Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier: Hsal0yre3QZLAqAdO58Y1B/tAKLODtCeb9fk3J18HEo=
Subject key identifier: 8A:6F:72:5B:41:1E:8E:2C:AE:D2:EF:71:A9:61:5A:DC:33:07:63:12
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial: 02DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number: 02D6
Signing time: Sat 29 Mar 2025 01:38:32 +0000
Manifest this update: Sat 29 Mar 2025 01:38:32 +0000
Manifest next update: Sat 05 Apr 2025 01:38:32 +0000
Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: wFCEov/VDC42zilPm378dum51qZEp2vwKQjgunzNYEM=)
2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: pktrHR+QS/er0s+loh1K6z6/oPCthVtEcSW6fBSWLVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54
Validity
Not Before: Mar 29 01:38:32 2025 GMT
Not After : Apr 5 01:38:32 2025 GMT
Subject: CN=67e74f18-2697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:8c:77:01:64:a8:dd:7d:32:c3:a0:00:33:
97:93:25:2d:32:c6:1c:f9:87:51:fc:d3:26:89:d6:
1e:09:d3:6d:40:16:c4:f1:b1:00:ff:f2:e7:d3:79:
35:47:e7:18:32:8b:a3:39:09:ea:93:7a:fb:43:60:
d7:cc:8d:17:93:4f:dd:1a:0c:17:40:dc:d2:83:ed:
eb:95:45:77:95:c3:af:5c:76:2a:ff:b1:1e:48:73:
5c:e8:61:0d:27:9a:cb:c2:02:5e:6d:7a:fa:fb:a8:
7f:9a:e1:22:32:be:1f:0d:18:c6:b9:2e:71:57:82:
a1:20:f2:4f:70:a0:e7:8f:34:11:42:60:97:c5:23:
aa:39:17:8e:f3:e3:c9:7f:32:a4:5a:6f:b6:fc:78:
f4:a5:a9:e3:4f:9a:57:7e:f1:d3:5a:74:c0:86:47:
28:5e:e1:e0:f8:74:4c:a9:f9:4b:6e:2d:aa:ee:a2:
2f:49:11:b2:a6:cc:34:f1:3a:e8:61:c2:36:2a:28:
81:10:f9:42:3e:df:03:18:1b:1b:c5:fc:e0:72:ff:
67:c8:92:32:1d:ff:b2:b5:bd:66:3c:dc:40:98:74:
cd:aa:b3:83:7a:d4:55:44:ff:6f:5e:29:21:84:4f:
48:26:ee:b6:88:a4:ea:3a:52:d0:4f:3c:9b:5d:59:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6F:72:5B:41:1E:8E:2C:AE:D2:EF:71:A9:61:5A:DC:33:07:63:12
X509v3 Authority Key Identifier:
keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:00:ff:d1:6d:66:3b:40:24:ae:7e:50:1b:3d:fa:94:97:c1:
21:1e:7a:f3:b8:e2:c0:37:dc:7d:fd:40:60:64:c7:11:fd:22:
61:73:c8:32:b7:be:d3:f9:f0:a2:98:85:f2:a4:f1:00:30:1c:
da:88:1c:6c:5b:17:8d:58:23:5d:d1:d4:fd:70:0e:0f:bf:61:
26:27:90:01:6c:8c:65:ed:7a:84:d1:d7:30:1d:aa:68:eb:c5:
57:95:c9:d4:47:02:9e:99:6b:30:12:db:af:6d:7c:5e:8d:6a:
20:1d:3d:0b:b7:93:af:9a:54:d2:37:eb:dc:8b:6b:c3:04:1b:
3a:a1:b5:24:71:89:3f:90:51:40:8b:a7:3e:4d:48:12:a7:2a:
01:7d:32:d9:9c:fc:5d:1b:6f:44:85:69:36:a1:b9:40:5c:af:
3a:c9:cb:fe:3a:69:1c:51:0f:b4:e0:23:ae:02:93:65:e0:b8:
57:b4:63:c5:1b:7b:f6:41:36:0e:3f:af:37:ef:78:92:44:05:
9d:24:e8:51:00:fb:45:be:34:be:b4:ff:93:5e:26:e5:44:4f:
32:36:78:8e:05:f5:4e:8d:93:98:38:81:44:24:16:59:c1:d5:
85:94:58:93:76:49:47:23:5e:30:0b:3a:80:00:5a:30:72:5a:
88:8d:f5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:30 2025 by rpki-client