Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json)
Hash identifier: 9YXVYDNLgXh3eYy6YzraWM1n/nGziQwD5MEiS6xoyB4=
Subject key identifier: 0F:D9:8C:A2:D1:6E:01:DA:D6:5E:29:24:8F:DF:2D:0B:09:54:A6:97
Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8
Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
Certificate serial: 0631
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
Manifest number: 062C
Signing time: Thu 30 Jan 2025 22:38:16 +0000
Manifest this update: Thu 30 Jan 2025 22:38:16 +0000
Manifest next update: Thu 06 Feb 2025 22:38:16 +0000
Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: v9lJgfgCFf/fYYmQO+Q5FNG7F+h/Gcal/hnX4SHrZ3Y=)
2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: bzwAo1vTwZtUvpqV0SE31TfJe7tyOs8AEfKtkNJnl48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
Validity
Not Before: Jan 30 22:38:16 2025 GMT
Not After : Feb 6 22:38:16 2025 GMT
Subject: CN=679bff58-8ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:cb:ea:55:bc:49:c2:00:67:3c:7a:55:9f:
cf:5d:f2:d8:dc:d8:d0:bb:2a:2a:9d:16:df:c6:6d:
1f:0e:3f:ec:01:14:6c:47:f1:f2:22:e9:6a:50:c2:
c8:61:e1:05:95:53:0e:27:d4:d3:e8:12:f1:ad:2d:
36:c1:bb:74:e6:76:63:04:57:e6:f3:77:81:a2:23:
c9:7d:fc:49:f4:7c:ab:69:f0:d6:94:7b:d6:70:a9:
b2:fe:00:e9:9a:46:20:16:b9:d0:fb:63:bf:8c:90:
1a:35:55:ba:c4:84:d7:7d:3b:eb:2e:bd:8d:f1:66:
78:73:f0:ef:1d:c5:a1:92:e7:bc:ad:11:77:d8:2d:
d3:e5:d0:8c:13:a1:59:56:53:30:7a:b4:12:f9:ea:
6b:25:27:2d:36:95:4d:9d:45:dc:2f:c9:e1:0f:be:
ce:08:71:66:30:fb:bc:6b:5b:07:96:8b:93:73:7a:
a9:8c:ca:27:42:17:c2:36:f7:e8:5a:3e:e3:10:86:
6a:aa:4d:55:53:2e:47:33:fa:b4:a1:6b:15:e9:42:
20:46:b0:e1:5f:b9:31:2b:2e:6c:6f:30:95:12:c5:
57:da:e7:96:ba:8d:a7:ef:74:f0:e3:be:81:9d:31:
cd:2f:20:bf:cd:10:fa:0a:3e:3b:18:f4:98:a1:55:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D9:8C:A2:D1:6E:01:DA:D6:5E:29:24:8F:DF:2D:0B:09:54:A6:97
X509v3 Authority Key Identifier:
keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:b8:0b:cc:57:a4:65:8f:74:b5:0d:39:ea:06:87:c4:d6:67:
f1:95:1c:7d:f0:10:84:02:eb:61:c1:71:29:87:f3:1a:43:0d:
f0:2b:af:9f:69:98:b6:76:8d:63:99:90:f5:76:d4:af:c5:84:
04:07:1c:74:69:48:e1:45:a2:98:bd:40:bd:6e:d3:94:df:2a:
85:cd:61:8a:90:d0:35:1f:47:60:7e:dd:97:a8:d3:88:bc:c1:
e5:1d:5c:66:1f:ba:ad:24:a0:e7:7c:a3:88:b2:a8:3d:a5:af:
24:ad:da:0d:0d:34:6c:b5:c2:fc:b8:b6:cc:a3:bb:9a:49:6b:
2b:02:c1:fb:80:87:f9:87:59:1f:fd:8b:fc:dd:80:63:95:65:
4d:c8:7f:9a:00:dc:51:dc:1f:8e:1c:13:e4:ab:1d:7e:f4:86:
6d:bd:eb:17:74:ec:53:ab:61:39:b2:90:f2:92:1b:3f:cb:9a:
4e:4d:de:74:2c:a5:cd:19:e9:67:4e:e1:d1:c6:6d:74:9a:97:
97:ca:37:a3:b0:7a:7d:4d:95:3b:9c:61:9b:63:36:62:2b:3e:
2b:d7:0c:45:d8:fc:9d:9f:e6:e4:dc:98:4c:2e:2b:fb:e6:88:
43:eb:70:fe:24:c5:3d:f7:d3:36:6c:c3:dd:53:64:23:06:a3:
ea:21:a8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:53 2025 by rpki-client