Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
File: pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft (raw, json)
Hash identifier: 3GMJaNfq0J2OZZiCd93il8Jsk7MR/FoRYRYTv6RhLKA=
Subject key identifier: B4:89:E1:FB:E4:CC:23:DF:AA:C5:33:AA:46:93:E3:28:48:00:DB:E6
Authority key identifier: A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
Certificate issuer: /CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Certificate serial: 013F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
Manifest number: 013A
Signing time: Fri 31 Jan 2025 03:35:33 +0000
Manifest this update: Fri 31 Jan 2025 03:35:33 +0000
Manifest next update: Fri 07 Feb 2025 03:35:33 +0000
Files and hashes: 1: pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl (hash: ekPgxE2KEB1y3KtKv0v3omnSXUXpIFvOn+8GWq2j8VE=)
2: C5CD32AAE5DC11EE867C6F21C4F9AE02.roa (hash: 4AIgr5Ud5ti0oSHDBktujDNDac4fUeyWdMEfk5EvX6c=)
3: C6AA9D48E5DC11EE867C6F21C4F9AE02.roa (hash: rXva0zw9zpysL9/iIPRFRWMSmLFREnrMEPdU1Wc84aQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Validity
Not Before: Jan 31 03:35:33 2025 GMT
Not After : Feb 7 03:35:33 2025 GMT
Subject: CN=679c4505-b246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:d8:cc:84:68:59:1b:81:95:79:df:41:bd:
91:7a:8c:c4:84:ee:f7:e9:d0:83:3e:25:cf:a5:ae:
e9:18:f9:ec:66:54:32:7d:43:01:f9:56:b4:d3:dd:
dd:a4:f8:6e:fc:df:50:ad:e8:e8:ed:2c:99:d5:45:
c8:20:5b:a3:16:8c:5c:c2:7c:a0:ac:0d:e0:48:7d:
25:32:ed:d3:ba:5d:67:25:b3:6e:45:21:7d:4a:3a:
ca:fa:d5:cf:a8:8e:da:79:4a:21:81:ca:f1:89:fa:
55:76:54:e4:ff:2a:f6:9a:bc:5d:35:e9:62:f2:67:
48:1a:45:97:2f:f4:d2:a2:d5:17:3d:69:9a:63:bf:
8c:90:8c:14:ed:3e:a0:e3:4f:f6:7d:39:b7:8d:7a:
7d:aa:14:fa:2c:97:41:e8:a6:1a:62:24:16:a9:ba:
21:2c:d8:03:ab:42:db:dd:b7:9a:1c:5a:34:85:dd:
b5:dd:8b:32:c3:c5:39:43:34:5b:aa:b0:48:24:18:
97:c0:6f:a7:9b:e4:e9:35:d6:47:b3:fa:48:9f:fa:
cd:6e:90:bd:ff:67:15:37:e5:cf:d6:b6:e2:42:c3:
35:28:1b:0a:aa:3b:63:b3:66:4e:4f:c1:59:eb:14:
d1:a1:70:41:8b:24:a0:22:0a:b2:43:65:d1:af:cc:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:89:E1:FB:E4:CC:23:DF:AA:C5:33:AA:46:93:E3:28:48:00:DB:E6
X509v3 Authority Key Identifier:
keyid:A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:a8:82:42:76:33:1b:71:df:30:63:31:48:32:8f:eb:a3:20:
dd:0b:b2:fc:49:59:3e:8b:13:08:8c:5c:a2:ba:d8:14:d9:04:
19:84:7d:e0:e0:3d:03:4f:a8:c4:6e:87:dd:11:33:fd:27:62:
46:84:e9:2a:df:69:f9:e0:48:b6:ca:e7:68:63:c7:f7:ce:6d:
5b:84:a8:97:8e:bc:87:5b:48:4d:8e:16:e7:63:52:9a:ce:0b:
da:92:15:bc:17:ab:63:9f:b5:6c:09:d9:04:d7:17:4e:03:82:
2b:29:9a:91:be:1b:72:6c:9e:08:3f:cb:06:e1:8a:91:f3:6e:
68:b4:a7:a4:08:16:0e:27:30:ae:11:8b:ce:6e:3f:e8:99:d8:
0a:d4:c7:50:e4:87:a8:b7:b9:15:a5:2c:87:18:c4:35:be:c0:
16:d9:3b:14:ce:e2:2b:d8:69:c2:2b:71:77:22:0d:94:f3:f8:
52:5b:0e:6d:a6:3c:96:77:47:92:ed:33:cf:18:61:f1:80:cb:
ee:f7:c1:3e:0d:b0:bf:8f:e5:b0:a2:54:6d:15:6c:50:64:86:
ab:89:ea:9e:6e:58:fa:48:14:9c:3c:5b:fb:ee:4b:1e:36:2c:
bd:a4:cc:89:88:81:86:c2:5c:85:17:06:af:6d:de:b0:53:bc:
5a:0e:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:33:55 2025 by rpki-client