Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json)
Hash identifier: ksDHbHVuaQdUYlijwyks+yl9kL4GrmRmJDMI+2Ju3EI=
Subject key identifier: D6:60:C9:B6:64:09:79:37:7F:02:E6:AC:E7:3B:5C:B6:1E:7C:55:B2
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial: 048D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
Manifest number: 0479
Signing time: Fri 31 Jan 2025 00:11:25 +0000
Manifest this update: Fri 31 Jan 2025 00:11:25 +0000
Manifest next update: Fri 07 Feb 2025 00:11:25 +0000
Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: ESxwERTlSzLsYTD26kD7+baZEST1qKCbJ6BkynPcH6k=)
2: AB4727F6B07511EFA2A16813C4F9AE02.roa (hash: ytmBw4QfE9tX2ibHqPx80zao3WxHW7bQ2gS1TBDeGxQ=)
3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: 2ILq0YdLX+uDk2zpnZWvB9sk0e06nVHIZcSy04DKJII=)
4: EFFA034837D111EC9337B812C4F9AE02.roa (hash: GRUpCE+gVb2TzuJuLp6/bFNygGmQWG7Yo+BJcqN3ABA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1165 (0x48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Validity
Not Before: Jan 31 00:11:25 2025 GMT
Not After : Feb 7 00:11:25 2025 GMT
Subject: CN=679c152d-260b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:61:35:eb:16:2a:71:c1:a5:89:7f:bd:9f:
79:40:87:98:b3:b5:e7:f3:a3:c0:99:a8:de:3f:d8:
cc:3e:63:35:de:35:ed:96:1d:cf:45:1e:f3:ed:27:
54:58:55:b7:38:d5:61:81:a5:87:fe:1d:64:9e:89:
76:5d:c7:1b:70:d6:69:28:75:8d:25:e0:e8:7e:39:
32:16:14:99:f9:03:69:31:28:b0:64:b0:a0:fa:64:
2c:d4:12:e4:42:e1:a2:87:e6:62:dd:80:f0:be:ae:
76:63:a4:f6:b6:e5:7e:dd:6f:fc:e6:ef:af:4b:94:
8e:ab:8c:18:00:e1:ef:d6:a5:08:56:65:3e:2b:77:
e1:21:68:8e:4f:9a:17:aa:71:7e:f9:c2:32:76:f9:
ef:e1:63:e9:22:5d:84:90:d5:83:cd:f4:85:68:79:
87:b0:77:4e:98:03:c2:09:bd:c9:52:8a:45:e6:82:
4c:f8:39:d9:fa:75:03:22:c1:4c:e4:6b:59:45:7a:
35:67:be:46:fe:c8:26:6b:10:d2:ef:14:68:81:ae:
88:4e:3c:dc:2a:3e:f6:d5:07:c1:98:66:5f:e1:f9:
0f:9c:03:c4:29:67:cb:c5:50:bf:f0:0e:54:70:a8:
06:40:ad:35:c9:9b:8a:9b:6a:78:26:6c:58:c4:0c:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:60:C9:B6:64:09:79:37:7F:02:E6:AC:E7:3B:5C:B6:1E:7C:55:B2
X509v3 Authority Key Identifier:
keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bf:cc:69:69:36:47:a4:d4:fc:be:fb:e3:a2:17:c8:a7:74:
de:4c:e5:b3:f5:35:8f:94:2a:f7:f3:13:25:95:9d:0a:8f:92:
48:26:d1:e5:6e:52:04:9b:8f:1c:12:78:9e:a0:d8:cd:be:26:
40:e1:6b:0d:1d:1d:44:74:d7:78:af:f8:76:69:d1:74:27:c1:
56:38:3c:d7:60:7b:7a:5b:8e:b7:49:ca:62:8a:7a:ef:64:c2:
a8:62:62:c7:57:29:4c:a2:a0:cc:79:7f:94:f7:ac:86:a6:81:
0c:ec:4d:e2:ce:21:59:41:e5:21:45:e9:d0:79:ed:74:aa:f3:
11:ed:d7:58:b0:08:d9:f8:bb:68:1c:40:bd:33:73:aa:eb:bb:
3e:6d:6f:08:ea:d1:bb:70:eb:ba:ff:cc:be:a1:7e:a6:88:ef:
e4:6b:3d:55:eb:93:78:f7:a5:5c:1d:89:61:ed:cd:eb:9a:e2:
59:b8:36:7f:3b:59:1d:b9:8b:2d:b5:7e:a4:5a:dd:ea:71:b9:
4f:75:e6:77:de:56:ab:f6:a4:05:7c:c5:12:2f:c6:1d:44:0b:
b6:1b:e4:c0:1e:a2:f3:93:3b:d8:71:54:0d:20:d0:df:18:ea:
7c:9d:97:22:b3:7d:1b:97:e6:a2:d6:67:cb:bd:42:27:d4:3f:
11:e7:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:21 2025 by rpki-client