Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json)
Hash identifier: cCSd5Og69BOsLD17S/pA6f96/3FRSuVMCWVoQ5KKDjk=
Subject key identifier: 23:96:7F:9F:10:3F:62:8F:C8:E9:77:FD:E8:B6:D5:62:58:AF:37:EF
Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1
Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
Manifest number: 015E
Signing time: Fri 31 Jan 2025 03:16:16 +0000
Manifest this update: Fri 31 Jan 2025 03:16:15 +0000
Manifest next update: Fri 07 Feb 2025 03:16:15 +0000
Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: f8HntT/vKuEdgOBWEOzkmopfGzeSjm/X+JP3kWayFLo=)
2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: ZbC1fIWVYM0VLVl8rd4V+PKdCpSrgSM3tfi0uNsU2b0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
Validity
Not Before: Jan 31 03:16:15 2025 GMT
Not After : Feb 7 03:16:15 2025 GMT
Subject: CN=679c4080-20f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:bb:54:c2:6c:bc:e1:9f:4c:b5:5b:cf:47:
a1:57:25:99:1e:08:f4:ef:20:a8:dd:ec:c2:85:5f:
15:81:bc:18:77:1c:f8:5b:41:4f:28:de:55:92:88:
dd:d7:0c:08:e6:7e:36:6c:bf:5a:86:e8:a0:40:c9:
94:31:fe:a6:c0:4c:e5:89:95:70:fd:4d:19:1e:60:
65:c0:b1:c8:45:2d:3f:62:42:82:dc:00:28:86:2b:
3b:e3:49:ca:b8:1e:ce:5f:d2:ea:63:f6:48:7a:c0:
88:50:31:d8:ea:54:7c:71:dc:19:35:fc:0d:f1:30:
91:45:3b:57:a3:c2:f2:d7:2c:09:2f:cf:9b:c3:7b:
59:a5:59:75:d6:25:11:f0:7f:49:2c:e3:64:be:46:
1b:e6:a3:05:3c:bd:9f:79:3e:fe:37:4e:ec:e6:ab:
cb:c9:63:57:30:96:63:28:4f:7c:94:e2:c3:2a:3b:
8f:a8:40:6c:c7:74:ff:8e:ff:7a:a9:47:ce:2c:33:
02:5b:d2:a8:d0:df:71:6a:19:85:4c:95:4c:19:14:
49:dc:d7:44:57:69:0a:20:12:a6:65:15:e6:0a:1a:
62:6a:ed:c9:7e:52:d0:4f:a9:c0:04:38:ff:15:88:
9e:18:67:30:21:aa:ab:64:ac:33:5c:40:26:ce:70:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:7F:9F:10:3F:62:8F:C8:E9:77:FD:E8:B6:D5:62:58:AF:37:EF
X509v3 Authority Key Identifier:
keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:47:5c:11:13:53:35:27:de:07:8f:52:da:81:95:01:81:73:
e1:9b:37:f9:07:54:a9:e8:b1:78:29:04:3b:f7:55:c5:a6:a1:
5b:25:4c:3b:1f:1a:b6:08:97:4b:47:62:45:b2:ba:d0:83:f0:
40:b7:e0:99:72:6e:f6:3c:40:27:1e:54:b6:7b:59:ec:83:c9:
63:91:e3:4b:ad:94:ac:ef:f6:3c:61:6a:37:bf:cd:04:36:51:
16:d3:db:7f:0f:45:11:c3:27:be:a8:b0:db:22:93:c6:a7:82:
86:3e:9a:bb:78:dd:36:af:e6:44:e2:0c:b9:9f:7e:0b:36:33:
3b:c4:77:1f:9a:ab:49:83:dd:35:94:00:4f:18:1f:2e:f0:3b:
55:9a:91:68:88:1d:2d:9c:9a:1b:bf:82:4b:c6:5b:34:a1:f6:
0a:06:86:ff:64:d2:a6:15:54:ab:71:8b:26:88:24:1e:d9:89:
30:88:2e:71:c6:a5:d8:ec:ca:f7:9d:e2:79:47:49:0f:9d:2b:
5f:c2:38:71:f5:13:03:4c:51:51:a7:55:c6:6c:dc:6c:4b:9a:
b3:e7:86:88:6f:c2:4d:4c:4a:6d:83:5a:0a:cc:67:82:fe:44:
35:dd:b2:d6:c5:ae:36:86:c6:91:f5:8e:a6:cc:82:78:9c:3e:
33:87:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:04 2025 by rpki-client