Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
File: hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft (raw, json)
Hash identifier: Z96H/q9W5luFy9FiSjap9M5X+TjXZibPrtlQqsdv4Dc=
Subject key identifier: BF:B4:76:C0:DE:8E:97:90:CE:48:55:7C:56:2A:44:A5:10:92:2B:C7
Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
Manifest number: 0102
Signing time: Fri 31 Jan 2025 04:12:52 +0000
Manifest this update: Fri 31 Jan 2025 04:12:52 +0000
Manifest next update: Fri 07 Feb 2025 04:12:52 +0000
Files and hashes: 1: hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl (hash: CeYVvf6+pcP2g+GpvOG/94vXmDC1Szf+VdKO+D9/+mo=)
2: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (hash: jSX8BBXcDhKRO02h61flDcL9PRKVJzf27mu274wCdhk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Validity
Not Before: Jan 31 04:12:52 2025 GMT
Not After : Feb 7 04:12:52 2025 GMT
Subject: CN=679c4dc4-4ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:0f:f5:17:93:90:47:8b:48:38:37:3d:f2:
b6:f9:3c:ef:fb:bb:a8:32:ea:5e:ec:16:51:f8:cc:
55:c1:a5:ed:d8:88:20:79:af:da:d6:b7:8c:f0:46:
e3:eb:e6:f8:67:69:b0:82:54:3c:0c:ac:a8:86:17:
a2:7a:49:ef:46:17:6e:6e:da:96:85:90:d0:33:16:
ee:ab:6e:ce:be:e1:7a:0d:25:d4:c3:a8:6c:e4:32:
ad:b1:8b:12:75:fb:bd:50:a3:9d:ef:f7:44:aa:41:
7e:d3:74:17:e9:6e:1d:d8:e9:d3:cb:05:d6:e5:38:
5e:e1:69:b6:66:93:b9:60:c0:ee:de:02:1c:a7:b5:
6c:f1:cb:35:ab:bc:3b:05:9a:9e:d5:44:74:c5:06:
a0:d0:13:1d:1d:49:cb:de:08:ae:a6:59:bd:e2:f6:
62:63:64:9a:ff:af:ce:5b:8d:31:d9:a1:ae:55:36:
22:89:20:d6:cd:3e:b8:69:0e:1d:4d:66:92:35:0c:
50:07:12:3e:06:07:39:e8:69:97:6b:4f:25:d0:db:
a4:31:d1:d9:1e:6d:62:f5:d4:4c:15:ab:7e:c3:fe:
1d:0e:b0:0f:db:a5:67:be:a5:0d:4d:cf:d5:b0:f0:
ec:96:6a:ba:3c:fc:f2:58:bf:40:42:ad:cb:14:29:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:76:C0:DE:8E:97:90:CE:48:55:7C:56:2A:44:A5:10:92:2B:C7
X509v3 Authority Key Identifier:
keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:d3:c8:99:cb:ad:4e:0e:36:fa:86:a6:bd:8f:81:54:29:a7:
c1:dd:8a:1c:45:41:fa:77:63:2e:c1:97:a1:d2:e2:75:19:25:
93:c4:ad:0e:e5:4e:e5:ec:f8:e0:7e:0a:6c:6c:d7:0b:65:27:
2c:1d:98:a4:ad:b2:6e:14:62:8e:c8:51:22:1c:48:5b:2a:19:
62:22:11:d4:f5:b2:84:47:59:4e:b0:ac:52:de:81:a0:89:03:
2d:81:fd:d5:3e:57:62:cc:8c:d3:95:12:7c:77:b9:5e:45:9d:
52:ce:86:45:98:ff:32:f1:96:ea:94:51:19:03:dd:96:03:2e:
43:f7:ae:c1:2f:74:b3:8e:83:08:08:e5:a4:b9:d1:2f:62:69:
64:fc:48:5f:72:4b:d3:1f:22:da:14:f3:30:75:67:de:f4:29:
c3:5b:d1:e9:f0:81:02:9d:5a:6d:2a:77:e5:91:6e:c0:3a:18:
25:87:5b:57:70:68:f4:3a:49:87:4b:02:aa:ae:07:f6:13:c5:
0d:eb:3a:c6:7d:bd:31:03:35:d7:d9:fb:79:8c:7e:c6:fb:6d:
39:80:8b:d2:d5:d7:ea:cc:b3:a2:94:4c:be:30:23:38:39:de:
47:31:1e:ee:1c:c8:6c:fd:53:eb:5e:ec:35:e3:24:ee:c2:27:
11:f0:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:39 2025 by rpki-client