Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json)
Hash identifier: yHxdes+24tuXWFUWDUQe82mcA3Afs1Lv7pT4J2dRqPM=
Subject key identifier: 84:14:0D:7C:14:6A:8B:0C:00:33:05:69:2F:14:D8:E0:B1:19:75:6C
Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
Manifest number: 015A
Signing time: Fri 31 Jan 2025 04:49:57 +0000
Manifest this update: Fri 31 Jan 2025 04:49:57 +0000
Manifest next update: Fri 07 Feb 2025 04:49:57 +0000
Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: gr1tO6qqiSPdI/j79EagtvmKFzH59qoZtGuXHuK3B20=)
2: 6BCEC330344311EFB7DD0D34C4F9AE02.roa (hash: V5GXfj7MVmj/bsrh8ZK5BOMK+sTslcHA1M5O9HLWM8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Validity
Not Before: Jan 31 04:49:57 2025 GMT
Not After : Feb 7 04:49:57 2025 GMT
Subject: CN=679c5675-3faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:6f:99:3c:47:3f:ef:6b:64:17:f8:de:96:
bc:c3:35:30:4f:f0:c2:2e:03:a1:da:d4:ec:af:f2:
b1:b5:5c:13:fd:15:0f:30:70:f5:6c:4a:c3:ac:cc:
3d:cb:6a:65:fd:5e:59:fe:ce:c1:f0:4c:cc:93:37:
bb:46:e7:bc:83:e9:06:a5:4c:5d:fc:ce:f3:05:6e:
da:e4:a1:27:3a:38:66:08:33:46:7b:3d:49:83:fb:
aa:6b:78:0c:9e:0e:3a:c5:81:92:fa:98:c9:46:1c:
c7:e2:1c:6c:8d:5d:b9:b2:b3:aa:f6:6a:51:c1:a7:
b9:63:bd:d6:6d:05:80:5a:1f:c7:4f:fb:a8:53:80:
0f:e2:6a:38:20:6d:ad:05:50:38:3b:8d:70:01:b7:
18:16:c8:16:c3:4d:84:ef:52:b5:d8:b3:6a:b9:41:
d9:32:b8:75:b5:b2:e1:40:28:64:9e:f5:7e:75:0d:
21:7f:83:a1:94:72:9f:dc:de:a6:e3:25:bb:b1:16:
25:0a:4b:e1:4e:64:a7:23:d0:3f:6c:2c:9e:56:67:
c3:06:9b:18:a1:da:31:c1:42:72:8f:90:0d:2a:03:
fa:c6:d9:a9:ce:c4:0e:b3:4f:2f:71:7d:88:ed:e1:
69:ab:48:a9:99:5f:08:8c:29:6a:b7:1d:88:2f:d0:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:14:0D:7C:14:6A:8B:0C:00:33:05:69:2F:14:D8:E0:B1:19:75:6C
X509v3 Authority Key Identifier:
keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e4:9b:1b:9f:5b:38:fd:8c:2c:54:d4:91:0f:05:15:b6:42:
3c:1e:37:fc:d8:cb:49:7e:68:63:8e:d6:c6:35:bc:f4:90:df:
13:5a:94:43:4c:c6:3c:4c:4b:81:1e:77:ef:7a:de:90:99:dc:
00:db:85:52:15:73:cf:76:cd:c9:a6:fa:b5:b6:39:b5:60:f3:
06:11:5a:27:b6:6c:cf:bf:7d:a0:b8:c0:24:9a:84:f1:35:4c:
60:12:1c:25:a0:4a:94:4e:9a:f6:ef:4a:c5:41:a8:20:57:65:
f0:77:08:e1:74:37:94:ad:88:f6:de:01:7c:08:05:7c:54:18:
93:4e:c0:9e:59:6d:d0:a4:cd:4b:dd:31:56:73:a4:3f:39:71:
7c:af:7f:45:fe:44:8d:55:8a:cc:23:b3:9d:61:9f:92:1a:69:
fc:7b:03:21:28:44:ce:04:a3:08:9a:0a:cf:57:4e:5c:77:63:
24:5c:e0:49:a0:10:09:8d:2c:a8:b6:5b:78:be:91:58:60:df:
73:f0:d1:bd:7c:6d:f5:d0:10:4b:f8:2c:a6:fa:69:5b:04:5b:
3a:56:f7:4e:65:59:42:cc:59:e8:6d:96:7b:81:a7:34:1f:8f:
d4:35:5b:c5:7c:94:35:13:be:c4:89:d9:06:f4:06:93:48:ef:
43:18:be:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:21 2025 by rpki-client