Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json)
Hash identifier: NU/PexI0mpgxEPSxOUjdM2s2HIRcjB0kXb7m3RCmW/o=
Subject key identifier: ED:B5:FD:06:87:21:E1:35:7A:04:CB:F7:39:E6:B4:7F:15:7C:FA:F3
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
Manifest number: 34
Signing time: Fri 31 Jan 2025 06:41:03 +0000
Manifest this update: Fri 31 Jan 2025 06:41:03 +0000
Manifest next update: Fri 07 Feb 2025 06:41:03 +0000
Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: bWEkq8MXJ3s1O6mNEpscup5f2BqGBW4+rQBi2Jvlsk8=)
2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: u4w+Qp27Y9kvTk+tCZ+0s7VTT7TtAcdJXuu92GYJlRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Validity
Not Before: Jan 31 06:41:03 2025 GMT
Not After : Feb 7 06:41:03 2025 GMT
Subject: CN=679c707f-dd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:8d:10:00:59:ba:c3:bd:d7:c7:7b:2d:bb:
97:05:68:e3:b7:d9:50:e5:86:b0:13:34:bb:f6:a5:
d5:ad:8a:b0:fc:45:5e:99:f1:71:ab:50:e6:a6:1c:
bd:45:a0:cf:37:a4:e5:7a:cb:d8:03:67:2d:0d:f5:
89:a3:fc:ee:a8:6f:53:71:2b:e9:78:47:f0:f5:6f:
23:20:15:d3:cf:81:b2:39:04:4c:b6:0c:5a:fb:b1:
34:86:68:cf:90:e2:1e:da:f4:ae:ca:bb:bd:03:df:
43:65:24:cc:3f:aa:d3:cf:12:e5:6b:83:96:aa:6e:
25:1d:0e:40:5e:c6:6e:82:60:66:fe:82:aa:02:4d:
30:51:5c:dc:57:be:08:05:62:38:1b:1b:f4:2f:fc:
7a:af:34:bb:1c:cb:81:3e:1e:ab:f5:da:0b:cc:8a:
69:71:b4:c3:b9:fe:d0:b7:1e:74:42:f2:35:f2:ea:
72:12:fc:ae:28:df:16:cf:79:f9:21:b1:98:ca:68:
b7:5b:57:b5:6c:4f:33:d9:67:7a:b3:2b:00:5d:be:
a4:e4:df:2e:89:85:6f:ec:93:65:fc:d2:39:72:61:
9d:10:67:ca:e7:59:c5:02:95:0c:70:4d:44:06:3f:
dd:71:1f:ee:b7:46:44:42:1e:4d:5c:11:2d:49:0f:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B5:FD:06:87:21:E1:35:7A:04:CB:F7:39:E6:B4:7F:15:7C:FA:F3
X509v3 Authority Key Identifier:
keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:b8:3c:d5:6c:45:8c:d2:6b:27:ab:d1:c9:ff:21:2b:57:05:
eb:96:ff:8b:db:ed:80:1b:6c:5f:91:8b:5b:10:9e:ab:04:e3:
51:e0:40:1c:b5:aa:92:9c:04:3f:81:14:31:cc:8c:64:cd:b4:
ff:50:03:e0:39:9f:b8:96:24:a2:80:72:4c:45:b9:16:87:cc:
69:e9:d7:bc:52:77:15:96:6a:1a:a7:35:39:4b:b4:e0:9f:d6:
82:54:d1:54:13:48:86:e4:8b:8a:65:95:f5:b8:43:ca:07:0a:
b4:85:59:b2:ab:0c:e9:ad:0b:99:8f:14:35:ec:15:c8:fb:5a:
7c:a8:18:5c:32:3d:21:8e:5b:6b:e8:26:da:69:b4:ac:bd:d8:
88:88:82:70:c0:8f:35:69:5e:9c:91:2a:c6:25:a9:36:7d:37:
8d:14:6d:27:07:a4:96:8c:df:34:51:65:fb:02:ba:14:26:81:
26:34:56:0e:00:da:f2:93:09:e8:0b:7a:8b:f9:37:b9:47:c8:
8e:ad:23:a1:07:84:80:6b:76:38:9e:af:f2:28:6a:f5:78:f1:
de:75:48:92:b7:13:f6:74:51:78:7e:ad:23:1f:59:d1:bb:27:
97:98:f9:d7:6e:96:69:9c:03:15:53:59:ed:bf:a9:5f:ea:45:
15:ac:1a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:54 2025 by rpki-client