Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
File: H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json)
Hash identifier: Mws1HKQQmOSEAey5vPyR5iUQxEUEaNOMTPfy+c7mVlw=
Subject key identifier: 88:B8:6D:C5:E1:8C:D2:D1:FA:39:42:3F:1C:C3:A1:64:B3:EE:EA:92
Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Certificate serial: 0581
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
Manifest number: 057C
Signing time: Thu 30 Jan 2025 23:18:28 +0000
Manifest this update: Thu 30 Jan 2025 23:18:27 +0000
Manifest next update: Thu 06 Feb 2025 23:18:27 +0000
Files and hashes: 1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: 5MGSuQmc0FazUfn/rmF9l5QxGP9FuEbZEaHKtzuXHwQ=)
2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: E/ZSFb0w8l7IP55HohiEiKQ/xTqSgiZ1I0q7vfGX9Y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1409 (0x581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Validity
Not Before: Jan 30 23:18:27 2025 GMT
Not After : Feb 6 23:18:27 2025 GMT
Subject: CN=679c08c4-790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:95:9a:75:30:b5:6c:65:7a:f0:bb:61:0f:
49:b1:92:96:1d:da:b3:aa:4f:7b:9e:98:17:49:37:
f8:80:4f:0a:9d:61:be:f0:96:7f:ba:78:81:fe:2c:
41:e9:0d:34:96:86:28:64:39:c5:d4:4e:43:2c:53:
f7:ee:34:d7:29:ff:00:90:11:d3:72:20:a6:0d:7d:
47:2a:1c:26:ad:2c:ca:40:48:f4:54:65:da:28:d4:
5b:ef:18:27:1d:e3:e3:2b:d9:53:a3:90:37:5b:7e:
45:72:40:21:75:79:c4:f9:a6:97:b7:96:63:10:6b:
3d:fc:51:08:87:75:19:c3:ac:12:72:8d:76:26:96:
47:34:70:b6:8f:14:1d:25:71:75:e9:1a:71:fd:56:
f5:ec:2b:4b:af:38:f1:71:ab:4b:29:7f:bf:77:80:
54:28:15:dc:63:52:9c:03:6c:f9:b9:66:6f:df:32:
1d:d6:e0:b1:6b:74:a9:cf:de:e1:92:31:68:2f:60:
42:7a:fd:84:9d:ce:c1:a1:1f:9f:b6:56:5d:3b:c1:
58:d2:72:c2:bf:62:1a:5e:0e:02:54:7b:a0:3d:82:
31:8b:41:5e:db:9a:1e:9c:96:c9:ef:56:c6:03:15:
6e:a3:d1:ca:d6:59:54:48:99:33:3a:36:6b:90:07:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:6D:C5:E1:8C:D2:D1:FA:39:42:3F:1C:C3:A1:64:B3:EE:EA:92
X509v3 Authority Key Identifier:
keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:87:a5:e2:39:3f:6a:9b:dc:f1:f9:73:d4:62:fe:ed:e9:ff:
5f:eb:e7:00:98:77:5c:20:f2:62:67:79:c3:2f:02:1e:5f:77:
f3:37:eb:43:7f:f9:b2:e6:db:c3:ce:a4:4a:99:e1:e3:9c:8c:
c2:97:5b:15:bd:59:d4:1f:4c:ae:86:be:69:ed:c2:b8:f5:c6:
32:ab:64:e1:56:53:62:c7:4c:65:7a:31:e6:f7:8f:0d:47:4f:
42:9a:05:ba:5a:96:d3:54:15:1e:2c:9d:be:b6:1d:f7:fa:3a:
b1:f7:8a:ba:15:d0:ee:2d:8a:6e:a3:b0:42:de:62:f0:42:6b:
24:d3:00:02:e1:01:95:99:e3:c2:ed:bf:dc:27:7c:ba:f9:65:
95:31:2a:35:78:b7:3e:ae:22:d5:cf:29:47:d2:bd:7a:00:09:
6e:8f:68:eb:65:bb:ff:08:35:92:e6:28:60:2a:25:b3:be:e8:
bc:e2:42:8a:93:42:23:79:63:10:bc:77:49:42:98:0e:6a:09:
3f:7c:02:32:5d:97:e1:76:46:5f:b0:94:1b:a4:cd:3a:ec:4e:
90:86:da:b4:4b:ba:b4:22:ac:dd:e4:25:78:a4:58:fd:53:74:
2d:da:e4:4b:ee:cd:dc:da:71:a8:6e:f3:a6:2e:10:06:8d:00:
7c:65:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:52 2025 by rpki-client