Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
File: f7_PGWv9LvBwYlvuxCboYGiKwvE.mft (raw, json)
Hash identifier: VWYaBFV5pN3Owo1uPDMLuyR92HPH2mRPO556FOo1E9s=
Subject key identifier: BD:C9:27:8D:BD:B1:8A:60:97:34:00:D5:48:5A:47:43:1F:28:CD:85
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Certificate issuer: /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
Manifest number: 1C
Signing time: Fri 31 Jan 2025 07:03:27 +0000
Manifest this update: Fri 31 Jan 2025 07:03:26 +0000
Manifest next update: Fri 07 Feb 2025 07:03:26 +0000
Files and hashes: 1: f7_PGWv9LvBwYlvuxCboYGiKwvE.crl (hash: b/B/oIAdlOwWTVICby+pelyYWgAzwVWu/f2oVL8bMRQ=)
2: 52F3DAA6C1CB11EF9974C909C4F9AE02.roa (hash: 6wwD4dCdXwtS+LnCDXktDC+zo03fJil5+xbscBQAfeQ=)
3: 476FD748C1CB11EF9557BF09C4F9AE02.roa (hash: qhXg7OZORCQmwfeMjxBNXmP6ZMvJvKn0GRTuJzNo35M=)
4: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (hash: m2+w3MuoT8jahcLbP8IymDcYrHQo98+RI8vF7vbfRjY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Validity
Not Before: Jan 31 07:03:26 2025 GMT
Not After : Feb 7 07:03:26 2025 GMT
Subject: CN=679c75bf-b5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:68:b8:06:f8:cd:0d:29:b3:2c:3f:17:67:
c1:51:79:6f:9f:f8:eb:2b:2f:35:e1:c2:59:73:f1:
c6:a6:16:b9:5a:9e:5c:41:27:c3:04:58:b7:8a:7f:
21:9a:af:2f:cf:9c:eb:38:6e:60:da:a1:95:2d:c2:
2e:ed:22:4c:57:34:f1:18:94:bc:7b:59:9d:04:a9:
e1:62:df:6d:c7:08:27:08:c5:92:19:19:06:d5:c0:
f5:f7:bc:f7:9b:8d:00:8c:8c:e7:60:73:6d:3c:80:
1b:8b:c3:63:56:37:ef:3f:9b:b1:27:01:32:6d:33:
75:1e:7d:58:52:bb:19:f4:3d:74:11:bf:c2:21:f8:
d5:48:37:83:94:c9:7c:30:2d:09:f3:cb:f2:ad:fc:
31:a0:56:e7:e0:af:b3:6d:e4:e5:40:f7:ba:3e:d6:
ce:99:0a:96:3e:ef:5d:92:14:9d:b0:77:81:90:55:
3c:84:45:ab:e2:c1:2a:2d:13:d7:38:21:6d:fa:24:
32:d7:63:ea:0d:88:74:43:06:20:bc:58:58:28:10:
e5:e5:34:55:84:f8:48:8e:cc:3d:30:c4:de:f6:93:
61:2d:65:7c:5c:71:f3:73:7e:49:cb:f0:bf:a6:84:
30:4d:43:fc:4b:76:d9:37:13:00:8e:f7:7a:06:10:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C9:27:8D:BD:B1:8A:60:97:34:00:D5:48:5A:47:43:1F:28:CD:85
X509v3 Authority Key Identifier:
keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f1:2c:83:d0:50:bf:be:90:a0:fc:84:73:d1:ed:5f:1d:23:
fb:a1:ff:51:7c:af:94:11:79:52:83:61:15:2e:b3:89:21:15:
7e:2f:d4:e8:9a:a2:27:f7:18:15:cc:9e:68:23:d7:f9:d5:30:
06:73:ab:50:5c:03:82:c9:5a:72:ac:4b:69:30:a4:18:75:01:
25:dc:b4:66:6c:6a:1f:b9:08:2f:5e:c9:e0:bf:3a:88:e4:80:
58:fc:d4:f9:1c:7e:cf:54:f5:bd:71:68:54:ae:09:5f:27:53:
86:7c:dc:18:2d:46:31:ad:a3:05:1c:37:86:3c:6c:a9:d4:99:
7d:d2:f6:21:56:b3:63:ad:71:19:7b:04:04:79:ab:4c:05:7d:
ee:9b:4c:22:be:31:03:38:bc:7e:3c:56:3e:0e:98:84:99:92:
38:98:66:99:e0:55:d8:9a:04:1e:00:75:87:b5:8f:9d:d7:bb:
a2:01:cd:0a:58:c7:f6:4b:2b:56:5e:e3:b8:ac:96:c3:60:14:
11:0e:86:66:ce:01:70:2b:8a:49:57:aa:10:59:0f:22:d2:1b:
d9:69:6e:ed:53:45:ec:6c:40:7c:ee:d6:c1:b3:8b:f0:c8:06:
db:b9:38:53:9b:a1:e4:49:9f:86:34:06:be:41:fe:47:f9:cd:
81:03:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:50:58 2025 by rpki-client