Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json)
Hash identifier: +L983UTRnXxNtgQj1fDYteq+fdavmJawN3k3jz04U2Y=
Subject key identifier: 61:9B:13:CA:87:4A:BC:45:1D:F1:4A:D4:31:7A:D1:D4:82:20:AC:5B
Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F
Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
Certificate serial: 0419
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
Manifest number: 0419
Signing time: Fri 31 Jan 2025 00:27:20 +0000
Manifest this update: Fri 31 Jan 2025 00:27:20 +0000
Manifest next update: Fri 07 Feb 2025 00:27:20 +0000
Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: sMTQNCJMZi4JgdErnagHJnMjGHMkcos40Rke2SOkxkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
Validity
Not Before: Jan 31 00:27:20 2025 GMT
Not After : Feb 7 00:27:20 2025 GMT
Subject: CN=679c18e8-0a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:c5:cc:ee:15:76:4d:26:3c:46:2b:ad:1b:
7f:06:d9:56:77:00:5e:f0:1d:81:79:77:9d:5f:26:
5d:a9:ff:4d:c0:20:18:f7:0a:38:cc:6a:3c:d2:22:
e6:a1:dd:84:0e:07:8e:fe:e6:73:36:76:6a:48:84:
e2:0e:9f:27:86:6f:9f:f6:e4:28:09:fd:ba:ff:eb:
8c:0c:6f:c3:f3:92:dd:6a:d4:28:dd:18:09:d7:10:
90:df:b2:04:45:55:5f:9b:2e:7d:a2:8e:33:e0:3d:
d1:da:7c:0b:f0:dc:1c:47:d1:cd:ba:a4:50:aa:e0:
61:0d:65:99:ef:c5:3f:c9:5d:3c:fd:cd:fd:72:4f:
44:71:37:41:3e:5e:05:2b:bf:9e:66:32:bd:5c:5c:
1c:50:44:3e:25:b3:cc:46:37:47:9b:aa:04:d0:16:
83:6c:e3:3b:6e:2f:be:83:fa:8d:43:bb:df:d0:b2:
ae:8c:55:78:7c:83:73:4e:95:e9:c6:ec:89:47:5b:
35:79:ff:1e:09:0b:0c:de:07:44:81:59:eb:95:8f:
ce:40:a7:ac:e0:c8:b6:98:22:31:a8:83:16:f6:c0:
d1:76:9d:11:ad:45:e9:23:a2:89:0c:ed:9a:12:48:
52:81:91:c1:df:58:8a:f5:49:b5:84:b0:cf:64:f4:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9B:13:CA:87:4A:BC:45:1D:F1:4A:D4:31:7A:D1:D4:82:20:AC:5B
X509v3 Authority Key Identifier:
keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:dc:49:a4:21:f9:2e:da:3c:26:1d:ae:72:12:8c:16:12:00:
51:91:89:b2:48:bd:6a:fd:3b:47:e1:9e:0f:76:81:60:7b:26:
ca:4d:5a:7e:dd:2e:69:8e:94:fc:c4:22:9a:fa:2e:3f:9a:73:
ee:1b:e0:c4:eb:4c:33:aa:1d:68:95:99:81:5b:57:86:3a:b1:
a0:27:1c:6f:2b:f7:4a:87:f9:a1:bb:ce:50:0e:80:62:7d:a7:
ce:22:4a:68:cc:b0:8e:80:07:bd:1c:0f:03:c4:70:ab:f8:8e:
51:6c:63:ec:51:c3:a1:86:58:ab:9e:2e:05:6f:2e:74:6f:85:
bf:de:a2:a0:e4:f2:c3:63:03:62:56:97:c0:d1:84:fb:f1:23:
ed:6d:c9:2d:56:fe:05:12:1a:a9:22:3c:1c:d4:cd:ca:34:55:
0a:eb:cb:61:82:03:93:cf:5b:bc:d0:9f:a3:c4:b2:3b:d8:fd:
cb:79:05:a9:71:d4:ca:f6:0d:b8:60:ea:df:e2:5b:0c:e1:fd:
2d:3d:1c:49:21:25:5a:3a:b0:32:ee:a9:45:99:f1:dd:75:84:
ee:de:05:7c:a6:0c:32:2a:2b:9f:a0:66:74:92:ce:0b:24:cc:
75:d6:9c:39:92:e9:d8:2a:5a:8b:50:4e:4f:d1:84:cb:11:e4:
8c:5e:5c:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB
NzNDMjFGNEYwHhcNMjUwMTMxMDAyNzIwWhcNMjUwMjA3MDAyNzIwWjAYMRYwFAYD
VQQDEw02NzljMThlOC0wYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuVfFzO4Vdk0mPEYrrRt/BtlWdwBe8B2BeXedXyZdqf9NwCAY9wo4zGo80iLm
od2EDgeO/uZzNnZqSITiDp8nhm+f9uQoCf26/+uMDG/D85LdatQo3RgJ1xCQ37IE
RVVfmy59oo4z4D3R2nwL8NwcR9HNuqRQquBhDWWZ78U/yV08/c39ck9EcTdBPl4F
K7+eZjK9XFwcUEQ+JbPMRjdHm6oE0BaDbOM7bi++g/qNQ7vf0LKujFV4fINzTpXp
xuyJR1s1ef8eCQsM3gdEgVnrlY/OQKes4Mi2mCIxqIMW9sDRdp0RrUXpI6KJDO2a
EkhSgZHB31iK9Um1hLDPZPSrXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGbE8qH
SrxFHfFK1DF60dSCIKxbMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz
MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS
YmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA73EmkIfku2jwmHa5yEowWEgBRkYmySL1q/TtH4Z4PdoFgeybKTVp+
3S5pjpT8xCKa+i4/mnPuG+DE60wzqh1olZmBW1eGOrGgJxxvK/dKh/mhu85QDoBi
fafOIkpozLCOgAe9HA8DxHCr+I5RbGPsUcOhhlirni4Fby50b4W/3qKg5PLDYwNi
VpfA0YT78SPtbcktVv4FEhqpIjwc1M3KNFUK68thggOTz1u80J+jxLI72P3LeQWp
cdTK9g24YOrf4lsM4f0tPRxJISVaOrAy7qlFmfHddYTu3gV8pgwyKiufoGZ0ks4L
JMx11pw5kunYKlqLUE5P0YTLEeSMXlwS
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:46 2025 by rpki-client