Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier: CZhoUDXOnhO+2K+F/62fDcfOaHrnHvjVWSHwd41t2uU=
Subject key identifier: 71:DB:8B:81:C8:B7:27:69:91:80:89:F0:1B:99:04:D7:59:D2:61:AE
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number: 5A
Signing time: Fri 31 Jan 2025 06:11:26 +0000
Manifest this update: Fri 31 Jan 2025 06:11:26 +0000
Manifest next update: Fri 07 Feb 2025 06:11:26 +0000
Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: y1dskFzXs7qe60B1StwyN07uGYSeC2yM2wGda8xJrG4=)
2: 444375E25B9C11EFA181A044C4F9AE02.roa (hash: Yhh6V+gIv+Ld1DK0VM67Fxc3c5mvFHS895j33+/A8nE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Validity
Not Before: Jan 31 06:11:26 2025 GMT
Not After : Feb 7 06:11:26 2025 GMT
Subject: CN=679c698e-4a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:3c:0e:79:c9:b9:68:cf:68:44:ff:9c:9e:
49:a8:56:4f:02:59:0f:86:95:a4:ed:80:c5:11:9e:
03:7b:32:6b:2a:e8:ec:ad:aa:89:3a:a9:61:1c:30:
3d:6f:30:c4:98:73:76:c8:a8:58:1a:76:a9:33:cd:
75:ee:d5:d9:70:51:f5:db:a2:fd:2f:dc:95:27:a3:
dc:8f:08:42:ce:fd:d8:8b:51:71:dd:49:d7:b4:7b:
ab:5c:3d:93:46:89:1c:e4:3d:56:84:48:9f:29:fc:
88:3e:73:a9:39:63:8d:28:c7:d5:f5:4d:4a:f9:7c:
44:33:0b:d4:18:32:b1:65:52:db:44:11:df:4f:fa:
3a:6d:98:b3:db:08:82:f2:90:d7:89:12:03:2a:a6:
6f:47:c0:12:7b:74:41:46:f8:17:78:03:c0:56:a6:
25:bd:b8:39:5e:ab:86:19:9a:7b:89:b8:3a:28:5c:
0d:96:41:87:ed:0b:bb:41:1e:31:6a:07:6c:ab:ed:
3c:ea:6f:e6:b1:39:f3:e5:df:a0:54:66:51:39:74:
e8:a5:5f:0f:ec:e2:2f:77:fa:c2:84:f1:d8:7f:aa:
6d:1f:8f:d6:c6:b7:01:da:8d:ef:61:b9:61:73:bf:
a0:bf:42:7e:2d:06:2d:d5:c1:e5:43:cb:8b:d8:ad:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DB:8B:81:C8:B7:27:69:91:80:89:F0:1B:99:04:D7:59:D2:61:AE
X509v3 Authority Key Identifier:
keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:88:a7:47:22:da:27:20:45:4f:01:16:85:f5:0c:a4:20:73:
06:a6:39:5f:49:d9:6c:5b:c0:fb:fe:84:15:03:90:1c:68:74:
9f:e1:f3:c0:34:61:b2:a0:03:77:3d:10:cb:81:f0:44:7a:80:
08:fe:ef:50:77:00:ac:a1:e0:5b:ff:c6:4e:d4:a3:3e:5d:39:
52:1d:91:9a:88:77:20:44:bc:4d:bf:20:3b:fd:14:42:77:22:
fa:0f:8f:3f:36:a4:28:f5:4e:2b:2b:63:5b:d3:cf:ff:ce:21:
b1:02:93:9a:ba:84:7d:3b:4e:14:4a:bc:c6:d1:d6:64:cc:5b:
a2:80:4b:5d:49:b3:d2:15:a8:9e:eb:42:f8:00:4c:c1:19:8f:
d5:08:18:c6:be:bf:11:04:8d:bb:3b:87:d2:b2:8e:62:a4:84:
53:06:24:dc:f0:c4:77:e7:c2:10:c1:d6:d7:2c:2e:57:8d:a3:
d4:6c:45:d5:a0:5e:61:9e:64:47:48:82:85:52:77:5e:7c:31:
a6:33:8e:b6:1a:02:c0:9f:5e:92:ab:a1:c6:00:10:a7:71:a1:
bb:b9:80:15:e8:81:55:5d:ec:28:55:0a:a4:62:69:e9:7d:6e:
db:b3:d0:9c:ae:6c:c5:52:d0:30:2d:7e:b6:33:e4:c1:a7:7c:
59:66:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:17:58 2025 by rpki-client