Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
File: PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json)
Hash identifier: e9S48Y/TD9aB+w76ltFVXYBnglGZR6/VjOvrmg7Lspo=
Subject key identifier: 79:B7:2D:42:A4:7D:C6:97:79:E8:05:C4:6B:92:5E:21:3B:74:B3:E5
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Certificate issuer: /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial: 04E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
Manifest number: 04E5
Signing time: Thu 30 Jan 2025 23:45:51 +0000
Manifest this update: Thu 30 Jan 2025 23:45:51 +0000
Manifest next update: Thu 06 Feb 2025 23:45:51 +0000
Files and hashes: 1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: HoosteYBNa5j07K/7m9AdjhMEl/3zih/dH4oZZt2Sas=)
2: 1953EB90FF1B11EBA5CEF970C4F9AE02.roa (hash: LKaE5Y785UxVOloyK6YaYndhpDYFIUGPJ/ZUzeCp7AA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1257 (0x4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Validity
Not Before: Jan 30 23:45:51 2025 GMT
Not After : Feb 6 23:45:51 2025 GMT
Subject: CN=679c0f2f-3463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:3f:91:c0:a0:fd:89:82:6d:95:8f:45:f6:
c3:76:f2:a3:b3:e5:a0:e7:b7:27:b4:3d:53:50:6e:
ff:c9:0f:cd:fd:ee:a4:77:7c:92:cf:33:22:6e:fd:
8d:21:9c:d4:54:fb:43:dd:bc:6d:b5:25:2a:f9:ca:
f4:db:fb:14:87:de:90:15:0c:da:0e:b9:90:b4:7f:
7e:d5:99:1e:8c:a4:52:8c:8a:4f:a4:ca:02:3f:fa:
ee:5d:f1:66:02:14:08:11:23:20:06:37:58:3f:df:
f9:fe:2a:92:e7:e0:c0:fa:cd:41:76:bb:b3:34:58:
d5:4f:ce:f8:3d:0a:dc:f9:c5:e7:d3:3e:83:37:7c:
28:02:65:2b:61:5b:c1:90:b5:40:41:a3:54:8e:3b:
80:c2:a5:6c:f1:f3:b2:de:fa:15:88:e0:6f:75:9b:
4c:7a:25:27:a9:a5:75:9e:b9:e0:0e:93:17:b2:c4:
85:64:d0:e8:0b:fa:cf:5b:a5:3c:96:84:fc:ad:4f:
7a:3d:a8:c6:08:69:4f:c9:f2:59:5f:85:9c:8e:05:
c5:2b:1d:07:34:ff:fb:dc:d9:da:c7:55:8d:a6:93:
cc:a9:69:37:ee:a1:95:6b:89:73:d0:4f:61:fa:c4:
b4:68:e2:fd:50:5f:fb:24:5a:61:94:18:2b:b6:be:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B7:2D:42:A4:7D:C6:97:79:E8:05:C4:6B:92:5E:21:3B:74:B3:E5
X509v3 Authority Key Identifier:
keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:19:c3:0b:a9:e6:69:e9:1f:27:01:ee:da:13:e8:74:c2:0d:
3c:aa:bb:c3:de:a8:8c:33:7c:91:1b:47:54:8a:ba:90:18:b0:
73:48:c8:c1:5f:6e:35:72:b7:60:db:fa:bc:55:c8:99:4a:48:
18:3d:6c:46:bd:04:7f:6e:f0:25:19:b8:c7:ed:ff:6f:28:2f:
13:91:c8:24:a2:ea:a2:92:ed:0e:21:ef:4a:aa:3f:66:c9:71:
0c:f3:cf:5d:1a:85:fe:93:0f:80:eb:e5:e3:db:f5:59:34:09:
9f:cb:86:f5:eb:27:16:e0:22:b1:d8:b8:ca:2c:fb:6e:2c:5e:
03:0f:08:c3:46:d7:03:21:d2:bd:d2:35:9f:77:05:7b:8b:9d:
b7:80:8f:b2:f7:9a:79:49:5c:55:e9:16:9e:7a:a7:8f:80:0e:
7e:d8:53:91:4c:e9:a1:82:65:5f:fe:cf:44:a5:d2:ec:97:50:
b6:09:de:0b:7d:5c:e2:fa:94:a5:74:51:8a:17:73:98:1a:8b:
f0:4a:d9:1a:a3:83:d5:e2:92:a1:15:8a:f7:e0:ad:1b:7a:3b:
9a:20:50:06:7c:32:7f:c3:37:ef:53:bf:72:7a:08:08:c3:2e:
4f:ac:bb:29:8f:e8:8c:1d:c7:7b:0e:bd:ce:02:9a:0d:b2:88:
a3:6a:e8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:45 2025 by rpki-client