Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
File: PtgP6zsCGgUkGr5w0aUQqGetcf0.mft (raw, json)
Hash identifier: 1zP7Y8sT7agyauD/36cvBq8StFlzBYO8XnSlfgO5DqE=
Subject key identifier: 48:4B:8E:7D:DC:A1:F9:28:7F:7D:D9:C2:83:55:8F:62:1D:25:AF:C2
Authority key identifier: 3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD
Certificate issuer: /CN=A916A6BA/serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
Manifest number: 017E
Signing time: Fri 31 Jan 2025 03:00:33 +0000
Manifest this update: Fri 31 Jan 2025 03:00:32 +0000
Manifest next update: Fri 07 Feb 2025 03:00:32 +0000
Files and hashes: 1: PtgP6zsCGgUkGr5w0aUQqGetcf0.crl (hash: 4j6ypVxyWVpiTM4YCXmdsCcyK1VcH1rRZOvZZ0LlaZ4=)
2: E8C858F29CA911EDAA491C41C4F9AE02.roa (hash: QHwYnCyYfvJatT715L+F2i/uGN2F0rnr5Y6JgS/3oH0=)
3: A0ED0DDA9BC711EDB1BAE42AC4F9AE02.roa (hash: Az0jUnUm8VmZoeCVcqYkX7+Qy5F3ImNwyCThQYBVCrI=)
4: A2326CD09BC711EDB1BAE42AC4F9AE02.roa (hash: f0OThesUGfvttTcDodxsID0jyEWcTJ7RmlTU9M1bL0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A6BA/serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
Validity
Not Before: Jan 31 03:00:32 2025 GMT
Not After : Feb 7 03:00:32 2025 GMT
Subject: CN=679c3cd1-75fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:60:d5:4a:8b:cf:1e:7c:14:e2:96:79:a5:
6d:22:2a:4b:65:13:f7:63:e0:e4:c9:e7:dd:d9:88:
25:d2:3d:74:09:0c:a8:42:56:34:57:16:5f:cb:28:
79:eb:dc:e9:6e:01:29:fb:47:7f:05:8a:3d:8b:74:
a2:3e:2c:ba:c8:a4:a4:97:f4:bb:cb:96:31:b1:ab:
d8:87:73:2a:f4:9c:81:48:57:b4:04:fd:58:5d:02:
20:4c:79:0f:f4:0a:47:e8:a7:36:c9:90:e4:d3:5a:
ff:2a:20:dd:fe:ef:21:a8:90:8e:78:c9:3c:bf:b2:
92:11:72:cd:55:c6:6e:8b:12:84:b2:c4:ac:01:fb:
78:58:e0:b5:bb:e1:a2:27:3f:bc:66:52:71:6c:5f:
ce:d7:2d:47:b8:f0:26:0e:d6:dd:d8:3f:52:f6:89:
c4:be:f8:70:40:e1:14:52:f1:b4:3c:14:ed:a7:31:
5c:6d:5c:a7:73:32:d9:75:24:ee:7f:eb:c2:4c:3e:
16:d3:c0:d7:a9:81:47:37:09:3c:27:12:94:c1:17:
79:2d:6d:14:d1:4f:9f:aa:d2:29:77:00:0a:ae:c4:
e4:25:3d:2b:35:08:cf:b1:52:94:48:d0:d3:10:04:
2c:7e:75:ba:d6:d4:7f:6b:21:ac:e3:6a:e4:31:2c:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4B:8E:7D:DC:A1:F9:28:7F:7D:D9:C2:83:55:8F:62:1D:25:AF:C2
X509v3 Authority Key Identifier:
keyid:3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c5:26:cb:73:40:c3:71:35:34:52:08:e0:78:ea:d5:84:06:
d0:fd:b8:33:15:d6:cb:f3:6e:35:c5:f1:c2:d6:5b:68:7b:b5:
75:9a:c9:db:11:0c:9c:ce:98:b2:4b:e7:b0:37:3c:50:39:9f:
4c:27:71:60:e3:44:13:34:90:11:36:62:62:19:cd:0b:4e:73:
a7:92:74:d0:58:77:e3:9b:97:c1:9b:f4:ec:c5:75:bf:2e:cf:
d0:52:ba:18:be:ee:78:c6:3a:47:be:87:e3:88:5b:b2:6d:ff:
9b:6b:e6:5d:3d:5a:be:31:53:9e:e2:ac:1f:a7:64:46:3d:a6:
2f:17:51:77:09:b9:6d:e5:fd:c7:ea:3c:ff:f7:ba:dc:9a:89:
b9:05:f0:6a:7d:5b:44:bc:12:80:6c:29:84:0e:51:d7:2e:03:
7e:96:8f:7a:26:c3:d3:f7:77:85:78:bb:08:8f:01:ad:87:3a:
e6:42:55:11:7e:65:64:de:0c:6e:65:55:69:1e:e8:4a:ff:d6:
b4:2c:ed:d5:27:8b:bd:43:54:f9:8f:e7:59:84:40:06:19:c9:
34:30:9b:f5:44:03:89:30:59:84:51:62:2a:fa:8a:12:83:66:
93:42:58:99:6a:23:36:92:41:5a:44:ba:c1:dd:ec:87:54:63:
90:a8:ea:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:25 2025 by rpki-client