Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
File: PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json)
Hash identifier: U3QIel2kVuuCK70kI7w0A2M0QtV5IZD+soIrBPcOqqo=
Subject key identifier: 1A:DD:63:A7:80:7F:E7:AB:85:EB:A6:F3:05:45:26:67:C4:F8:CD:A0
Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Certificate serial: 074E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
Manifest number: 0747
Signing time: Fri 28 Mar 2025 21:56:36 +0000
Manifest this update: Fri 28 Mar 2025 21:56:35 +0000
Manifest next update: Fri 04 Apr 2025 21:56:35 +0000
Files and hashes: 1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: hifRbxqRFsjBZvZNmMnDzVqgtsusCefrYPQOnCFsoKI=)
2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: yZHf3tOWc+sxyzq57J+zRtrh1h68qCw13SKQG5RmD88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AF8E
Validity
Not Before: Mar 28 21:56:35 2025 GMT
Not After : Apr 4 21:56:35 2025 GMT
Subject: CN=67e71b13-292f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:3b:83:c8:d9:e9:31:57:f3:5d:f6:9c:91:
2e:23:5a:30:ae:9d:c0:f2:28:1f:cb:1a:12:35:a9:
47:4e:8a:b4:d0:3b:e6:00:35:07:e1:4e:16:53:27:
c0:dd:8c:06:3f:cc:da:5e:92:ef:e9:1b:9e:e4:d8:
6d:12:70:45:31:26:f1:65:ef:7b:b5:6b:a9:8a:e2:
87:0d:26:de:2d:19:58:b9:b3:62:dd:22:df:41:43:
1b:9f:e9:50:9c:83:c0:5b:2b:a6:27:26:f7:66:6a:
50:dc:ed:01:71:86:91:d9:31:59:38:9a:23:9c:de:
d4:6e:fa:02:03:a6:3c:43:4f:47:94:e2:5c:e7:72:
c2:bb:8f:71:13:98:a4:ce:d4:7c:f4:11:da:4c:a9:
05:04:4b:ef:05:99:99:b4:90:b3:c6:dd:06:74:90:
85:0f:52:e4:4b:89:06:09:0d:9e:44:66:14:5e:c1:
ad:92:09:28:c5:88:90:a6:33:db:56:95:e2:28:ae:
ee:77:5d:aa:29:90:64:90:b4:0f:1d:ac:3b:4d:37:
ef:d8:31:ed:6f:b6:74:b3:df:33:80:a4:31:29:0c:
de:79:48:29:a1:e1:b7:b5:52:ca:8b:05:6f:fb:f4:
92:33:aa:5b:3c:3b:7d:d7:19:22:63:49:fe:3c:e1:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DD:63:A7:80:7F:E7:AB:85:EB:A6:F3:05:45:26:67:C4:F8:CD:A0
X509v3 Authority Key Identifier:
keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:21:ff:26:95:c1:cb:25:e3:1c:c7:b1:97:f6:ea:5d:7b:5c:
63:93:78:64:08:2a:53:50:5c:dc:c6:01:91:a1:19:25:4b:c4:
a8:2b:38:18:bd:20:bf:d2:f1:5e:c8:9c:cb:c8:9a:60:7e:81:
24:c6:9d:38:bb:2d:fe:e0:c6:3e:be:42:68:75:c9:bd:65:70:
73:26:e6:e8:fe:28:eb:9c:74:36:3b:fd:85:44:e1:ae:35:69:
67:49:4f:1e:ad:84:78:b5:c3:53:6a:72:51:62:70:98:53:b8:
59:fd:cf:1f:ed:68:c4:3c:b1:7e:02:b6:ee:74:b9:5d:da:a7:
9d:0c:25:25:5a:65:fc:f2:68:0e:e1:76:71:9c:ac:40:0a:4d:
7a:09:e9:b6:19:55:28:7c:e2:14:04:6c:4b:72:16:c2:6b:df:
82:21:fc:ba:8f:16:df:b7:9b:af:b9:9a:0d:cb:c8:9f:e4:77:
47:18:7c:fa:05:42:89:3b:11:66:b3:97:a8:51:28:f9:36:07:
72:44:16:70:cd:49:f2:30:90:89:43:c7:47:d9:de:f4:a3:83:
b8:38:1c:fe:51:36:d8:d3:39:12:5f:c9:df:74:b5:98:2d:1f:
b5:5c:7b:2f:8d:f4:29:98:59:eb:7d:1e:c5:a3:a4:a3:c9:3e:
a2:96:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:37 2025 by rpki-client