Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
File: PgyjPXanW6ZPDdawakQr5pWGRBo.mft (raw, json)
Hash identifier: /kFlU8W9Tdq9t+TMamOUtbmu1LD3DbZp2XkVrJ4ufis=
Subject key identifier: CA:71:BC:0F:B1:2B:FC:00:16:5F:17:53:E7:5C:90:56:67:A7:69:5A
Authority key identifier: 3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
Certificate issuer: /CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Certificate serial: 3462
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
Manifest number: 3453
Signing time: Fri 31 Jan 2025 14:26:31 +0000
Manifest this update: Fri 31 Jan 2025 14:26:30 +0000
Manifest next update: Fri 07 Feb 2025 14:26:30 +0000
Files and hashes: 1: PgyjPXanW6ZPDdawakQr5pWGRBo.crl (hash: RrfT4ro5zhZ5vBoK4HVBDNPFyUT5rxIEV4f+R6ah5U0=)
2: D69F6688CD8511EBB5252063C4F9AE02.roa (hash: 1ODdrQTl4q6/w7rtOls+USY+PM8yOp3Wfi9ftx6zA0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13410 (0x3462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Validity
Not Before: Jan 31 14:26:30 2025 GMT
Not After : Feb 7 14:26:30 2025 GMT
Subject: CN=679cdd97-4663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:a5:8a:30:e8:33:ae:3b:fa:8f:9f:e0:bc:
fa:61:14:34:29:29:0d:8b:43:e1:12:3c:da:98:6f:
0a:2a:e2:a2:19:5e:eb:7e:66:4b:b1:e6:3b:f0:0a:
2a:2d:6a:4e:b3:0d:93:e8:28:8e:02:47:80:6c:c0:
2f:48:6a:c8:ab:51:b6:6f:06:e7:95:c0:3e:c9:ae:
38:17:04:ce:e2:a4:c0:2b:50:44:3c:57:2f:ae:e0:
75:02:d9:08:f7:93:6d:31:4c:26:54:60:0c:63:60:
0c:68:a0:9e:f7:42:10:9a:b0:79:41:38:4f:ac:43:
d8:a2:77:90:62:6a:41:c0:7b:b4:0f:30:aa:20:0f:
67:5b:a2:4a:90:b0:ca:62:46:3d:8f:a1:79:a0:54:
cc:2a:53:e9:aa:2e:db:6b:1c:72:48:25:bf:1f:78:
e8:39:71:97:aa:1f:09:8a:f8:ad:3e:6c:c2:28:b2:
2b:c7:68:2f:97:14:49:68:be:11:65:ff:33:80:82:
10:b6:c1:58:2f:c4:bc:85:ee:7f:dd:cc:04:b7:f4:
6c:d7:d6:a6:91:6c:66:c1:58:7b:68:c2:2c:9b:e7:
49:c5:d5:43:11:90:a5:d1:96:1c:63:af:dc:a1:c9:
ad:be:bb:75:88:37:93:4d:63:dc:f8:5f:5a:bb:e9:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:71:BC:0F:B1:2B:FC:00:16:5F:17:53:E7:5C:90:56:67:A7:69:5A
X509v3 Authority Key Identifier:
keyid:3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:19:2a:90:5f:98:80:2f:06:1e:c3:85:4d:c3:31:de:f0:82:
f7:95:a1:1b:69:b0:60:1f:6a:42:ea:c5:08:25:ed:fa:5b:da:
01:0b:bd:ca:db:51:83:4f:74:18:a3:a6:ce:4e:26:44:07:f1:
0e:9b:94:b2:40:d5:a5:39:85:09:04:e1:f6:17:dc:eb:d6:64:
71:91:b8:c0:c0:a7:23:41:7d:dc:eb:49:06:59:62:59:5a:60:
ae:93:b9:11:cf:ac:e3:c9:2a:72:5c:30:96:d0:54:47:c3:30:
d0:3e:3e:b1:c2:32:cc:60:1c:a8:c8:0b:c4:ed:b2:36:98:d4:
f7:75:4f:26:d8:ab:9c:9d:89:43:cb:e2:3f:91:f9:69:dc:b0:
02:71:59:3f:d5:ea:9c:2e:41:9c:5f:3e:58:e2:be:11:87:47:
1e:0d:a6:5c:fa:1b:97:6c:eb:07:b8:0b:15:6e:03:57:ab:41:
b7:99:33:ce:46:d1:bc:36:bf:66:ab:a9:03:20:6a:7d:e6:73:
8f:df:68:6e:f3:b8:43:98:6c:7a:df:e1:05:64:bf:64:b6:4b:
01:ea:55:63:db:e2:45:a2:74:d9:cd:18:84:b1:32:55:7d:cc:
20:4a:1c:0a:81:d9:e1:47:74:56:ef:dd:62:00:50:c8:cf:fe:
a0:b4:0a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:47 2025 by rpki-client