Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
File: SihlGpSsY59qsTJHTTHrDfzm3Hk.mft (raw, json)
Hash identifier: Pfwv5+JaSVr0KtZxJnJa+gUbAOQnIGMmvDmd8F90oxI=
Subject key identifier: 2D:32:CC:6A:81:2C:BC:98:EF:DF:D6:63:45:77:A6:76:C4:2E:1F:DB
Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
Certificate issuer: /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Certificate serial: 0491
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
Manifest number: 0482
Signing time: Fri 31 Jan 2025 00:05:28 +0000
Manifest this update: Fri 31 Jan 2025 00:05:28 +0000
Manifest next update: Fri 07 Feb 2025 00:05:28 +0000
Files and hashes: 1: SihlGpSsY59qsTJHTTHrDfzm3Hk.crl (hash: YXHRbKA+pOgonYrI9oGPHBkQHceeQ5Xtbr0h+GFCrEQ=)
2: A64296622BAA11EC9618D864C4F9AE02.roa (hash: nHCadaN1Xc+Cwq5DpcBPhTIrPdhEpzVlr5N0hOLv0SY=)
3: C420EBE06EC911EC8A5A940AC4F9AE02.roa (hash: 7M33YTa8Ps11HunXEcyKgTV4o/04RKVc8VqGhI0g1ng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1169 (0x491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Validity
Not Before: Jan 31 00:05:28 2025 GMT
Not After : Feb 7 00:05:28 2025 GMT
Subject: CN=679c13c8-b08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:2d:cc:a1:5f:6e:b6:e5:c9:31:bd:3c:f5:
3d:fe:4d:af:5f:ce:40:be:97:de:72:ff:8b:2b:75:
ae:1a:7b:7c:45:43:2a:5d:71:d8:9c:5d:69:e5:26:
d8:b2:81:38:a5:2d:86:51:0e:88:30:5f:a0:c8:12:
cb:c8:ee:7a:e5:3e:d9:5b:12:d0:a6:bf:e5:c3:69:
e8:5d:cd:49:7f:40:4f:f4:cd:4e:ad:48:52:e2:02:
99:1c:3c:dd:0a:2d:3d:ad:fe:2f:60:8d:59:38:a5:
ef:30:40:df:c7:05:0b:cb:64:4a:d0:8c:10:0b:5c:
0c:05:4a:8e:af:bd:23:35:49:2a:c6:0c:83:13:ca:
9d:b3:9d:43:4f:be:a6:60:c7:23:64:2c:7f:b9:58:
b4:26:7b:31:88:80:0e:94:57:da:64:d6:cb:b6:53:
56:8c:ae:b9:06:89:02:c5:00:e3:fe:c2:f6:2b:8a:
10:eb:b7:b5:22:fd:1d:c4:5b:58:f8:72:af:4d:bb:
7f:69:3f:67:e1:76:e0:18:cb:e8:17:9f:be:d8:3b:
8d:c6:20:a1:2d:b1:ee:a5:9b:68:2d:19:63:26:34:
3b:b3:a3:a4:75:2b:10:c8:8f:44:19:0c:27:65:b2:
90:66:b4:2d:3c:97:a9:b7:ea:1a:83:93:33:ad:55:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:32:CC:6A:81:2C:BC:98:EF:DF:D6:63:45:77:A6:76:C4:2E:1F:DB
X509v3 Authority Key Identifier:
keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:e4:cb:76:e3:96:35:dc:17:de:1d:2a:14:f7:1e:68:b3:ac:
ae:f4:ed:47:45:53:22:f7:72:e1:e2:79:59:b1:52:f0:e1:4f:
4e:2b:8a:f1:d4:b4:f3:e5:7d:0b:12:95:28:06:4f:71:c1:c4:
66:64:16:bd:d3:c4:d7:0b:3a:f1:44:b4:0a:78:32:a5:76:3d:
a8:b3:a2:5b:29:30:08:5c:0e:31:59:0c:e5:46:99:ec:83:63:
87:9f:12:ad:75:8c:da:ac:69:8e:72:af:33:9f:84:6b:f4:7f:
d4:42:6b:36:d5:1e:ed:5f:ac:03:2d:41:a0:d3:65:28:14:94:
8c:f5:7e:57:8b:7c:57:08:ca:79:94:9c:fe:22:34:f5:ea:f1:
d5:5c:7c:58:7d:64:89:6f:4d:df:84:df:b4:52:fc:c0:0a:5d:
e4:02:1c:13:e5:53:e0:75:cf:10:7d:7c:9d:e7:5c:82:ab:5f:
cb:53:d9:e5:a9:ae:c1:b4:69:bc:52:2b:4f:15:6a:96:ec:4d:
ae:eb:26:dc:7b:97:b7:a2:31:7b:4a:f1:d5:6d:d0:71:30:00:
d1:c9:dd:b5:a4:2e:b2:3d:9b:59:ed:7f:bb:dc:1d:ef:a7:9b:
e0:8a:1c:60:a9:94:92:7c:d0:be:f8:25:73:bf:90:c1:84:49:
ed:d9:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:35:48 2025 by rpki-client