Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
File: pS-PmFnKxH1oVCcjTSYW655TljQ.mft (raw, json)
Hash identifier: iGeeL0B+93ewf96Y/AL7Rydc6d0S6w18Id8zpinn2BQ=
Subject key identifier: 44:BE:00:42:0E:5D:C5:EF:59:2A:ED:C8:DC:AC:79:54:BC:D4:66:72
Authority key identifier: A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
Certificate issuer: /CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Certificate serial: 0ACB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
Manifest number: 0AC5
Signing time: Thu 30 Jan 2025 19:32:23 +0000
Manifest this update: Thu 30 Jan 2025 19:32:23 +0000
Manifest next update: Thu 06 Feb 2025 19:32:23 +0000
Files and hashes: 1: pS-PmFnKxH1oVCcjTSYW655TljQ.crl (hash: /uE6RR6zkoRuutqAF8iz4Fg1+VlMDou3HljWBFE2lJM=)
2: A84F7CEE432711EA87CB0E53C4F9AE02.roa (hash: MpvzI6CZw61K9EHN7FjBJQlJM7cvj1uvm28ieQf0lOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2763 (0xacb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Validity
Not Before: Jan 30 19:32:23 2025 GMT
Not After : Feb 6 19:32:23 2025 GMT
Subject: CN=679bd3c7-bb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:f6:ec:81:83:c2:4c:1a:6b:19:46:a2:90:
98:a4:91:3a:79:42:c4:a8:52:e8:21:15:ed:e7:ac:
33:3d:6f:76:7c:01:9e:94:1d:fc:ba:92:13:ed:51:
81:97:ae:9e:04:e9:55:25:3a:82:9a:4c:2f:ed:22:
cd:d9:d3:08:4e:d8:41:fc:01:39:95:0c:a9:94:d5:
d9:42:34:b4:38:bb:d9:a7:ef:60:a8:b8:3c:9a:06:
11:94:76:01:ff:9c:04:6a:a5:08:71:f4:ff:ea:31:
4e:68:3b:01:fa:0b:41:e7:56:ed:37:f9:b1:e4:2f:
3f:f2:2b:7a:45:e0:bf:d6:c0:be:e1:4e:46:de:9f:
27:67:08:f2:c5:56:3e:1c:a8:1d:f2:77:41:b6:78:
fa:15:2f:3a:80:1e:1b:30:eb:ff:b1:ce:a5:0a:93:
45:bc:23:aa:6b:2f:89:c9:99:e8:ec:18:f2:48:f0:
91:ed:37:05:4e:a1:fd:f1:08:8b:a8:cf:9a:3e:a0:
bc:8b:7a:bf:4e:9d:1a:0d:ea:d5:ca:45:8f:63:de:
65:cd:d9:33:65:ce:16:49:c4:39:1e:73:96:87:ee:
81:b7:33:71:50:95:98:78:0a:e1:19:e6:91:eb:3b:
82:56:ea:01:94:48:06:3a:a7:cf:b5:0e:d6:f6:9f:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BE:00:42:0E:5D:C5:EF:59:2A:ED:C8:DC:AC:79:54:BC:D4:66:72
X509v3 Authority Key Identifier:
keyid:A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:02:13:c6:4a:3e:98:32:1c:57:9e:d8:aa:50:d0:60:9b:08:
89:54:4d:af:75:f2:da:1d:6e:6b:b5:12:36:3e:3c:63:dd:37:
66:11:df:38:07:7d:98:15:4a:c7:cd:43:5c:a9:e3:d5:36:4d:
d4:43:65:fe:4d:06:f7:32:9c:08:84:ae:79:b6:65:96:3a:0d:
3b:0c:be:9e:45:2e:71:01:04:2f:52:c9:ec:d6:ca:8b:00:6d:
12:33:2f:2f:ab:89:8c:22:d4:4a:b9:33:59:c6:0e:b4:80:f9:
7d:63:2e:4d:73:38:5f:e8:35:ec:b3:35:bc:0e:b8:21:93:dc:
aa:67:85:f2:b6:6c:ee:1c:2a:b5:bf:78:98:e8:af:46:d6:e8:
a3:07:69:7c:b4:2e:38:e8:86:34:68:e8:2b:66:61:5a:c8:e7:
6d:c2:9c:ba:fa:eb:6d:ed:9e:92:38:63:50:40:3a:8e:73:b5:
b5:34:9e:9c:99:80:bb:9c:98:cc:36:f9:4e:e4:ef:7a:67:05:
b0:a1:60:16:08:97:ca:d0:a5:a7:ea:bd:3c:5e:37:88:21:d2:
02:4d:e5:e4:04:ca:f2:f0:31:e5:4b:97:a6:e6:b8:43:28:f5:
c4:d1:2d:99:b8:ca:8f:5d:98:ba:f1:86:cf:e3:78:09:f6:6a:
64:be:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:33 2025 by rpki-client