Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
File: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json)
Hash identifier: s6GrJ390AKRsNDZUfWUxc8BcUcT/jUjJztjRX/NlGS0=
Subject key identifier: A6:50:20:BC:3B:30:BA:3C:EE:39:5F:B2:CD:26:C5:95:D2:09:85:F8
Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
Certificate issuer: /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B
Certificate serial: 0442
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
Manifest number: 043A
Signing time: Fri 31 Jan 2025 00:20:56 +0000
Manifest this update: Fri 31 Jan 2025 00:20:55 +0000
Manifest next update: Fri 07 Feb 2025 00:20:55 +0000
Files and hashes: 1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: hs8TT10gkLL/DgOqwsjJVf0DABvQIdRL5j5AzzBNNGw=)
2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: SSW9TV8jZN6fvYq4gIStDsbEdDvovlOhUtObC7g07YA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090 (0x442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B
Validity
Not Before: Jan 31 00:20:55 2025 GMT
Not After : Feb 7 00:20:55 2025 GMT
Subject: CN=679c1768-3af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:f9:ec:aa:ac:0d:d8:c7:49:60:c7:4d:36:
0e:77:07:db:8f:ee:a4:91:59:4c:bc:46:e9:e7:8e:
82:0d:e4:14:f2:fa:4c:29:e2:a1:4a:fc:73:14:48:
6b:51:ef:d3:8e:e8:7f:dd:f9:24:7e:03:1f:20:88:
28:ff:07:d6:91:2b:14:65:4e:41:c6:03:df:ae:76:
58:ea:b0:a6:ff:47:5a:b3:31:00:78:4a:42:35:3d:
e2:d7:98:7b:40:c1:01:13:4b:f3:d7:43:c8:89:1d:
37:73:b7:fe:7b:54:10:4b:9c:b0:72:67:81:3c:70:
9f:14:62:16:88:e1:9a:88:73:e0:8a:c2:2c:5f:e0:
bc:29:39:e5:b3:96:44:fd:68:f5:24:07:30:e0:99:
b2:62:46:83:6a:ca:3a:cf:00:f6:18:31:9a:fe:6c:
a5:30:14:c2:34:1d:53:f3:8a:cb:6b:9b:ce:df:47:
9e:f7:24:4f:f5:a2:a3:c9:e5:ea:8f:9e:a1:4d:45:
55:24:48:98:db:e5:5f:48:ed:3d:02:4a:8c:89:23:
d2:f9:c5:8d:63:09:dd:bf:f8:11:8b:47:8b:9c:78:
63:82:05:a4:23:44:ef:2f:8b:44:cc:10:71:60:d8:
cb:06:88:7b:af:03:9e:77:5f:fc:c5:40:94:56:4b:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:20:BC:3B:30:BA:3C:EE:39:5F:B2:CD:26:C5:95:D2:09:85:F8
X509v3 Authority Key Identifier:
keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d7:99:fa:63:fe:8c:bc:a3:8e:ba:be:91:b8:1c:17:10:44:
a8:85:19:b5:9b:16:42:91:57:bd:e3:1d:7a:ad:62:b1:65:36:
66:be:73:37:c6:4c:fe:cf:87:fa:35:22:65:a0:19:84:f2:12:
19:24:a1:ec:fc:ce:ca:6d:3e:bd:8c:e5:a5:12:b9:88:1f:4f:
69:a2:5a:c8:65:0c:ab:2f:78:fe:17:e6:cc:5e:ad:a5:bd:7c:
30:ee:61:79:49:ae:22:f3:a6:22:59:8e:09:c5:33:cb:a0:4c:
5c:fc:05:73:c3:f3:f3:85:5b:26:56:88:8b:2c:44:77:cf:d3:
6e:82:2d:c3:5d:fc:ee:f8:63:d8:58:33:f0:33:3c:e7:ca:49:
67:ed:e0:41:ec:87:77:33:c4:6a:95:96:6c:76:df:4d:e0:68:
a6:14:66:25:52:c8:d4:6f:24:4b:35:fb:00:92:c7:37:a2:4e:
27:8a:83:e1:d5:d6:5d:02:27:4d:60:86:26:d9:3c:07:05:70:
2e:94:45:6a:d1:f6:e1:0a:74:11:d9:bb:24:a8:37:e0:26:24:
5d:92:38:98:07:39:c0:c8:34:fb:4b:11:64:9a:57:dc:8c:e7:
24:0f:b8:54:bd:fa:81:2c:14:24:ed:bb:54:c0:ca:2c:c3:8d:
7d:7f:54:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:07 2025 by rpki-client