Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier: zWLSwJyxVmr3ONb8B+Net4Go5LuouKg4N69X384BJAk=
Subject key identifier: 1F:BC:31:D7:61:53:A7:21:7D:29:77:54:03:97:27:AF:A7:BF:E0:77
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial: 02BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number: 02B9
Signing time: Fri 31 Jan 2025 01:33:19 +0000
Manifest this update: Fri 31 Jan 2025 01:33:19 +0000
Manifest next update: Fri 07 Feb 2025 01:33:19 +0000
Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: XlRIUYcuqdZt6ZWJAjYtpVWAVb+xWrgBQKdyMtzJTsw=)
2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: pktrHR+QS/er0s+loh1K6z6/oPCthVtEcSW6fBSWLVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Validity
Not Before: Jan 31 01:33:19 2025 GMT
Not After : Feb 7 01:33:19 2025 GMT
Subject: CN=679c285f-f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:2b:d7:b6:c7:98:ae:fa:28:c6:dd:47:32:
e0:a8:d9:fb:f0:b6:9a:65:cc:12:13:49:6e:97:ca:
c6:f3:77:15:c4:61:f8:b1:d9:c8:19:4b:c8:44:66:
ae:03:c1:d0:22:a9:2d:a3:01:dc:5d:2b:ce:9f:e4:
12:50:37:e2:28:f4:dc:a5:f2:61:ba:aa:33:ee:b2:
23:5b:62:15:6c:82:56:f1:0a:f5:45:9e:28:be:3b:
d8:b3:9a:e1:bc:22:17:5f:31:22:76:21:31:f7:30:
49:5e:29:75:db:36:5f:6c:0c:e2:56:b6:7f:ab:11:
ae:c3:4f:fa:1e:0b:80:ba:05:5f:ba:3f:00:ce:6b:
15:8e:06:9a:a2:47:25:9d:0b:fe:f7:ac:4b:e5:69:
2e:cb:a0:0e:1a:92:59:fd:ce:01:ec:b0:af:93:2c:
6e:0f:3d:c8:51:5e:f8:a2:c3:56:6a:f8:17:5d:bd:
e2:cf:91:a0:8c:59:94:ef:5d:3f:19:4e:26:d5:3c:
6b:16:d4:00:a1:58:d6:57:99:d1:f8:ac:c1:d8:39:
f1:a4:3a:c7:15:c3:a4:13:bd:e5:22:7b:d9:1a:06:
1d:78:41:38:3b:4c:91:7f:15:04:65:70:59:52:7d:
e7:d2:0c:fc:3d:ca:d4:ee:e9:d0:3f:f4:cc:76:25:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BC:31:D7:61:53:A7:21:7D:29:77:54:03:97:27:AF:A7:BF:E0:77
X509v3 Authority Key Identifier:
keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:6d:57:2e:63:cf:cf:3a:a6:6a:9b:d0:d6:30:a6:f8:95:cc:
c9:30:bd:82:3b:e0:27:f1:a9:bf:18:39:31:bb:71:35:ee:31:
43:48:9b:cd:a8:ed:bc:1e:5e:74:80:fb:ab:50:2e:12:a5:22:
0e:c4:60:ef:e1:28:45:0f:b4:8a:9f:0a:26:ef:56:38:a8:bd:
93:b4:1e:81:5c:6c:15:a4:14:14:30:5b:b9:a5:3c:ba:60:55:
ce:9a:8e:db:13:77:29:c9:6f:54:ea:64:15:6a:e2:f5:a6:f4:
b2:8a:2d:1e:15:97:51:10:9f:c2:f8:c2:48:5f:e2:21:17:0d:
24:69:60:1c:a8:e5:be:42:60:4e:59:22:7d:9e:6d:8b:71:c2:
b6:d6:f4:4c:49:00:19:d1:97:13:2e:c4:dd:26:ec:d6:7f:b6:
6b:95:a2:fc:9d:84:6d:11:d0:3d:46:07:a5:29:b2:87:8e:14:
1f:9d:4d:86:32:37:ee:9e:e1:e5:53:a8:3d:2d:03:e6:07:46:
f2:54:43:c9:1d:26:de:f8:cf:05:07:25:d6:24:43:97:fa:49:
77:5b:4a:4f:0a:4b:6b:e8:e2:d0:31:e7:51:a4:9d:92:2d:ce:
12:9e:8d:d5:9e:cf:aa:b1:0b:82:03:b7:89:19:bf:ee:1d:ee:
69:f0:92:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw
MDE4RkRGMDYwHhcNMjUwMTMxMDEzMzE5WhcNMjUwMjA3MDEzMzE5WjAYMRYwFAYD
VQQDEw02NzljMjg1Zi1mN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BUr17bHmK76KMbdRzLgqNn78LaaZcwSE0lul8rG83cVxGH4sdnIGUvIRGau
A8HQIqktowHcXSvOn+QSUDfiKPTcpfJhuqoz7rIjW2IVbIJW8Qr1RZ4ovjvYs5rh
vCIXXzEidiEx9zBJXil12zZfbAziVrZ/qxGuw0/6HguAugVfuj8AzmsVjgaaokcl
nQv+96xL5Wkuy6AOGpJZ/c4B7LCvkyxuDz3IUV74osNWavgXXb3iz5GgjFmU710/
GU4m1TxrFtQAoVjWV5nR+KzB2DnxpDrHFcOkE73lInvZGgYdeEE4O0yRfxUEZXBZ
Un3n0gz8PcrU7unQP/TMdiWguQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+8Mddh
U6chfSl3VAOXJ6+nv+B3MB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD
MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUE1NC9EODhDRDlENkRDMzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tK
UHgtMXIzMXZ3SjBBR1Azd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABbVcuY8/POqZqm9DWMKb4lczJML2CO+An8am/GDkxu3E17jFDSJvN
qO28Hl50gPurUC4SpSIOxGDv4ShFD7SKnwom71Y4qL2TtB6BXGwVpBQUMFu5pTy6
YFXOmo7bE3cpyW9U6mQVauL1pvSyii0eFZdREJ/C+MJIX+IhFw0kaWAcqOW+QmBO
WSJ9nm2LccK21vRMSQAZ0ZcTLsTdJuzWf7ZrlaL8nYRtEdA9RgelKbKHjhQfnU2G
MjfunuHlU6g9LQPmB0byVEPJHSbe+M8FByXWJEOX+kl3W0pPCktr6OLQMedRpJ2S
Lc4Sno3Vns+qsQuCA7eJGb/uHe5p8JJI
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:53 2025 by rpki-client