Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
File: PykJw_UywAsCV7klbHbroxTc0A8.mft (raw, json)
Hash identifier: t4zluSH8rvAhfKi7N1rngjuWF/V4uwdjgTi3vPnxR30=
Subject key identifier: E2:70:AA:6A:E5:D5:CE:DD:F4:5A:3D:47:05:93:8E:89:D9:F7:4A:F4
Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
Certificate issuer: /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
Manifest number: 0249
Signing time: Fri 31 Jan 2025 01:56:51 +0000
Manifest this update: Fri 31 Jan 2025 01:56:50 +0000
Manifest next update: Fri 07 Feb 2025 01:56:50 +0000
Files and hashes: 1: PykJw_UywAsCV7klbHbroxTc0A8.crl (hash: D+GzV/tiGSZQBv687qPeDzhEz7oAnNL/yogmLhTMjhQ=)
2: 99A7637060B311EEBA329E54C4F9AE02.roa (hash: yZy+TqtowAyp3q8j4FvJTBd3TEpqHb7gUX+ZaoqGeKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Validity
Not Before: Jan 31 01:56:50 2025 GMT
Not After : Feb 7 01:56:50 2025 GMT
Subject: CN=679c2de3-cfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:2a:dc:60:0b:18:fa:15:f3:ba:78:4d:02:
ac:e0:13:0c:74:98:9f:2b:9d:9b:79:b1:1b:71:19:
89:f3:8c:83:8b:cc:46:39:79:6c:c4:ca:87:ac:60:
40:93:a9:02:a3:e7:35:d0:16:6e:30:db:a0:be:a3:
6c:de:ff:07:3d:d7:eb:45:61:15:9d:84:a1:44:36:
35:fe:2d:d7:f9:c8:a5:ff:1e:cf:51:9e:b6:ae:7c:
c2:b2:51:ab:10:83:5a:fb:c0:a0:d8:b1:f6:39:9a:
b6:7d:a5:57:80:3a:4f:35:17:cc:b4:8b:3e:48:c6:
a0:8a:b0:65:9b:86:64:58:11:46:b1:86:e8:a1:d3:
0c:6f:ba:97:89:8d:09:0f:b5:25:9a:7b:6f:6b:43:
f5:e5:32:14:58:86:9a:fd:e6:7f:b2:c4:e9:95:03:
f2:55:53:6f:e1:f6:8c:8e:c2:64:5b:d0:58:db:13:
72:f8:17:cf:33:80:40:18:b1:82:16:ac:ca:59:db:
80:09:84:ea:57:44:4a:38:0c:4e:65:fd:3b:54:99:
b1:98:9c:c9:e0:04:f1:4b:a6:5f:1a:be:9c:28:59:
06:8d:c7:1b:02:f3:5c:3b:5d:f1:9b:1b:68:be:aa:
f8:22:e4:07:3d:6e:48:22:b7:87:0d:87:3c:eb:7d:
b1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:70:AA:6A:E5:D5:CE:DD:F4:5A:3D:47:05:93:8E:89:D9:F7:4A:F4
X509v3 Authority Key Identifier:
keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:79:89:a1:17:50:d5:73:f0:8f:17:52:4d:c7:f0:a0:89:f7:
4f:b0:84:78:6a:61:f6:df:5d:b3:79:bd:91:36:af:9d:68:31:
bb:4a:0a:2a:cc:7f:bc:1c:b2:cc:53:55:2b:26:75:73:63:32:
c8:0d:7c:08:90:b5:0f:89:36:3e:e2:ed:33:97:2a:8d:c6:5b:
7d:d2:a3:d0:7a:22:06:8a:5a:bb:8b:33:63:72:0c:9e:42:e2:
18:a5:19:71:2d:e8:92:15:8c:9b:47:33:22:f2:01:0a:33:52:
3f:eb:c9:fa:44:02:35:37:09:d8:da:cd:68:f0:06:49:6d:2c:
8f:af:de:6f:a3:90:23:93:58:e5:5a:5d:50:9f:32:68:cd:b8:
4d:b9:42:45:72:aa:26:0b:e1:14:bc:e5:a3:fb:ca:dd:27:c2:
2c:38:d2:98:11:c0:82:01:d8:46:7b:53:3c:08:3d:b4:01:93:
ec:47:10:1e:66:f5:12:6c:b5:e3:77:bb:1a:3d:50:10:fb:71:
a4:99:38:20:f8:1f:e7:2c:d2:f5:08:fa:2a:9d:1c:41:83:33:
34:b3:4b:5e:17:d5:9f:65:13:02:1b:17:3d:57:44:45:15:94:
05:46:b6:b6:ef:fb:c6:8a:a0:08:63:20:08:ce:eb:1c:19:a9:
53:d9:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:51 2025 by rpki-client