Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
File: PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json)
Hash identifier: VviakW7grMPnn7wqdRQgKVOhWvvN1/yuzBgyUQr/1cI=
Subject key identifier: C0:C1:9E:2F:59:AC:81:31:F3:BA:EB:D1:B4:1D:DC:1F:BA:F3:EE:D8
Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Certificate serial: 0731
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
Manifest number: 072A
Signing time: Thu 30 Jan 2025 21:41:47 +0000
Manifest this update: Thu 30 Jan 2025 21:41:46 +0000
Manifest next update: Thu 06 Feb 2025 21:41:46 +0000
Files and hashes: 1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: nmmbHWQbqP9pYNNCiwVq3Loia4WweUMnvNTDr1o2/eU=)
2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: yZHf3tOWc+sxyzq57J+zRtrh1h68qCw13SKQG5RmD88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1841 (0x731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Validity
Not Before: Jan 30 21:41:46 2025 GMT
Not After : Feb 6 21:41:46 2025 GMT
Subject: CN=679bf21a-e0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:60:42:e0:c0:0d:35:78:d6:d0:6f:a5:a6:
02:34:3b:3e:d7:e7:1c:12:dd:5c:ed:13:27:10:3f:
c4:42:5e:58:51:99:e0:2f:5f:ec:84:cb:d2:01:5f:
2f:9c:da:a3:5e:96:06:ad:a1:a5:20:e6:f4:7e:27:
a4:84:43:e9:4c:db:49:d3:76:d6:24:3b:7e:73:a3:
b3:f1:36:29:7e:f4:4d:b5:7a:bf:6f:a5:66:00:3f:
25:76:92:30:6b:9e:e5:28:6c:cd:a7:68:1b:8c:ee:
3c:56:4d:5f:f8:93:55:aa:41:4c:fb:76:6f:14:04:
f9:05:d7:d6:a7:3c:39:e5:32:9a:ac:ce:4b:15:1e:
32:8e:ea:15:a1:92:fe:e1:d8:48:5a:a4:e4:a5:33:
0e:bb:ae:90:9a:be:71:3f:32:6f:30:21:94:ec:cc:
66:44:06:64:f3:3b:04:ff:cb:87:7d:6d:58:2c:3e:
e7:58:5f:e8:e2:d6:de:c2:ad:b3:6a:54:4c:f9:7d:
58:75:7a:8b:fe:5b:a3:80:5d:58:58:5d:cb:6e:60:
f7:00:58:85:74:25:45:29:4b:38:14:9a:47:72:01:
17:53:89:16:fc:67:8e:ec:c9:e6:2f:79:ce:c7:2b:
cb:bf:49:8a:e6:02:fd:21:88:a8:9a:9d:6c:d6:90:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:9E:2F:59:AC:81:31:F3:BA:EB:D1:B4:1D:DC:1F:BA:F3:EE:D8
X509v3 Authority Key Identifier:
keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5c:04:77:4c:4e:39:02:a0:7c:ec:42:27:e6:a2:5d:d8:52:
86:42:7f:10:95:7b:6d:5f:01:dc:c8:8e:61:e7:db:a1:38:36:
40:4e:21:2c:1a:75:bf:0d:30:7b:a9:36:d4:15:8d:ab:49:6f:
5a:bf:94:2c:3d:5b:14:8c:d4:58:a5:a9:36:c7:df:4d:00:90:
f5:37:3b:57:f5:5c:99:c1:03:fd:76:a9:55:1e:46:c8:88:9d:
cd:f1:69:67:3e:25:5d:5f:6a:2f:cc:82:b8:8f:89:2c:e3:d9:
48:f6:c1:dc:b5:c8:d9:d1:ee:80:2f:9c:e0:f2:d4:e9:ef:9a:
22:2a:62:9e:ee:66:17:83:d0:bc:61:69:15:52:6c:dd:74:31:
e5:16:c4:9a:cb:96:fb:88:dc:e1:52:31:ff:09:8c:e6:c5:61:
85:53:3b:ff:7d:1e:1b:a3:0f:03:1c:d0:83:fe:34:61:26:92:
06:71:81:52:7f:b8:17:2d:3d:0b:fb:ce:53:8d:c8:fe:d1:62:
e0:90:21:68:23:9d:64:a5:6a:94:33:08:f4:00:da:99:54:16:
98:80:31:4b:dc:83:1e:5c:aa:3d:d6:02:7e:5d:f2:39:ea:77:
a1:6d:f0:aa:23:ef:2c:14:35:33:91:f9:f3:28:78:c0:5f:50:
2f:77:3d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:11:01 2025 by rpki-client