99:b2:50:ad:55:ae:b2:ea:62:e5:c7:e5:
e6:8c:4f:8f:f4:0c:d8:da:97:47:ed:1a:c3:ec:2b:
ac:93:cd:ac:1b:eb:a6:f4:23:c5:73:0b:ac:a0:d5:
3c:55:1d:66:b2:c4:7f:cb:2c:49:27:13:b7:90:3e:
42:fd:4a:ae:9c:01:f6:08:96:65:b7:0b:d8:6e:dc:
2c:74:99:45:d1:8a:1d:34:3c:7f:79:4e:8f:e1:a3:
ad:21:11:94:3a:e9:7a:d3:d9:f4:dc:10:84:5e:20:
fe:41:a8:d8:2a:cc:af:22:b7:70:6e:ed:a2:f6:a8:
57:a0:12:93:f0:65:58:d8:9d:07:6e:a4:6c:1b:d4:
c9:30:47:aa:2c:42:53:f2:bb:9a:c2:10:ca:d5:c0:
3a:d8:32:b5:4d:d2:d4:17:93:fc:74:05:96:70:ca:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:59:0E:A1:A6:CB:18:20:BD:44:68:63:71:80:EC:87:51:D2:19:08
X509v3 Authority Key Identifier:
keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0a:e8:51:60:2a:dd:0e:7e:dd:f3:fc:84:0f:9d:70:5d:d3:
35:c8:0a:e0:ed:91:fe:c2:7b:36:d6:eb:b3:5c:6c:58:e9:37:
4e:05:4f:c2:3a:95:c7:cc:e0:7e:e7:ae:53:00:d8:a1:83:b6:
ec:aa:c5:e4:36:18:7c:67:d9:3d:5d:0e:18:8d:4a:f8:3e:e3:
c8:69:05:a1:2b:26:97:a0:8f:ac:44:89:7e:23:22:f9:71:eb:
a3:b0:3d:63:14:9e:81:84:9d:e2:ac:af:2d:cd:b7:fd:4e:b1:
30:7c:9f:aa:c6:7a:2c:1f:a1:fa:52:06:11:90:23:cf:78:0b:
91:bd:d7:c8:6a:cd:0e:31:33:69:7a:36:87:5f:bb:68:7c:c2:
fa:4f:6f:17:2b:50:02:0c:cb:6d:44:a6:8a:2a:a6:76:91:67:
fc:f1:37:ff:12:9b:cb:19:cb:f9:77:86:f7:88:c9:03:09:70:
a2:30:14:8d:ed:88:20:ea:3c:df:f4:a1:37:50:46:b5:a1:9d:
c8:d5:e0:a4:72:ff:e1:5e:46:ff:bf:bb:30:37:1b:46:c6:1a:
e0:af:a7:10:4b:1e:c4:28:3f:a5:dc:98:31:59:cd:0b:85:a4:
f3:ff:14:4e:da:c6:3f:5b:65:01:08:64:70:40:02:df:d8:7f:
6d:80:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:45 2025 by rpki-client