Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
File: h7_uyP-fsmiAINtZpiLBOhXlryA.mft (raw, json)
Hash identifier: pGp1ii+pI+Erc0hS52SywhEIj+c/PhgdiHWGizn/+GU=
Subject key identifier: C1:76:34:D3:DF:56:74:26:A7:6D:B4:CA:B5:59:AF:F1:EF:82:95:BC
Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20
Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
Manifest number: FF
Signing time: Fri 31 Jan 2025 04:19:37 +0000
Manifest this update: Fri 31 Jan 2025 04:19:36 +0000
Manifest next update: Fri 07 Feb 2025 04:19:36 +0000
Files and hashes: 1: h7_uyP-fsmiAINtZpiLBOhXlryA.crl (hash: HNrN33ojdfoDCELA4l92e3YdquYirbV262sgwniyR2E=)
2: 28382F96644E11EEA1DCB653C4F9AE02.roa (hash: tkC94LIcazFbktBOOWxjViOTNkAmC8Zs4gf9iesOvuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
Validity
Not Before: Jan 31 04:19:36 2025 GMT
Not After : Feb 7 04:19:36 2025 GMT
Subject: CN=679c4f59-f2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:23:7e:e5:f4:4c:b3:e6:bb:34:f6:8e:52:
b3:a2:85:ab:61:f1:25:cf:ba:bf:f4:56:2b:f1:3a:
95:54:b2:41:d1:1a:97:a1:0a:72:c0:c6:14:a4:65:
c0:53:d9:4d:f5:60:41:e9:63:20:c2:4d:cd:42:82:
4e:20:04:eb:4e:bc:77:68:ac:d0:43:6f:91:ef:54:
fe:1e:6c:99:5a:ea:a3:06:83:d9:f7:84:b5:12:33:
50:ca:a2:63:b8:f3:d7:49:d1:9b:e3:cf:c5:1b:57:
05:72:82:b3:18:b7:9b:79:28:18:87:89:6d:3a:dd:
6b:6b:11:e2:36:f2:f0:ac:a9:e0:bc:8a:c8:3b:17:
a8:08:2b:f5:e6:cc:b3:87:10:c0:77:71:9e:ad:b9:
b2:53:93:7d:3e:7b:30:00:30:4e:28:36:ad:a4:da:
30:51:e9:92:ac:e9:aa:0e:6a:8c:c7:90:58:60:32:
3d:1f:1d:d9:97:f8:44:e4:ea:82:ff:9f:53:25:f7:
98:42:3b:9a:c1:9f:36:93:54:ba:cf:90:76:c6:0c:
0c:f2:5b:e2:94:5c:58:c2:d4:3e:50:52:d4:a9:2b:
08:34:49:34:a6:db:0f:cf:5c:6e:3a:cc:66:d7:0d:
78:6e:b9:87:16:d6:85:e7:3f:cd:92:b8:26:79:be:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:76:34:D3:DF:56:74:26:A7:6D:B4:CA:B5:59:AF:F1:EF:82:95:BC
X509v3 Authority Key Identifier:
keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ab:88:dc:32:89:7c:23:4b:2d:e3:25:ab:56:61:7f:16:d6:
ee:a7:72:a3:de:80:78:a1:c3:52:b2:80:70:b1:1e:8f:ec:18:
b1:c9:82:48:08:97:99:fc:6d:c3:1d:ae:45:82:ab:37:aa:7d:
32:04:61:8e:c9:be:ac:f2:ff:38:53:97:59:df:f0:d8:1d:db:
fe:0c:82:e9:94:35:68:79:c2:45:1d:06:e0:9c:0c:68:99:d4:
e3:c3:c9:82:e8:10:bc:04:77:08:72:d1:60:8a:ce:27:7e:f3:
62:6c:1b:4c:d9:17:62:27:b6:dc:f8:37:bf:ea:b7:b8:c6:b9:
61:5c:de:49:5c:d4:81:34:8a:da:ee:cf:9a:84:98:3b:b5:71:
87:86:2c:9a:0b:a5:89:0e:40:59:f6:68:48:af:09:41:60:d4:
1b:6b:28:e1:a5:5c:a9:a3:8d:58:27:11:c3:f4:10:2d:88:ed:
a7:5a:6b:85:36:22:3f:85:e6:2c:04:18:0f:45:f1:fb:04:89:
99:1b:72:4e:1e:89:be:ff:cf:da:a4:8d:cd:36:56:67:56:bf:
74:91:b5:33:35:75:84:45:87:e3:40:1a:f1:d5:83:ba:84:21:
7e:38:da:a6:17:12:49:dd:5f:79:4c:04:f6:3b:69:d3:16:5d:
3b:13:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:28 2025 by rpki-client