Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
File: PdCVvno70d2CniomSfx-gafv40w.mft (raw, json)
Hash identifier: XcNI0s0BIMQcbFUcA4zzdkyM6FMXmB4bddawHsGuCWc=
Subject key identifier: DA:9A:10:B5:1C:70:E1:E1:2B:78:E3:D1:3A:68:21:EC:1D:FE:43:7B
Authority key identifier: 3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
Certificate issuer: /CN=A91C8307/serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
Manifest number: 18
Signing time: Fri 31 Jan 2025 07:02:48 +0000
Manifest this update: Fri 31 Jan 2025 07:02:47 +0000
Manifest next update: Fri 07 Feb 2025 07:02:47 +0000
Files and hashes: 1: PdCVvno70d2CniomSfx-gafv40w.crl (hash: tAPLGlR9VWmRn347YFlnYKE1+SDLcuEMXDvC2dfY69U=)
2: DEDB3932BED411EF835BB47AC4F9AE02.roa (hash: O2sa7pTiQKdOhkw1Yh9cM+13JLJmRbo0IeSALJBybOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307/serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Validity
Not Before: Jan 31 07:02:47 2025 GMT
Not After : Feb 7 07:02:47 2025 GMT
Subject: CN=679c7598-eb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:5a:92:a8:82:93:a4:1d:c1:a9:d5:39:a6:
e3:4f:03:2a:08:ce:f3:0a:60:0a:83:6e:69:2b:d0:
c4:64:fb:cb:95:96:ca:98:86:fc:98:c5:1e:5c:f4:
a1:ed:ac:ce:fa:b7:12:be:6f:02:cc:5b:2e:e7:7b:
7c:23:b5:72:c6:b2:67:97:5e:83:60:5b:c5:a8:91:
d4:21:df:f8:57:33:5d:15:40:c7:3a:0f:53:a3:c0:
48:73:74:f5:6e:7b:ba:c9:d2:7c:5e:88:01:ac:1e:
18:21:57:af:aa:92:f4:b8:90:ac:0a:06:ca:07:c7:
b8:a6:a2:d2:23:7b:a5:90:74:fa:b1:dc:47:15:e0:
1f:18:4a:8a:41:ae:c8:ee:16:70:d9:40:7a:d9:03:
49:71:85:ca:a9:aa:4a:a5:99:7e:6b:3d:85:1b:e3:
7a:a9:59:07:e4:9c:e4:6e:50:24:a7:8b:7c:12:72:
8e:6c:77:7d:82:50:be:b4:83:00:c4:b7:0b:95:c3:
3e:22:b4:5c:13:be:ab:d3:68:4a:b8:b5:8a:10:dd:
11:6e:8c:ad:9b:90:11:fc:c8:28:d1:8b:dc:63:59:
50:5b:ee:1f:cc:2b:f4:65:09:8e:d3:48:09:6c:8e:
fb:21:d7:3e:47:8a:37:e5:c9:b5:4d:3d:f2:c3:5c:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9A:10:B5:1C:70:E1:E1:2B:78:E3:D1:3A:68:21:EC:1D:FE:43:7B
X509v3 Authority Key Identifier:
keyid:3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:b1:55:f9:16:0f:93:37:b0:4a:f8:62:00:83:67:ba:75:15:
13:8d:df:44:e2:e4:b3:e6:24:96:25:25:0d:0e:40:08:3f:48:
c8:b1:4e:d9:9f:c1:e7:6f:9a:bb:fa:8f:17:5a:3b:50:35:8e:
4c:74:58:f5:55:a6:ff:5e:f6:cb:45:52:0b:2a:73:66:f7:2e:
ba:05:c5:e4:a4:e4:68:af:ff:01:5d:0e:2c:09:ce:2a:97:07:
64:6f:d4:2c:6d:09:f8:1b:7a:f9:97:40:f7:7a:bf:ab:d9:f1:
35:32:1b:6e:36:00:1b:6d:5a:3f:af:02:4f:78:ef:e1:37:2f:
d3:5a:15:db:36:4b:e6:73:86:64:4c:56:04:05:0d:4b:2c:dc:
48:25:2a:1d:94:49:e1:71:97:14:ab:7b:63:f1:e7:27:a5:1a:
dd:d5:a7:bf:bb:52:d2:8c:09:96:83:c2:70:39:7b:ca:2d:1d:
ad:a2:7d:20:32:d9:2f:8a:93:c1:75:bd:d9:1a:99:41:4f:25:
12:17:9a:d7:24:da:b9:35:5c:5c:2d:19:2e:20:4b:8a:b3:97:
fc:b7:1a:19:05:cd:f3:3f:26:4e:53:95:ae:a7:17:9f:74:4c:
35:c9:b7:1f:b4:e3:26:4f:88:07:9c:e4:39:4a:7e:3c:6c:57:
81:e0:41:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:45 2025 by rpki-client