Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json)
Hash identifier: q7lspzHWDkRR94VcqearLmu1uhWDkNc1W9tUoyivnt8=
Subject key identifier: B8:84:76:28:CA:26:77:CA:E5:6B:B6:A0:6B:41:EB:F5:16:16:B1:01
Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB
Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB
Certificate serial: 104A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
Manifest number: 103A
Signing time: Fri 31 Jan 2025 17:23:09 +0000
Manifest this update: Fri 31 Jan 2025 17:23:08 +0000
Manifest next update: Fri 07 Feb 2025 17:23:08 +0000
Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: xokdC30ertNEC/+LGt2O/5NZQouBnfLgvT5rnGuR9+o=)
2: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: pBAdtg5q7fupj3C2NkgZi3lj80AO2X+XBbLJrZHCCV0=)
3: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: wC4P834uMCwewPqC4AzB3L42gf9vs93AMppygyyTSdg=)
4: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: Zx75smDZoCLc3BQeMy0zIEYFPQvHS5X5/v68oiFszVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4170 (0x104a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB
Validity
Not Before: Jan 31 17:23:08 2025 GMT
Not After : Feb 7 17:23:08 2025 GMT
Subject: CN=679d06fc-9ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:45:0d:df:f3:10:e0:3c:12:4c:c9:2e:14:
20:9e:fd:b3:0b:7d:ee:c5:cf:ba:85:31:7c:d9:9e:
3f:e6:0e:1e:3f:bc:dc:66:85:f3:4d:46:31:62:1a:
4e:4a:5d:73:fa:8b:d4:5f:c6:9a:d0:0b:aa:b8:44:
87:07:80:b4:a0:c3:5b:ac:91:ee:d3:74:a9:a2:9c:
03:71:6c:f1:4d:d4:de:58:4a:7e:23:57:cf:aa:0a:
24:ee:b2:14:6d:12:53:53:5d:73:82:8c:35:13:df:
7d:55:b5:b0:27:78:25:53:3c:ca:d2:74:02:c9:b0:
69:9e:2f:6d:25:1f:90:88:98:e1:ff:38:e7:13:9c:
25:a4:c1:4e:1a:a9:1c:b5:dd:56:74:6c:97:42:c7:
30:22:aa:6e:9c:3c:06:cc:d1:3c:44:30:cb:c4:b5:
a2:0d:d6:7b:a6:73:f9:0c:33:c6:bf:cc:57:da:90:
ba:1e:72:25:93:0c:c8:60:b9:7f:08:02:5b:77:62:
f6:d4:a4:38:00:9e:8d:c9:16:64:cc:03:bf:37:1d:
71:af:f8:5b:ca:e8:60:74:f6:57:95:2a:4b:25:33:
f1:6c:75:e6:0b:8c:96:13:36:c8:2c:50:2e:d9:ca:
e6:7b:17:1e:d6:26:9c:a7:55:19:48:32:4d:10:8d:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:76:28:CA:26:77:CA:E5:6B:B6:A0:6B:41:EB:F5:16:16:B1:01
X509v3 Authority Key Identifier:
keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:57:d9:94:8b:6e:e1:a8:10:7a:62:32:87:9f:99:63:80:35:
99:07:0b:b8:d0:c4:c9:86:7d:d9:f5:90:b9:f1:69:14:62:30:
8f:99:e2:9c:47:e3:db:cf:6a:41:34:4f:7a:cb:64:1e:f2:21:
13:98:2b:7a:30:2f:0b:ff:03:54:e9:51:61:4f:25:65:6c:84:
1d:d1:99:82:c4:0b:05:7a:e2:2b:03:ff:73:a4:62:f9:53:bf:
f5:d0:fa:4a:74:67:d7:84:10:72:6e:8d:b7:64:8e:71:e3:72:
9d:3c:36:9e:44:52:cf:55:48:3d:3a:b9:ad:39:aa:86:8c:44:
fb:56:01:9d:ae:a3:f5:bd:73:aa:5a:bd:37:3a:b5:48:6a:ba:
4b:19:c7:54:55:a0:31:b7:9b:16:9e:08:4e:72:ba:f3:d4:ed:
f4:c4:50:23:17:68:5d:d5:19:ee:13:57:e1:88:ff:64:f6:11:
82:71:77:ad:b7:2c:04:ed:47:cb:08:01:57:b0:de:b5:c0:2d:
4f:63:60:8f:d0:7f:b8:84:97:e6:68:aa:41:2a:bc:d4:58:4d:
15:a5:7d:ab:cd:e8:c3:32:f5:3e:3f:9c:54:11:0f:1e:53:00:
ca:51:62:b8:12:58:ea:f4:85:7b:05:6d:16:12:c8:2b:29:62:
0b:3d:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:44 2025 by rpki-client