Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
File: h19AAhxtQ7BO_olKf8FcxPbtibo.mft (raw, json)
Hash identifier: BujU/KUROXx4lv05bQCvHJDqx2YjUpQBjGfb9qp1nC0=
Subject key identifier: 91:C5:DB:F6:12:13:9C:3F:C6:57:AB:21:7D:64:4D:44:0A:4C:FB:8D
Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
Certificate issuer: /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Certificate serial: 179C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
Manifest number: 1787
Signing time: Fri 31 Jan 2025 16:35:55 +0000
Manifest this update: Fri 31 Jan 2025 16:35:54 +0000
Manifest next update: Fri 07 Feb 2025 16:35:54 +0000
Files and hashes: 1: h19AAhxtQ7BO_olKf8FcxPbtibo.crl (hash: A0kgwSfCT6QbvsQVU9zqS+23ALyNqLu/s8QYFDzXNOg=)
2: A652A68C3DB911EFACDF8C75C4F9AE02.roa (hash: ylqBtHy0eesAkNcudeyr+HsibshKCdGJo3H45pU2XI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6044 (0x179c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Validity
Not Before: Jan 31 16:35:54 2025 GMT
Not After : Feb 7 16:35:54 2025 GMT
Subject: CN=679cfbea-faf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:69:a6:b8:03:a7:4d:e3:47:3a:98:51:b1:
0e:4f:c8:60:11:00:0b:1d:9d:40:a9:6e:fb:67:8f:
66:dd:79:05:75:99:ee:e2:be:b7:ed:b8:ca:a8:bb:
9a:1b:17:5a:77:ad:bd:62:f8:0b:b8:d7:f9:5a:c9:
cf:26:d8:d0:3b:4b:b1:30:05:75:2c:e8:a7:de:8b:
c0:9b:36:63:5c:d9:3b:47:80:ba:85:2b:7d:03:7b:
a3:c2:4f:23:45:0f:0d:e8:1f:fb:de:69:58:3d:c8:
a6:ca:51:b2:21:06:6e:70:94:35:08:e2:c0:dd:7f:
e0:e3:ef:40:29:16:3c:16:02:4b:8b:f4:54:32:c7:
32:c1:db:82:09:cb:10:00:52:7a:ef:85:91:a6:dc:
9e:61:9c:8d:ba:ac:24:4c:6c:8e:ac:93:88:84:0a:
34:96:5a:ca:8c:cc:ad:04:43:60:c4:4d:b1:e5:59:
0f:4d:02:34:ec:0a:96:1e:d4:36:27:0c:2a:9e:fb:
c1:c5:cd:fd:bd:6e:45:68:3d:36:d0:02:46:d4:f7:
ec:00:4c:06:b2:13:a3:b6:99:8c:8d:27:b7:0a:b7:
38:f1:b5:42:fc:bb:ba:8d:2f:e2:61:45:28:f2:e1:
a1:8f:ab:03:be:11:d3:21:e9:85:b9:b6:94:8a:81:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C5:DB:F6:12:13:9C:3F:C6:57:AB:21:7D:64:4D:44:0A:4C:FB:8D
X509v3 Authority Key Identifier:
keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7c:81:e0:da:d9:f1:3d:e7:40:ff:86:11:3e:f1:45:a9:50:
b0:0e:06:89:bf:dd:99:c0:73:1c:57:50:a4:2b:fa:16:4f:13:
c0:cd:e9:c6:ac:92:06:ae:cf:a9:26:7c:c1:f4:f3:24:2d:05:
45:fd:ed:57:f9:ed:8c:c3:49:20:ff:cf:54:ef:8a:b6:59:45:
3c:70:df:e8:fb:3d:de:af:49:85:04:5a:2e:12:5e:96:fb:78:
05:a8:45:20:53:aa:6e:e3:4b:52:49:4c:88:20:0a:27:4b:88:
3d:0d:6c:1a:de:af:4d:e8:8c:57:a3:d1:a0:02:8a:40:3a:89:
8a:a4:21:37:aa:91:3a:ac:6c:6a:ad:94:c9:38:af:1d:81:fe:
44:67:16:ae:4a:c4:6e:66:04:5b:ea:a8:0e:62:4e:a1:33:d7:
cb:43:ee:d2:29:c6:af:66:a4:48:d3:f5:b3:92:b6:a0:4b:6c:
9d:35:45:08:1f:d8:ee:70:ec:fd:f5:5d:33:b3:cf:2d:90:21:
a7:d0:3f:7f:a8:71:be:67:60:8e:79:d7:7d:ae:60:e0:21:df:
61:45:b6:5e:09:cf:d4:b0:fe:5d:7a:69:10:69:d5:10:a7:6e:
0c:93:89:e6:98:f0:bf:49:5b:5b:37:34:a7:0c:5a:d2:fa:d0:
e5:30:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:20 2025 by rpki-client