Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json)
Hash identifier: 8/qVPvbS1tJNjwU3ht0+mRhCIKn1WXU6+YryaLtKYfE=
Subject key identifier: C5:1E:9D:6A:75:19:B7:07:B3:9E:37:86:84:8F:A4:30:E3:36:7B:01
Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14
Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
Certificate serial: 132C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
Manifest number: 1322
Signing time: Fri 28 Mar 2025 17:08:33 +0000
Manifest this update: Fri 28 Mar 2025 17:08:32 +0000
Manifest next update: Fri 04 Apr 2025 17:08:32 +0000
Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: XFN1cMVrYm2fjirTL2PonRL3uostSeV05isghmE+/so=)
2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: vl7ru7jGeXouITslQ3P7oElUqX5fMm8OE7sy4pQtZjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4908 (0x132c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A92FE
Validity
Not Before: Mar 28 17:08:32 2025 GMT
Not After : Apr 4 17:08:32 2025 GMT
Subject: CN=67e6d791-1c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:54:09:9b:aa:4c:0d:0c:5e:cf:97:58:67:90:
e5:58:f2:f0:f1:b5:2f:6b:6e:13:51:02:86:d8:f3:
d4:4e:45:68:07:cd:5f:03:0b:9e:29:c9:64:7a:fb:
e2:5d:06:e9:3f:2b:ab:10:06:2e:e8:ab:5a:c3:01:
6d:c6:e1:51:09:c2:c4:79:34:b8:86:a1:6a:0b:0c:
bb:61:1e:c4:df:9b:de:f9:50:d8:33:c8:e8:e5:41:
05:73:9d:3e:6e:24:5e:7d:3a:57:91:b5:91:3a:3d:
cd:8d:79:91:68:77:a1:9d:5a:b5:95:c7:5a:c5:b2:
6f:98:af:06:1f:f1:84:28:8a:52:4b:17:5f:d5:1f:
5a:ea:3d:40:0f:d6:91:fc:5d:bc:b6:c3:5e:cf:71:
04:f2:88:4e:61:50:22:5b:88:a6:b7:cb:73:a4:db:
14:20:eb:14:13:53:a1:37:d7:a0:79:8b:69:d2:9a:
21:ba:46:22:fa:33:08:5e:84:56:4e:ec:12:df:85:
7a:d3:73:21:41:ea:21:da:50:e2:9b:70:16:1f:3b:
5e:f3:b4:85:64:f2:ff:bf:b9:b6:57:8b:cb:64:1c:
cb:d9:fc:15:16:1f:13:14:e8:88:cf:e0:eb:78:fd:
c5:68:6c:c0:8f:49:04:25:8e:a0:db:1b:b6:c5:df:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1E:9D:6A:75:19:B7:07:B3:9E:37:86:84:8F:A4:30:E3:36:7B:01
X509v3 Authority Key Identifier:
keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:2e:0c:c7:44:16:4f:20:81:7c:af:4a:8c:2d:71:96:29:9e:
a1:76:f8:08:37:52:8d:aa:3f:42:2b:35:05:b6:8f:4a:d8:3c:
a7:af:8c:2f:cb:2e:cc:86:aa:56:ca:85:ce:3c:bf:05:ae:4a:
7e:0e:25:ad:7a:a7:4d:fe:15:ef:e5:33:bb:f4:a9:e3:fc:82:
14:dc:8b:d6:41:2e:0a:29:86:43:01:c5:91:60:32:6a:d2:c0:
aa:65:36:fd:e0:e9:27:fd:fe:73:1a:72:66:78:9c:44:cb:75:
e0:ae:de:a0:fe:ea:3c:65:15:19:e8:49:f6:01:e4:ad:08:87:
31:8b:51:c5:55:be:c9:02:4e:7a:00:c2:9e:73:87:02:61:67:
00:c5:66:36:67:03:3a:5d:04:b8:d3:96:73:54:09:22:41:f6:
b1:24:d3:1d:e5:e3:ed:a4:59:11:36:40:d3:1c:01:db:d3:d4:
18:e0:ce:d2:55:f7:ee:28:43:77:53:19:a2:be:f2:ef:94:8b:
d0:85:e0:f3:20:8d:4d:b7:b9:b0:68:e1:b0:20:ce:9f:e0:40:
74:da:80:d7:31:dc:35:f6:90:aa:5c:73:98:a5:4d:8e:0c:5f:
45:7f:98:8f:a1:5a:ef:3c:26:45:1a:c2:f1:b3:05:27:9e:1b:
c1:63:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:19 2025 by rpki-client