Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.mft
File: P8lxKSzpGlkajN-n0a4JykbgPoc.mft (raw, json)
Hash identifier: AIVyPQDqn0wbRFqEgm9/YaNlm5yot6ro5utqpi6XnEo=
Subject key identifier: C5:9E:BE:AD:88:1D:58:09:0E:1E:61:FC:87:AA:D5:ED:56:DF:76:20
Authority key identifier: 3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87
Certificate issuer: /CN=A9171634/serialNumber=3FC971292CE91A591A8CDFA7D1AE09CA46E03E87
Certificate serial: 34C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.mft
Manifest number: 349B
Signing time: Tue 22 Apr 2025 14:44:15 +0000
Manifest this update: Tue 22 Apr 2025 14:44:14 +0000
Manifest next update: Tue 29 Apr 2025 14:44:14 +0000
Files and hashes: 1: P8lxKSzpGlkajN-n0a4JykbgPoc.crl (hash: 1OizBZHE9Jy59EXjYe4RUMNV20MazFFKya6dlw9fORs=)
2: 727368486F1F11EDA34CF049C4F9AE02.roa (hash: NZbs45t8XXl/tBdxXy7mih7R8Y+MNfTCo2/0Q6D+AY8=)
3: 28B45FE86AF411EDB328EF4BC4F9AE02.roa (hash: YOeMT2ch94llljjtSxDRfpwVxGJgR5Hy6UG9iTs2yno=)
4: 989ED314FDCB11EDA52DCB45C4F9AE02.roa (hash: 7Gr5+LKQZg71Xe7aRTwT76gb+Vnjm/TSiDDJs1rwm1o=)
5: AFA4CF3E606F11EFB9FCCC59C4F9AE02.roa (hash: LFZEMiEZWVGVhw073oJZ6a3acteubVePOhbEcX4Y/2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13513 (0x34c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171634, serialNumber=3FC971292CE91A591A8CDFA7D1AE09CA46E03E87
Validity
Not Before: Apr 22 14:44:14 2025 GMT
Not After : Apr 29 14:44:14 2025 GMT
Subject: CN=6807ab3e-e69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:bc:43:f0:24:03:8f:d7:e2:d8:f7:76:7f:
75:91:da:4f:82:1d:1d:39:8e:66:24:66:25:0e:4e:
97:37:e9:ab:0a:57:4b:3c:f3:6d:c8:5c:6b:92:c5:
3d:ba:83:05:59:b5:02:37:3d:cd:74:ec:0f:41:f6:
cd:ac:2e:84:3c:5d:f7:93:ad:9a:34:73:b4:a4:6b:
25:f2:01:ae:60:e7:bf:e7:f4:2f:23:13:96:4b:26:
5a:ef:fd:b4:03:3e:ab:a6:1a:8a:96:b0:95:6b:e8:
81:a1:7b:9c:a3:a6:a0:80:44:3b:b8:20:5a:8c:07:
47:4c:f0:82:fc:2e:81:e0:44:db:f5:3b:7b:17:43:
1c:7d:c7:2c:19:5d:05:0c:1e:d8:62:53:75:64:64:
6a:29:f7:cd:3b:af:6d:a9:3d:65:a8:e7:35:4c:9a:
87:88:b7:fa:0a:bb:e1:a7:6b:a1:69:ab:e7:11:dc:
45:26:52:e3:78:ae:6e:89:5c:cf:67:a2:f5:0d:b4:
07:5e:4f:78:77:eb:d3:af:55:b4:5a:0a:b0:fa:9a:
30:0c:06:6a:8d:19:e8:40:b5:01:93:9d:e8:93:f4:
1c:9a:4a:f0:71:94:eb:cf:8d:45:b8:bb:0a:a7:5b:
b4:8e:ba:33:f3:2f:e4:5b:cb:90:5c:50:43:12:0d:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:BE:AD:88:1D:58:09:0E:1E:61:FC:87:AA:D5:ED:56:DF:76:20
X509v3 Authority Key Identifier:
keyid:3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:3d:32:2c:f2:ff:59:43:70:12:33:29:23:d9:76:a5:5c:83:
d1:f9:ff:e7:20:68:ac:b4:ac:f1:c5:ff:74:48:28:fe:31:cc:
28:4e:4e:9d:3c:e4:27:64:a0:c9:bd:a6:7f:dd:b1:95:b1:8b:
69:8e:0e:a7:ab:99:f2:fc:34:ed:b2:72:76:c1:34:b7:c7:73:
d9:2f:a3:45:09:4d:46:b9:45:a0:4a:ed:24:15:40:92:cb:b2:
bd:ba:0c:45:f2:81:b2:06:62:c0:ce:76:aa:30:f2:92:72:5a:
dc:f1:9f:13:a4:a4:ec:e4:e7:a2:7b:6c:21:4c:1b:d0:fa:d4:
ff:d0:9e:f2:20:e4:cf:91:87:77:f3:fc:cf:21:57:db:26:78:
1c:90:d7:31:af:9e:0d:89:9b:38:7c:e5:05:e3:2f:64:c4:fa:
39:49:d8:e8:4c:bc:26:bd:aa:e0:ff:74:16:94:19:db:b5:dd:
24:a7:b5:c4:b9:6e:32:5d:ac:03:df:2b:91:8d:6a:8d:58:86:
cc:a3:a7:41:33:7f:ec:32:d7:75:03:df:0a:30:fb:21:02:99:
50:b1:6c:5c:4a:7a:08:0f:d5:74:3a:13:7c:93:f0:38:3f:2b:
8c:3e:b9:71:b1:2b:ef:33:26:e7:1d:fe:b4:3d:bd:a0:59:a6:
88:55:ad:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:03:00 2025 by rpki-client