Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
File: poP2ckwCoT8tOc8vIVAL4AOA3eM.mft (raw, json)
Hash identifier: nJETQQwH6FjBNjRptQ6OD66nOPYzEOVBW3xM3pFtxaY=
Subject key identifier: 48:1C:93:8F:C9:D7:56:C0:58:D7:1E:65:BE:EC:A7:1C:E4:B6:BB:60
Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Certificate serial: 349B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
Manifest number: 3471
Signing time: Fri 31 Jan 2025 14:45:36 +0000
Manifest this update: Fri 31 Jan 2025 14:45:36 +0000
Manifest next update: Fri 07 Feb 2025 14:45:36 +0000
Files and hashes: 1: poP2ckwCoT8tOc8vIVAL4AOA3eM.crl (hash: dutBxX53WIODPz1IBf8mX6f24iAUxrn1AAzVu/rN0Dg=)
2: A5FDB194C68611EFB4077137C4F9AE02.roa (hash: 7I8kXqSxz+6NjutJQZnEdYEeWA6i5ZbGEU7PIpXyo/8=)
3: A50B2F32C68611EFB4077137C4F9AE02.roa (hash: lagg7XqNxsfyb1w3gTP+tCUMQSRTn5F81GdacPwOxBo=)
4: A582509EC68611EFB4077137C4F9AE02.roa (hash: 64CAbdllSyxCx8brqJo5EHBLoAmhatUaDGkIKThzCKI=)
5: 5B5ECC52474711ECA7B2426CC4F9AE02.roa (hash: dC278Jasv16ABeBncckRYaabj45oiL9uCdUDcCgUOqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13467 (0x349b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Validity
Not Before: Jan 31 14:45:36 2025 GMT
Not After : Feb 7 14:45:36 2025 GMT
Subject: CN=679ce210-051c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:79:b4:02:86:32:85:cd:a7:46:62:82:8e:
d4:69:7b:2a:15:4a:5c:4c:be:22:68:b8:19:c9:ae:
c0:ee:21:c4:f5:db:53:ff:11:19:55:ac:3f:44:0e:
cb:0b:66:52:22:a4:a0:7e:74:55:46:d5:1b:bf:4c:
ea:25:5e:08:d1:a4:41:9e:2a:c0:9f:84:ab:53:8b:
0e:60:08:18:dd:93:3c:49:ca:0e:71:67:9f:a8:90:
dd:28:83:d1:ad:05:7e:ee:b3:34:66:70:89:c5:1c:
82:18:2e:8f:24:64:5a:44:1e:a1:1f:5d:41:0b:fe:
41:f6:fd:96:9f:0d:24:21:b7:f7:4f:2c:26:66:6b:
46:38:59:29:90:53:e8:00:aa:91:e1:b5:d9:3d:03:
01:a3:2d:82:d8:00:f8:09:a8:f4:44:18:5e:a9:ca:
2b:bd:5c:48:7e:09:96:83:41:e9:20:9c:c7:76:d1:
00:87:a8:c4:83:f9:af:c7:fc:5c:2a:e3:47:f2:b2:
ef:d0:a4:3f:3a:6b:f9:0d:b9:73:3e:61:a7:37:39:
78:b8:d7:60:23:d0:f5:b6:ac:6e:ed:11:86:fa:3b:
e1:15:1c:fc:31:5e:e9:d4:f9:66:22:18:45:08:67:
97:70:03:30:a3:1b:2f:32:33:aa:d5:80:15:ce:f7:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1C:93:8F:C9:D7:56:C0:58:D7:1E:65:BE:EC:A7:1C:E4:B6:BB:60
X509v3 Authority Key Identifier:
keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:ea:e4:5d:59:b3:aa:b3:15:3a:6c:c3:66:05:3c:a8:e3:c4:
91:3f:fd:be:c8:34:25:88:ba:c7:89:b7:b5:3e:67:52:55:e7:
24:b7:94:32:8f:f9:22:43:ce:2d:26:03:7f:08:99:df:75:43:
c3:cb:02:e9:9d:20:36:76:d8:dd:62:bd:bc:9b:fd:14:c7:bc:
63:9a:6a:d6:fb:7c:56:a0:5f:ab:db:4e:2e:91:d8:d0:0c:91:
bd:4f:ba:81:69:ea:92:e8:36:01:e1:e2:6c:0d:7d:3a:a1:ca:
14:61:9e:00:ec:c2:37:a1:7d:6a:6e:74:37:5f:8c:38:37:9c:
2c:51:ac:d3:b4:1f:78:79:8a:c5:0b:39:84:8c:7e:f9:dd:5e:
12:f8:3d:73:b4:ec:5c:a4:c5:3e:72:e3:47:65:69:cc:85:d8:
e0:d0:4b:68:48:e7:a3:39:b5:16:65:61:28:a9:44:d4:9d:82:
39:0c:7e:11:6d:d8:bd:75:82:28:87:5e:23:18:41:35:7e:cc:
31:f9:1a:0b:14:52:57:91:66:84:ef:28:d8:89:21:63:cb:2c:
f4:eb:75:99:92:54:35:2e:ea:67:98:ce:f5:40:1a:27:cd:f0:
a7:0c:77:0d:7f:8a:33:71:fd:f3:62:66:48:fd:ac:90:13:55:
fb:75:67:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:11 2025 by rpki-client