Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft
File: HQSsXQPY72rEMd4aeq57aHaBtjY.mft (raw, json)
Hash identifier: XC0fTVuNbVI13sKq48/cOJxDZ5QgVA5N9mt9Oj3oovk=
Subject key identifier: D1:3C:27:D3:BB:3F:97:31:AF:1C:8C:D7:31:84:45:B4:AF:1C:77:B3
Authority key identifier: 1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36
Certificate issuer: /CN=A9131A2D/serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636
Certificate serial: 07A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft
Manifest number: 0791
Signing time: Thu 30 Jan 2025 21:16:45 +0000
Manifest this update: Thu 30 Jan 2025 21:16:45 +0000
Manifest next update: Thu 06 Feb 2025 21:16:45 +0000
Files and hashes: 1: HQSsXQPY72rEMd4aeq57aHaBtjY.crl (hash: m0M+9B0YwPSIDkut5An4o26oLkoV3cZFZOa3QmvBxn0=)
2: 66EE9D94152511ECAD055780C4F9AE02.roa (hash: xYIcgS1Zp8wD+PJFBZBjfV7mWptLx74W20qrbaZleiE=)
3: 111E53B6152811ECB2C0B70BC4F9AE02.roa (hash: vzmf8XnwJutTzSkLhDDX6poVkZL6XtaY1a0fPCQC+dY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A2D/serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636
Validity
Not Before: Jan 30 21:16:45 2025 GMT
Not After : Feb 6 21:16:45 2025 GMT
Subject: CN=679bec3d-544b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:2f:6b:9e:8b:51:2a:6e:ef:15:d2:5f:63:
6c:24:10:ba:8b:e3:ca:80:2b:94:1d:e1:8e:70:07:
4c:c7:05:fa:b0:81:71:3e:fc:c8:1e:5d:1f:f3:10:
ec:30:d0:8a:1f:ba:3e:2a:9d:68:3e:36:27:95:3e:
e9:3d:79:9c:3e:c2:9b:64:37:8e:1b:38:92:e8:f6:
f2:66:c9:c5:ee:41:17:a5:ea:ad:60:e9:b7:c3:cf:
f5:a9:40:c9:dd:c4:80:59:f5:0b:e5:3a:fe:ec:a0:
ac:1e:3d:2e:3d:c1:37:8c:16:67:bb:de:8a:82:19:
29:3c:51:9e:7d:1c:8f:0b:da:9b:64:64:6c:69:e3:
d9:02:15:b9:cb:46:d2:f8:39:49:19:11:b6:98:51:
c6:e4:33:ec:a1:cb:1c:93:8e:65:cd:29:5d:2f:6b:
9a:14:77:96:dc:a4:02:68:94:47:b2:3a:00:83:24:
0b:7f:ee:31:d0:d5:9d:90:d8:2a:5c:cf:b4:8d:67:
37:b6:fb:8c:86:f2:8a:6c:00:9e:9d:d3:2f:00:75:
96:ec:df:09:99:21:a2:4c:64:8f:ea:fe:5c:c2:67:
a8:79:7e:83:eb:13:92:d2:43:7b:87:9f:6f:af:19:
88:1a:0b:fa:ca:02:88:41:63:9c:33:51:42:16:68:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3C:27:D3:BB:3F:97:31:AF:1C:8C:D7:31:84:45:B4:AF:1C:77:B3
X509v3 Authority Key Identifier:
keyid:1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:b4:fa:a4:04:a7:29:5d:bd:cb:03:02:1a:c8:29:87:1e:59:
34:5e:8a:d4:8d:50:12:bf:66:4e:01:39:d5:c3:d6:f3:3f:05:
6b:8d:fc:da:45:65:45:2d:e3:2f:47:a1:9a:05:58:18:8c:dc:
3a:8c:ab:47:4a:9c:a5:39:35:d5:b0:6c:29:d8:16:3b:03:e2:
0e:cb:9c:11:17:e8:c9:aa:33:70:fd:29:d8:be:1c:f5:25:c4:
fe:eb:68:62:be:35:de:8f:31:29:1f:e4:88:03:a7:f2:f1:1f:
29:f4:b3:92:85:dc:d5:2f:84:77:72:ce:37:71:b1:5b:bb:41:
76:01:9f:a6:78:0a:fe:ec:44:d9:5d:64:9d:20:c8:d1:84:6f:
80:50:07:7e:69:f7:35:0e:ad:05:dc:34:1e:5d:96:a4:70:5f:
35:a4:d4:d1:76:57:46:9b:50:49:72:57:83:61:f3:26:9f:65:
54:8d:94:7b:9c:a6:ee:35:51:2f:c8:cd:e3:33:ff:37:36:9e:
dc:2f:f9:c5:14:9f:86:a0:2a:44:3a:9c:c1:0f:b1:e1:41:5f:
e4:41:a0:25:1b:9f:c3:6d:b8:ae:ce:44:d0:b6:3d:46:2f:01:
0d:05:d1:78:b8:89:9e:9a:08:21:54:02:04:85:73:93:ec:3d:
05:3f:7f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:16 2025 by rpki-client