Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier: 0d1a/ozwVTK135EzS2uiUA43ODV5zwycqKBJn+xwBO4=
Subject key identifier: 7A:58:AE:AA:57:D7:ED:1C:30:09:2D:F6:E6:5C:C8:FF:C4:65:30:ED
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 05DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number: 05BC
Signing time: Thu 30 Jan 2025 23:06:15 +0000
Manifest this update: Thu 30 Jan 2025 23:06:15 +0000
Manifest next update: Thu 06 Feb 2025 23:06:15 +0000
Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: wEhQEcGHMROjAQnHUG37jQtW7BiiG/m+tC2nhDAifDs=)
2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: pMCjO+dEpym8WZT6FFXX0BN+eJ9YjqXuqC09C9kAxVs=)
3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: hc4+KqIoRZD4XQ5nNQcHzKLPhAv34gWPnKJZSG2cyV8=)
4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: l9h/YYAjGjlzLvWP6nij0KuGfxuDVqvEm3iy7SoOZcE=)
5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: 3RUylNRBzlhM6wNTSM7RbhRXATKVFjngYSNzKv1ez60=)
6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: BlXgUYLAQgGHTY4XpWyfRou2YPtS9beWJgAM39FVJwE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1498 (0x5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Jan 30 23:06:15 2025 GMT
Not After : Feb 6 23:06:15 2025 GMT
Subject: CN=679c05e7-0c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:26:e7:0a:9c:9c:82:35:c7:91:10:22:7c:
76:69:95:d5:76:e6:0e:e7:3e:ac:bb:aa:36:04:6b:
14:99:47:79:8f:be:d6:d5:03:45:45:25:a9:07:1b:
7e:38:b6:e4:54:3f:0b:30:2c:60:31:cd:66:7c:a0:
61:2e:d9:9a:6d:dd:b1:d8:17:93:bc:6d:2d:f4:aa:
c3:6d:ef:d5:98:3d:00:9d:7c:dc:a9:fa:25:fe:46:
e2:cf:58:81:af:64:9d:1f:a8:e6:ab:9a:38:20:16:
af:08:33:51:d9:47:25:7d:28:82:68:86:a0:5f:d5:
19:91:4a:af:3c:12:19:88:0c:8b:da:a4:3f:5a:14:
a5:ac:72:50:3d:cc:4d:00:5b:3f:e2:e5:cf:ad:bd:
e0:a8:c6:49:1a:cc:c5:2f:58:ae:78:84:3f:ec:1b:
4b:4a:5d:35:cd:92:6f:1f:73:9c:ea:cc:a1:66:c2:
06:73:88:4f:65:de:d0:1b:b4:bf:69:ce:ce:ea:6f:
c6:0e:3b:60:fe:c4:86:ff:9c:40:4f:d5:3c:ce:f0:
09:19:98:2f:d0:42:35:ae:d3:bb:b3:0c:25:13:84:
7e:ae:56:3e:dd:1f:38:31:75:3b:f8:c7:fd:52:dc:
7f:e3:06:f6:a8:ca:27:11:89:c6:a2:7d:d6:1c:e6:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:58:AE:AA:57:D7:ED:1C:30:09:2D:F6:E6:5C:C8:FF:C4:65:30:ED
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ab:d3:d7:b6:36:ca:ca:b7:66:f4:97:76:f2:27:7f:bd:d8:
4d:8a:a5:52:59:34:53:3b:db:fb:f6:56:0b:c3:8a:a6:69:3b:
69:46:ef:38:d6:56:74:84:e1:b1:97:d5:ee:08:99:0a:41:64:
86:93:a3:93:2d:84:b5:69:b3:5c:68:ac:45:cd:26:a3:81:3c:
6f:8f:17:91:78:9a:af:04:61:88:73:09:1c:c6:18:b0:25:a9:
f3:b5:38:fe:52:d5:7c:b6:26:05:22:a8:2b:73:89:74:b5:e6:
2b:73:6e:b0:c1:96:1c:ce:90:76:12:42:bd:ce:ca:79:38:10:
60:57:e6:f8:de:6b:5a:8b:9c:9b:60:bd:ed:3c:c0:12:f3:90:
4b:24:21:4f:4b:e3:66:70:40:7e:7a:99:64:4a:82:53:10:0c:
ac:b6:c0:84:dd:53:c9:70:3f:e0:90:ce:50:13:e3:44:fc:e4:
46:5b:cb:a8:b2:89:e0:ec:1c:33:72:11:55:7d:eb:8d:4a:87:
a8:a2:b1:47:22:4f:3f:84:bd:42:09:2f:b9:eb:eb:39:cf:3e:
3b:b8:83:8f:bc:be:3f:f1:c2:47:89:22:e9:fe:02:7c:50:87:
39:85:b1:a7:40:20:72:63:d5:ed:bf:05:ea:dd:3a:aa:94:84:
6c:69:15:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:22 2025 by rpki-client