Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier: ZjTWg4kI9ZihB4RsaSF972gmLwrkSpDaDwKop+wgO8c=
Subject key identifier: CF:42:25:14:CB:45:C1:1B:65:EB:CC:54:C7:B0:B4:D1:4C:98:11:FC
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial: 345D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number: 3450
Signing time: Fri 31 Jan 2025 15:12:41 +0000
Manifest this update: Fri 31 Jan 2025 15:12:40 +0000
Manifest next update: Fri 07 Feb 2025 15:12:40 +0000
Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: ki+HgzvIMsfBXO9TpYIIcyH6ljnko1fsHgAGOYP3YAg=)
2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: u3o7AHzkAWjpm//p/0D10Rom5wmEBlx/qRmPwbhLS5Y=)
3: E73006AA682811EB8D635520C4F9AE02.roa (hash: /iYEOgQAhfI0KK0K51Ux9lFp8lKBTgd9K9F6YiH5y0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13405 (0x345d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Validity
Not Before: Jan 31 15:12:40 2025 GMT
Not After : Feb 7 15:12:40 2025 GMT
Subject: CN=679ce868-0380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:66:35:8a:00:26:9b:de:b0:7b:27:72:b0:
39:77:40:05:57:ee:4d:1f:c1:c2:ce:f1:34:87:a7:
b8:ad:91:82:3b:6d:3a:b4:9a:ff:18:3f:0e:7d:81:
29:8f:a2:bf:1d:a1:c6:73:b2:44:d8:e0:ff:e6:c4:
1b:f9:6b:58:da:04:36:84:8e:42:ea:90:00:e9:72:
ac:a0:2f:3d:59:0b:45:3a:3e:11:45:a6:95:eb:fa:
19:43:e9:7c:f3:2e:fb:ce:4a:6a:65:58:32:b2:c4:
3a:b7:11:c6:2a:d9:88:4a:ac:14:94:44:c5:91:55:
92:bb:06:d8:c7:24:5f:ca:ce:49:67:9c:09:53:ec:
36:9a:4c:4c:96:ad:c5:72:10:06:02:a3:2a:fd:ce:
72:6d:60:b1:83:04:23:97:85:b6:10:47:27:e6:4c:
4f:f5:31:37:4f:f1:8a:77:ec:d9:07:8c:fc:34:9e:
1a:a1:82:c0:94:6e:69:a5:92:e2:73:d7:37:8e:47:
ce:d7:af:fa:16:b6:12:7b:dd:d8:4b:85:8e:1c:6a:
1f:bc:9a:04:e3:18:97:c3:48:41:a1:b1:d9:d7:d1:
f4:0c:2c:fa:47:f0:45:c7:6a:f5:ac:bd:c4:53:f8:
d4:57:14:bf:e0:3c:ba:89:55:8d:ed:9b:c3:46:04:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:42:25:14:CB:45:C1:1B:65:EB:CC:54:C7:B0:B4:D1:4C:98:11:FC
X509v3 Authority Key Identifier:
keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:1e:36:dd:09:0a:2e:ec:af:3c:87:d9:54:b9:5e:65:a7:63:
e4:93:e1:4b:77:89:8f:a1:19:17:e4:f5:b7:6d:88:17:2d:09:
e3:74:3e:e1:e7:dc:b3:10:d2:f4:8c:51:0a:7b:21:29:b1:aa:
c9:1d:6b:e7:53:51:25:70:de:fd:36:e9:08:2a:5d:ed:95:b8:
57:3d:a2:84:36:97:27:c9:f4:45:a5:10:26:d0:9d:78:3f:da:
59:4a:af:bc:1a:aa:d8:48:00:54:f4:b9:66:0a:10:42:4d:e2:
ae:fe:96:25:ca:65:bb:52:47:3a:6d:f1:ad:69:d8:1b:94:0a:
db:57:34:92:a8:36:a8:4a:9a:cc:50:91:d3:70:a2:90:50:32:
8d:2c:05:a4:4b:20:33:a0:7b:c9:63:07:18:ee:8c:b7:d9:31:
fd:6d:30:c1:f7:6e:46:6d:e6:a0:cd:99:34:9f:67:0e:ba:47:
1d:c3:b9:05:12:4b:a9:6f:4d:7d:3d:b1:44:84:08:76:4f:0f:
ef:0f:2c:16:52:32:fd:78:77:6e:ac:75:80:1c:98:93:72:cd:
30:5f:22:eb:c0:e4:b6:a6:ab:f0:ba:f9:8f:7a:09:93:5b:20:
41:d5:7b:bd:4d:63:92:05:9d:ec:72:70:62:c5:df:56:73:38:
bc:59:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:51 2025 by rpki-client