Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
File: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft (raw, json)
Hash identifier: X50jgCtLuO7ldx/+2ArqQrDga7+LouvY5EDSR8Zk200=
Subject key identifier: 24:F9:1F:E9:15:85:46:64:3A:CE:36:7B:EC:E6:50:C0:7A:F3:04:E7
Authority key identifier: 3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3
Certificate issuer: /CN=A91A3399/serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
Manifest number: 0107
Signing time: Fri 31 Jan 2025 04:16:22 +0000
Manifest this update: Fri 31 Jan 2025 04:16:21 +0000
Manifest next update: Fri 07 Feb 2025 04:16:21 +0000
Files and hashes: 1: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl (hash: 7qEULDxdLV1psZgucc2zf/I7nTf1l650NqpGCLUdrc4=)
2: 553596D65DB511EE841C151FC4F9AE02.roa (hash: 5aNVVXrrk5+fzIwBo8UDYAZxVOdmHrz5HqTDIZHkN8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3399/serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3
Validity
Not Before: Jan 31 04:16:21 2025 GMT
Not After : Feb 7 04:16:21 2025 GMT
Subject: CN=679c4e96-87d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:f6:c9:23:ce:42:d0:18:3f:e9:76:01:ac:
ff:38:55:28:05:05:a2:67:ef:14:bc:f8:9d:7c:6f:
5b:3f:b0:e8:96:6c:83:72:0e:4b:8b:72:49:5e:1c:
8c:6b:a7:a0:e0:b4:34:77:9f:f4:08:59:c9:57:72:
45:19:22:80:d0:bb:be:a4:9b:c8:1e:8e:a4:b7:ee:
d3:12:48:48:3f:19:84:46:45:8d:d2:1f:0f:a7:2e:
35:86:5d:3c:7e:8b:99:23:d6:3d:8e:15:93:53:4f:
6e:ae:ea:00:6b:d5:3a:b9:28:63:6c:94:aa:12:c5:
7c:ef:57:c5:2b:45:64:42:4e:60:bf:49:eb:d8:ad:
30:8e:48:d7:76:54:28:28:c5:64:2e:53:4f:e4:77:
84:a6:df:77:e0:ba:d9:e1:ef:b9:e2:84:21:f9:23:
3a:ea:a5:6a:34:27:a1:60:c0:c8:f5:1e:29:c0:78:
83:7c:ea:e7:c8:d0:52:76:68:99:8f:ec:ee:67:4a:
0e:5c:bc:02:2f:1a:1d:71:24:2e:37:07:50:c9:b5:
c1:fd:91:bc:fd:8c:6e:b4:4b:3e:75:49:21:2f:95:
94:21:ed:66:60:f2:fe:03:b6:88:8f:9c:9e:03:f5:
b0:a6:dd:fa:9c:f4:8f:8a:f0:e0:e2:91:a6:60:2c:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F9:1F:E9:15:85:46:64:3A:CE:36:7B:EC:E6:50:C0:7A:F3:04:E7
X509v3 Authority Key Identifier:
keyid:3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:61:a6:f1:2d:44:c2:35:8f:35:53:68:c9:bd:0a:51:cd:d2:
7e:4c:09:30:1e:c0:24:45:41:23:00:b3:db:ee:c4:69:ed:b8:
c3:b3:85:2d:ab:36:83:10:63:e0:e3:95:5e:20:53:9e:b5:a6:
6e:99:11:3c:5e:57:8c:85:95:7e:ac:ec:07:f2:9d:71:5a:4b:
ae:96:5f:d0:e7:64:be:cd:f2:48:79:8b:bd:aa:e7:5c:26:e9:
57:ae:45:32:7b:72:d8:81:9f:91:0a:d4:38:b5:87:cf:6e:56:
e3:57:67:28:99:08:d7:86:9d:99:a5:c9:98:87:70:18:df:3b:
2b:c3:93:08:70:53:81:9f:29:10:87:5d:37:10:3e:d8:cd:c4:
e9:ab:c9:1a:6a:d7:ba:8b:61:d1:cc:23:d1:0f:80:b2:a2:26:
7f:b9:28:43:eb:84:83:81:fc:82:7e:c2:61:53:77:d4:9d:1d:
62:27:05:ba:fd:86:92:74:1c:a3:3f:10:8e:79:7e:8f:f6:6d:
1e:78:6b:33:09:21:9b:b7:8d:46:7d:dd:55:3d:8f:e8:75:a7:
8f:9b:01:3d:21:c7:4e:ab:49:66:c8:db:c4:e8:18:25:f4:ce:
4f:15:83:af:9d:f0:a8:97:e8:a0:e5:65:d6:ba:fe:71:d0:f5:
59:bd:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:12:29 2025 by rpki-client