Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json)
Hash identifier: 5rDqpnz4I1AqZxI/rXFx6OhwgjIcVe1uYsvL/blVm54=
Subject key identifier: 72:9C:5E:A5:4D:63:F3:7D:43:F3:B6:70:6D:C0:08:99:97:F3:5F:0D
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 029C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
Manifest number: 0295
Signing time: Fri 31 Jan 2025 01:37:53 +0000
Manifest this update: Fri 31 Jan 2025 01:37:52 +0000
Manifest next update: Fri 07 Feb 2025 01:37:52 +0000
Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: 15II/wpmDpI1M2SskfoLoF+656WM+sNDSLbHrgEdo8U=)
2: E6054D96F3CB11ECA86DCE60C4F9AE02.roa (hash: g4gsuu+wZs7S9/X3SadaC88LlRSG0KHzSqpbvhD9A5A=)
3: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: 0PjSJMEjjUBynjSrV1gYRqTLJWFj1mrBBNB4BigTDbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Validity
Not Before: Jan 31 01:37:52 2025 GMT
Not After : Feb 7 01:37:52 2025 GMT
Subject: CN=679c2970-b256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:62:45:03:9c:e2:86:6a:83:7b:20:a3:73:
08:43:20:2a:51:eb:0c:92:93:9e:f9:32:ac:37:12:
42:af:b2:82:e0:98:67:ba:9a:52:38:2c:b9:92:ca:
85:2f:73:a7:b2:ed:65:14:47:25:33:53:df:de:46:
5f:34:64:0b:35:d8:44:19:9f:7e:8b:12:0d:13:d2:
b4:ad:a3:74:08:8a:33:d8:67:6b:ab:5f:ec:8c:13:
de:e3:f1:bb:f6:8b:5b:74:80:f5:27:20:41:0c:20:
e9:81:e2:06:ff:f7:67:36:f7:d1:6e:d7:4d:6c:c9:
4b:2b:00:e3:c6:ad:d2:33:3f:bd:ac:95:d8:10:1a:
e0:6c:e9:1f:4e:b0:a6:01:4a:34:13:67:7b:11:e8:
ec:60:5e:0b:9d:84:b4:e5:df:e9:0c:3b:e1:6c:18:
be:fb:03:ef:26:2f:44:df:38:c1:1d:a6:a9:e1:88:
e0:b8:96:ab:78:00:92:95:df:95:0c:cf:6a:75:f7:
0c:ed:ab:1d:9a:a0:fd:0d:62:9b:9c:30:46:4f:4c:
d8:71:e5:93:03:8f:fd:12:24:34:7d:c7:67:b0:48:
4b:ea:72:26:83:94:8e:c0:06:ea:74:03:14:4a:83:
d3:21:3a:e6:34:cc:75:68:69:35:1a:a6:2a:21:65:
24:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9C:5E:A5:4D:63:F3:7D:43:F3:B6:70:6D:C0:08:99:97:F3:5F:0D
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6d:97:a5:f7:81:c9:8f:b9:25:ec:e3:12:c1:b5:6c:a7:fc:
b5:79:2b:01:48:af:c6:bb:50:3a:93:26:00:be:a3:e2:8f:51:
e1:1c:b2:60:16:82:21:30:18:da:32:17:ce:3b:dc:c8:f1:92:
20:4c:28:8d:bf:e2:0b:45:67:e7:af:2f:c6:28:24:f4:c7:0e:
46:39:9b:27:0c:5b:0d:96:9c:45:ee:b0:28:07:78:0c:c9:83:
94:1b:8a:69:7c:22:cd:19:e3:dc:6d:56:08:9f:2f:eb:b9:8b:
ce:8f:99:30:ed:8a:bc:9d:e1:19:29:45:c2:e8:92:0a:8a:a5:
b5:51:a5:92:8c:85:70:de:ed:2c:78:d7:09:70:dc:a5:ce:a0:
0d:70:e1:95:7c:df:19:7f:51:a4:1e:08:aa:71:1b:5e:9f:64:
c0:4d:62:ba:06:c7:b5:77:16:5b:2a:a0:15:eb:eb:eb:ae:f8:
ef:27:ed:86:05:0e:7b:ad:8f:ae:55:6e:c8:75:71:7c:c8:a9:
98:b0:34:3a:de:1a:50:a8:44:cf:05:83:b2:11:88:16:2f:a2:
99:49:cf:d2:78:57:96:0e:db:b4:ad:f7:ab:85:fd:84:84:01:
98:e8:5c:dd:58:54:75:44:6f:65:76:33:d0:66:94:86:09:fc:
3e:4f:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:43 2025 by rpki-client