Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
File: xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json)
Hash identifier: Hw2gXnAlmPB1AaIIBpBDQPr6rSzaCmOtRLeUo2ySAT0=
Subject key identifier: EB:09:29:8A:88:51:30:9A:B3:21:B0:F5:62:FF:B6:EA:DC:45:CD:A3
Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
Certificate issuer: /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
Manifest number: 0141
Signing time: Fri 31 Jan 2025 03:33:38 +0000
Manifest this update: Fri 31 Jan 2025 03:33:37 +0000
Manifest next update: Fri 07 Feb 2025 03:33:37 +0000
Files and hashes: 1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: no2/7HHbzE//8pq25LsC5UHbneieTbSKReklfavyVPw=)
2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: 6AwMX4x/IYWolneJozQYQ/y6c1KiBasFJP05rV+jXS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Validity
Not Before: Jan 31 03:33:37 2025 GMT
Not After : Feb 7 03:33:37 2025 GMT
Subject: CN=679c4492-a8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:88:13:94:b0:d1:78:fd:79:38:67:30:9e:
e4:d8:d6:46:3f:46:31:84:e4:33:3e:39:3e:1f:57:
39:2b:0b:43:35:53:c8:02:ac:9e:1c:bd:2e:41:cc:
8c:2f:6f:91:51:83:53:c3:ef:75:97:c0:08:87:8e:
11:1f:d1:9d:84:ae:43:5a:ae:86:be:bc:36:21:8f:
6e:72:e7:6c:01:5a:ba:c4:f1:99:06:9a:20:ec:43:
7a:0e:bc:19:a5:29:0e:17:06:35:c0:bd:6a:36:e0:
3b:9f:74:74:59:2b:f7:0d:49:59:8a:6e:25:85:1d:
c1:04:95:3a:8a:9b:f0:c7:e5:0e:0e:33:9e:46:d1:
4a:22:4b:24:55:3d:52:f1:6e:f6:63:a4:59:69:00:
99:17:00:98:d9:09:7f:9c:a5:9d:17:34:1f:e8:60:
dc:e6:f9:b7:d8:88:13:20:8c:d7:ff:9a:17:c9:1f:
0b:0e:a7:0d:41:c5:8c:fd:34:a2:04:17:c1:16:d4:
76:32:3a:de:18:77:4d:ad:f0:c2:80:15:b6:f5:2a:
c6:32:87:9a:27:af:ee:25:5a:f2:50:a6:8f:e7:e1:
89:97:c0:fb:6c:c1:19:62:d2:8a:b3:0c:47:60:8c:
29:eb:cf:61:cc:75:4c:0e:8e:18:80:f7:10:e0:42:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:09:29:8A:88:51:30:9A:B3:21:B0:F5:62:FF:B6:EA:DC:45:CD:A3
X509v3 Authority Key Identifier:
keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9d:c6:44:bb:e8:2c:63:3c:ec:c0:37:21:34:f4:3f:f5:1c:
b7:3d:a0:6b:b6:e0:f1:16:2a:27:12:ce:48:60:ed:28:39:53:
e4:be:48:fb:24:d9:d9:08:64:2e:8c:9c:05:cb:d4:15:d8:fd:
a2:21:18:af:02:49:6c:8a:ee:7f:61:1f:fa:5f:08:b3:6d:e5:
d1:8f:e7:5d:0a:77:8a:e2:67:a6:ba:fc:24:64:fe:e1:e2:a5:
26:3c:90:99:bb:f1:c9:9b:ce:c7:e3:e4:e9:3a:bb:b4:dd:fd:
dc:1e:f4:a5:47:bd:aa:d9:31:09:61:51:2f:ad:1b:eb:49:21:
77:58:7d:20:66:21:2f:08:e7:ed:d8:b2:d2:cb:98:a9:59:77:
f7:a7:a8:94:2b:ed:0b:0f:bf:1a:fc:e5:ef:64:36:2e:a1:be:
c0:e5:3f:02:89:24:6c:d2:1a:53:94:ab:2f:53:52:80:e7:24:
0d:73:93:85:7f:14:d6:35:71:6d:0f:5f:bf:99:d9:66:10:7a:
da:73:13:15:28:5e:56:85:3f:13:96:23:76:8a:21:eb:47:17:
71:30:49:f6:e8:95:2e:24:be:80:2d:be:39:e3:9d:6b:58:5c:
2c:85:f4:6b:fd:68:47:d9:7e:6c:a7:59:93:a1:f9:53:14:1d:
cf:76:c7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:31 2025 by rpki-client