Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft
File: pjicd02tZdiN8ubU9D3ioLVy7no.mft (raw, json)
Hash identifier: aqERFq5Rb2tAO+HFGWj224vI1mq+1U0HfT04geVBddw=
Subject key identifier: A8:EE:33:7E:1E:E3:99:47:9D:5F:88:0F:2D:DF:76:60:FB:01:E1:02
Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
Certificate issuer: /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft
Manifest number: 0207
Signing time: Fri 31 Jan 2025 02:12:06 +0000
Manifest this update: Fri 31 Jan 2025 02:12:06 +0000
Manifest next update: Fri 07 Feb 2025 02:12:06 +0000
Files and hashes: 1: pjicd02tZdiN8ubU9D3ioLVy7no.crl (hash: AYn2AsPnMr6UzNZpcH3ao+L8+Qu0PKV6KfbiRHG5Ydw=)
2: 9995D8D6276011EDAF21D06DC4F9AE02.roa (hash: De/y5SymwOEb9D5+rzbdyyNd+/EfQtgf39FuJEq4RYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Validity
Not Before: Jan 31 02:12:06 2025 GMT
Not After : Feb 7 02:12:06 2025 GMT
Subject: CN=679c3176-6632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e5:87:1b:ef:3a:8d:a0:c2:9c:20:7e:3e:bf:
5d:e6:82:31:e8:8b:17:1c:cc:36:d1:fa:5f:33:ee:
e4:a7:23:1d:2d:9d:df:b1:93:d7:0d:79:7e:81:59:
58:d2:a1:b4:60:98:0a:cc:55:13:ee:d6:5b:ca:b5:
84:3b:bc:d6:3d:a7:4b:fc:ce:72:5e:07:f8:dc:45:
1f:27:3b:cc:ae:cf:e5:44:dd:22:d8:1d:17:11:3a:
07:e1:14:ae:2f:f0:3e:c6:3e:7a:58:84:2d:66:9c:
97:b8:08:9f:54:3b:f5:6a:bd:b9:37:2d:3f:1b:f5:
f1:cb:7e:c2:6c:9a:b1:7b:4f:ff:32:8a:ca:45:92:
4a:1f:8b:5a:65:04:92:77:e5:b5:a2:fa:6a:77:88:
3e:ef:39:73:c0:bc:ed:e4:cb:5e:0f:80:55:42:cb:
a1:e5:d8:79:24:17:4f:8f:48:5c:4c:66:67:ed:35:
ae:b9:24:f8:e3:94:da:fc:9e:f4:cf:e3:f3:ca:0c:
e9:06:b8:bf:1f:58:6a:fb:58:bd:74:21:de:48:36:
53:ca:69:e1:12:37:d8:58:b6:39:e0:eb:0e:85:3b:
00:87:64:68:98:41:fa:72:d9:df:93:6d:66:4a:27:
44:bb:6e:f2:f1:1a:20:4d:94:a9:d3:30:a1:10:d0:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EE:33:7E:1E:E3:99:47:9D:5F:88:0F:2D:DF:76:60:FB:01:E1:02
X509v3 Authority Key Identifier:
keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:53:3a:17:f0:31:4e:d1:26:68:cc:cb:d0:6c:2b:ae:a8:12:
bf:07:54:eb:12:d9:11:3d:16:d1:36:f2:02:0d:5b:dd:df:bd:
f9:a4:ba:4c:4c:d9:3c:29:0b:dc:06:d2:1f:8f:a9:d1:95:fa:
dd:73:16:fd:f8:cc:cf:2a:da:6d:dc:5c:61:fd:aa:ce:57:30:
7e:f9:60:a2:30:9e:3f:1d:89:44:7e:44:d1:52:82:59:c0:fc:
de:04:a9:4e:59:1b:cb:89:ca:21:85:84:cf:06:b3:db:75:d1:
05:72:c4:b9:07:30:8c:6b:c1:ca:62:3f:42:90:fe:98:7f:10:
d6:72:7a:34:72:8f:a0:68:b5:21:3c:3a:a0:f9:c4:fb:e7:ab:
62:9e:51:13:b8:00:25:65:5c:39:ed:5c:c0:93:0c:30:f8:96:
63:81:e9:c8:4e:8a:97:75:00:ad:b8:da:49:89:0f:8b:cf:32:
02:87:52:ae:91:31:75:4d:bb:08:58:6c:32:72:ff:f7:3c:4b:
d7:29:54:4d:81:bd:68:ba:21:fd:8a:41:87:44:4e:69:8d:04:
cf:55:62:2a:e8:7d:cd:09:5f:2d:88:fb:a7:22:f9:f3:1e:20:
a6:96:88:85:78:51:f6:5e:8d:f2:2d:88:a7:b6:be:ae:ad:c1:
71:3c:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:31:40 2025 by rpki-client