Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
File: PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json)
Hash identifier: 2FPwKY6KId2qDHtG+kul5LTnwFFmXQJnJUYUWrMYiPY=
Subject key identifier: 33:F1:B0:DC:E8:3B:4A:A5:D3:3F:14:65:9E:61:D5:FD:F5:DF:E6:C2
Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F
Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
Manifest number: 0110
Signing time: Fri 31 Jan 2025 04:06:36 +0000
Manifest this update: Fri 31 Jan 2025 04:06:35 +0000
Manifest next update: Fri 07 Feb 2025 04:06:35 +0000
Files and hashes: 1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: ypsYdcIhr8SMYFI35i9G7KTGsMkdG+/3/uNtRwsz+BY=)
2: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: mRgAmQOm70v82zzEgYDnDn2brEuaNu5y2crpXyX3sdg=)
3: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: bbT6hxERjo8lnAEspIks/q29jjxdhXSux3U2mM5P3u0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
Validity
Not Before: Jan 31 04:06:35 2025 GMT
Not After : Feb 7 04:06:35 2025 GMT
Subject: CN=679c4c4c-5fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:38:7d:76:71:be:45:4e:7d:f6:c9:87:bc:
bc:32:ed:f2:cd:0c:fe:3e:57:91:15:c7:cb:8f:c9:
c3:bb:6e:8f:e2:ee:f5:93:fc:79:5c:31:65:70:73:
a4:a1:f8:4c:03:a7:05:c4:1a:20:b2:ca:fb:72:32:
fb:11:8e:ab:ad:91:f1:b6:1b:43:62:86:59:99:b7:
62:34:f6:2f:9c:31:10:5c:f8:f6:f0:89:b3:ea:b2:
fc:2b:98:3d:90:de:12:cc:f9:58:6f:80:1c:c2:b3:
0e:92:bd:75:e1:55:86:5e:3a:47:e6:a1:7c:a9:44:
98:89:c6:77:47:99:9c:e6:18:96:b6:61:96:7f:c1:
86:48:8e:65:10:01:63:16:f1:37:54:34:1c:eb:cc:
f9:e7:6d:dd:ae:8f:64:a5:b0:bc:9b:a6:86:88:97:
78:55:93:25:eb:a5:c5:6d:a5:0e:d7:4a:a7:99:50:
59:b9:36:6f:ff:f0:d5:e4:44:20:15:2f:08:e3:3f:
41:04:00:e7:e4:9d:20:4a:6c:d7:de:74:05:b5:67:
8a:b3:5a:af:5b:5f:dc:ca:7b:fd:bc:9a:0a:cb:59:
5e:77:30:ae:51:4b:f7:43:dc:f1:c6:1c:c5:96:ff:
7c:52:e0:9f:82:8f:fb:08:9a:a9:61:e9:c4:84:96:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:B0:DC:E8:3B:4A:A5:D3:3F:14:65:9E:61:D5:FD:F5:DF:E6:C2
X509v3 Authority Key Identifier:
keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:44:06:9d:d8:4a:2c:8b:38:5b:68:2e:1a:71:29:42:bf:db:
8e:3f:b5:c5:2b:25:2e:37:95:8e:1e:15:5f:a8:7c:3b:9b:d8:
ea:ee:c5:1e:98:67:33:a5:a4:db:98:7e:2a:b8:ce:3e:41:e9:
af:d9:c4:9c:88:6d:08:c7:28:cd:31:40:09:d2:56:44:24:35:
82:d9:25:05:2e:8f:91:c1:78:ad:1c:9c:a5:2b:ec:f7:49:44:
26:a0:2f:7d:93:d3:1c:ed:fc:9c:8e:a7:5e:aa:34:de:fe:8c:
f1:ce:b7:74:c7:34:10:82:18:b0:ad:02:04:b3:6c:eb:b3:74:
81:b7:a5:13:f7:c6:87:a4:aa:59:cc:90:a8:42:b2:28:69:84:
c1:97:52:91:99:aa:c9:60:b1:74:9c:be:ff:b8:36:a9:2f:ac:
64:f1:59:7f:db:a3:e1:35:88:ef:fc:e1:52:1f:0e:fb:f9:8e:
a7:8f:dc:b1:95:1f:db:24:49:15:02:05:85:55:d3:64:93:dc:
08:22:65:7d:62:87:09:f1:66:8e:b3:80:5f:2a:2a:2a:ce:85:
ca:8b:16:8b:5f:1e:76:5b:e9:f6:9f:10:f1:4c:29:1a:d9:f3:
dc:36:7a:11:62:02:9d:15:81:2a:9d:9c:41:33:b4:16:b0:8d:
9d:aa:10:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:58 2025 by rpki-client