Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json)
Hash identifier: KqbjHw+rz8KL+frSxnU98/uKueMtD1OkHuKIiEu+/WM=
Subject key identifier: 32:56:AD:A7:81:69:C7:0D:83:5C:52:A4:13:20:75:EE:88:0E:5E:06
Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Certificate serial: 03D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 00:39:54 +0000
Manifest this update: Fri 31 Jan 2025 00:39:54 +0000
Manifest next update: Fri 07 Feb 2025 00:39:54 +0000
Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: qNsYAmfXendqai9ZUAVv0+qym9YFPGknTgbbCvhwro8=)
2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: JlDX2tzJlcNE/I1lTDSMx1j1rQwlB5jz3lhUPSy9RC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Validity
Not Before: Jan 31 00:39:54 2025 GMT
Not After : Feb 7 00:39:54 2025 GMT
Subject: CN=679c1bda-0f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:40:3f:99:a6:54:ea:4c:68:64:b2:64:e1:52:
a4:40:c5:a2:46:9e:34:0c:04:e4:59:26:fb:08:cb:
66:7d:77:6d:97:08:69:95:d8:94:b8:89:8b:cd:7e:
fd:4a:d3:0c:0d:74:a5:12:09:9e:fa:d9:4f:2d:a5:
7d:05:a4:4d:f5:83:97:4d:42:23:06:58:94:c9:83:
c7:cd:0d:83:2f:00:8c:f3:12:05:3c:07:26:98:4d:
3c:23:8b:7f:27:4a:24:7a:33:54:b3:c2:ea:4f:98:
ad:a5:e2:c7:1e:b9:46:cf:b5:db:02:4a:6c:90:be:
da:e6:b6:eb:e1:c7:f6:f2:f6:ac:41:2b:b0:d8:7f:
ae:75:86:03:79:16:5a:14:13:1a:b3:a2:d8:8e:4f:
8e:c8:08:2e:bc:8b:9e:6b:b2:2f:c0:c4:cf:ac:9c:
7c:f7:db:c7:7c:e9:85:ac:5e:ba:0d:8b:4c:55:1a:
60:4a:12:58:a3:a4:e5:d7:dc:b4:ee:86:3c:5f:7a:
97:69:0f:d2:fd:8a:90:58:b3:8f:1e:6f:4d:9c:f1:
38:d5:40:ea:52:7e:89:71:99:c1:13:9c:29:ce:f8:
e9:7f:af:6b:7d:be:30:5d:61:f5:c1:a7:65:85:95:
61:46:f0:37:98:fa:8f:f8:34:aa:f1:53:17:0e:25:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:56:AD:A7:81:69:C7:0D:83:5C:52:A4:13:20:75:EE:88:0E:5E:06
X509v3 Authority Key Identifier:
keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ae:45:4b:b3:cc:80:99:0c:f6:31:0a:a4:45:ee:75:79:ab:
bc:bf:40:a6:9e:3b:ad:5b:05:71:50:7f:b0:1a:83:89:46:59:
cf:41:0d:24:4b:23:14:7a:7d:e5:f3:56:ea:d9:f8:40:70:38:
c7:1f:e7:67:19:f1:9a:2f:37:f7:8f:0c:c7:35:ec:b8:26:06:
99:81:bc:c4:9f:8c:f0:74:8b:a5:7b:5a:50:48:e7:52:67:ed:
9c:69:b9:d9:64:86:1c:79:c2:33:0b:9b:05:00:37:1d:79:e5:
d8:6f:3e:80:13:8a:8a:91:c9:b4:8e:d8:b2:61:5f:87:5d:2e:
fe:87:47:98:73:a5:9c:17:93:42:ef:88:c2:f8:ed:fd:e3:a0:
ed:0d:28:4d:b3:a5:81:54:49:8a:6b:69:37:11:f6:6c:91:05:
ed:3a:85:18:6c:01:72:5b:51:dc:67:28:c3:cd:b8:fb:a1:29:
b8:11:83:9c:4d:9c:0f:df:1a:44:d1:50:2d:b2:0a:07:08:a6:
19:70:6e:4e:24:eb:4a:07:fc:68:08:81:f7:89:7c:7c:ac:a8:
f4:3e:0a:13:82:0b:7b:c2:38:cc:77:a0:f1:a4:0a:88:60:5b:
59:43:bc:46:eb:80:17:ca:13:12:94:25:a5:2b:2b:e1:56:16:
4f:96:4f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:50 2025 by rpki-client