Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft
File: PB_di6MB3OPbPwvMJchpTOG83H0.mft (raw, json)
Hash identifier: j/yWrRoAmbdp70Ztc1o71+qwBWFG7ad9cylA7fd0t9M=
Subject key identifier: B9:49:D5:41:F2:DF:8E:19:A9:E1:EB:C2:FF:AF:BA:4E:8D:F4:4D:9E
Authority key identifier: 3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D
Certificate issuer: /CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D
Certificate serial: 0D44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft
Manifest number: 0D3B
Signing time: Fri 31 Jan 2025 17:58:40 +0000
Manifest this update: Fri 31 Jan 2025 17:58:40 +0000
Manifest next update: Fri 07 Feb 2025 17:58:40 +0000
Files and hashes: 1: PB_di6MB3OPbPwvMJchpTOG83H0.crl (hash: 2zJWrHk35aTONm6gGfDOCkVcoPYL8qkxPzYcrE90jgo=)
2: 3802A98EC8AC11E9877DCE2FC4F9AE02.roa (hash: pTMoVBZCsEARFbs1aGExyarMu+r7tLUk6ACYjZUvCyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3396 (0xd44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D
Validity
Not Before: Jan 31 17:58:40 2025 GMT
Not After : Feb 7 17:58:40 2025 GMT
Subject: CN=679d0f50-8870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:ad:9c:80:e4:1a:64:a8:57:c9:16:45:fe:
cd:e6:69:51:01:fa:79:f4:3d:6c:78:51:f4:15:dc:
bc:8e:a6:a0:96:40:e9:29:cd:65:7b:29:6f:87:9b:
4a:23:e7:0a:76:50:46:e6:61:9b:a2:d5:0f:f1:6e:
ea:34:8a:ba:de:a0:e1:07:40:d0:f9:91:0a:ea:c1:
35:37:94:df:4b:2c:f1:76:80:7c:58:4e:84:17:4e:
31:23:4e:0b:d9:6b:5c:2b:ab:60:4c:46:b1:f0:da:
ce:ec:6a:31:42:23:b9:4b:d6:4b:a5:b2:35:d2:83:
79:b1:64:8b:7b:79:4e:39:b8:57:31:de:88:7a:30:
2e:ce:29:57:d1:28:c0:9d:bd:6f:c2:37:7a:15:82:
0a:e6:db:8f:59:11:62:77:7a:85:18:91:99:e3:b8:
a2:d3:70:12:6e:aa:99:ae:ff:5e:27:e2:21:58:44:
14:c9:73:ac:6b:a6:4c:99:72:45:7e:af:09:ce:5a:
1d:34:6a:3a:bb:f3:39:4f:ad:fb:b6:e7:fe:89:c1:
f2:3f:24:22:b1:0e:6d:11:fa:2c:99:6f:19:6f:9a:
7f:b9:b1:ad:be:06:da:52:7f:63:75:c1:6a:25:60:
c4:7a:17:77:3d:e6:2c:aa:98:7d:90:dc:1e:48:a9:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:49:D5:41:F2:DF:8E:19:A9:E1:EB:C2:FF:AF:BA:4E:8D:F4:4D:9E
X509v3 Authority Key Identifier:
keyid:3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:16:c0:ae:ec:85:79:c9:40:47:62:54:e6:97:94:cd:02:75:
52:f3:88:71:05:27:27:77:2a:70:43:46:34:04:3e:48:de:30:
46:ca:50:04:7d:1c:b3:ec:00:df:f8:9b:11:14:19:a1:e9:a4:
2d:d3:74:06:07:d8:27:98:f8:6f:5e:33:67:91:e0:e8:b0:0f:
52:f6:87:93:13:3b:0b:fd:99:0e:d3:43:96:a9:fc:06:68:ac:
0f:55:2c:41:bf:0a:e4:48:06:03:24:a1:4f:13:4c:2a:e3:66:
ca:e5:4f:ef:9d:07:50:48:62:8b:52:26:18:af:bc:a5:f8:8d:
d4:55:d3:84:8e:bd:3c:51:8d:cc:22:34:58:aa:e0:44:cf:79:
8d:5d:5b:0e:9e:91:c2:01:ab:4b:42:2e:c5:e8:8c:64:18:84:
28:98:bb:8b:9b:2a:b2:1c:00:d5:bf:30:a2:65:c0:c5:73:cb:
f1:30:e9:3b:95:92:14:e7:0f:bf:c1:be:db:cf:63:b3:63:1a:
aa:de:2a:b0:23:0e:84:93:0f:0f:bb:d1:ba:26:c5:e6:1f:45:
9f:aa:ab:10:8a:cd:2a:13:c6:da:10:a5:b7:8d:3f:ca:12:6b:
68:db:89:d3:e9:1a:3d:d0:c3:1d:e9:0e:d1:eb:de:c5:1a:0c:
d3:55:7a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:39 2025 by rpki-client