Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
File: pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json)
Hash identifier: IIiEsOQ58NWGbxS2gycsTtUdCqtbPzDZz6MXxHUzMNk=
Subject key identifier: 7F:B6:E2:0D:00:A4:8D:74:71:1B:0D:A9:1B:D4:C0:6B:DF:47:0D:14
Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
Certificate issuer: /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Certificate serial: 1118
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
Manifest number: 1104
Signing time: Fri 31 Jan 2025 17:17:10 +0000
Manifest this update: Fri 31 Jan 2025 17:17:10 +0000
Manifest next update: Fri 07 Feb 2025 17:17:10 +0000
Files and hashes: 1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: Leq008vT/YAfOYUYxBCEkFKGe3r/2XSC2h/DWRaww5Y=)
2: DB4085480A3A11E999FA296FC4F9AE02.roa (hash: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ=)
3: 041E1E420A3811E9BE336267C4F9AE02.roa (hash: Spb+pH4GvP2Ukki1wFpymghuHWZTFJjsX3H/le8aCzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4376 (0x1118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Validity
Not Before: Jan 31 17:17:10 2025 GMT
Not After : Feb 7 17:17:10 2025 GMT
Subject: CN=679d0596-f4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:3d:c0:bc:37:5b:bd:69:d4:83:a6:73:c7:
e1:73:84:da:24:3f:f2:44:06:ea:3f:42:17:67:3b:
c8:e6:25:41:bf:ed:11:30:a3:1e:7d:a0:69:90:6d:
7b:1a:5b:0e:c3:c9:5a:da:cc:bc:7f:2b:d2:7f:22:
f9:f1:7b:a9:8b:6d:fb:b3:fc:4d:54:aa:ee:77:94:
8f:a0:4e:3e:a9:f1:cb:9e:4b:ef:63:01:b6:bf:a1:
55:96:ba:fa:4a:5e:a9:66:09:93:40:f0:cf:69:4b:
25:b8:10:6b:0c:60:06:a3:46:3c:c8:4d:ad:ae:03:
c4:2a:83:71:14:d7:ce:b2:1e:1b:8e:34:2d:7e:44:
2b:09:51:50:c8:fa:86:68:f0:60:34:52:67:3e:bb:
0a:cf:5c:3c:39:e9:cb:c6:28:7f:e8:b8:b5:ed:91:
8f:e2:6e:32:23:75:62:51:a7:ef:c5:0a:0f:16:30:
d3:b4:dd:ef:8e:0a:76:8a:8c:c6:ef:18:9f:ad:d3:
97:64:f9:a9:ff:f8:99:21:fd:45:42:eb:54:44:e9:
85:8c:35:25:5c:70:b0:5a:77:d6:25:de:53:a0:9a:
cf:f6:59:88:c9:14:e0:19:38:d5:56:c5:48:bb:e6:
de:05:a9:cc:39:c7:84:e8:c8:79:89:be:31:9d:b8:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:E2:0D:00:A4:8D:74:71:1B:0D:A9:1B:D4:C0:6B:DF:47:0D:14
X509v3 Authority Key Identifier:
keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:26:69:0f:00:46:81:72:65:1e:33:88:f1:41:40:13:07:74:
bb:c8:5e:b6:7c:69:64:92:e3:0b:5f:64:c5:aa:4e:6c:e9:93:
31:ac:19:57:05:b0:f7:ed:bc:c0:2f:4c:2f:f7:be:cf:0c:24:
67:b2:24:26:d4:a3:a0:4a:6c:cc:2b:50:8d:85:b1:ea:39:be:
29:52:83:fe:68:db:e3:fd:eb:89:82:8e:e7:75:ff:d7:da:88:
11:df:2c:41:0a:28:a3:53:cb:cd:6d:12:c4:55:0d:c1:14:a6:
09:e1:aa:93:4e:e0:90:7b:5c:f2:e4:64:97:04:00:4d:91:b1:
89:1c:b4:fe:d0:1b:01:c6:7e:61:0e:84:f8:42:e1:11:29:35:
cc:d6:57:f6:00:2a:2b:22:da:9f:9f:d4:71:40:24:24:47:9d:
54:bc:71:28:d7:9a:2c:92:1b:a3:54:7a:2b:ab:16:ad:01:91:
a2:9a:df:0d:92:b8:c0:17:f7:87:26:ba:06:68:a2:82:b7:8c:
ae:a9:bd:19:32:f9:d7:f5:10:4b:e0:b1:0b:5e:2c:b1:83:64:
99:c8:84:b4:fa:67:4d:4b:09:e5:f1:e9:58:b6:3d:b9:12:73:
6b:03:c6:3f:c2:b8:93:db:d4:4e:8d:c3:5a:3f:ad:f1:fb:92:
34:ee:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:17 2025 by rpki-client