Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json)
Hash identifier: zdbht8xNvv9FggP1kLoBsIOwKayTbcDVOBykEC1aPzQ=
Subject key identifier: B8:4F:99:42:10:AE:F6:1E:15:D2:33:2A:CE:59:F2:20:50:98:4D:40
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial: 1840
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
Manifest number: 1828
Signing time: Fri 31 Jan 2025 16:31:37 +0000
Manifest this update: Fri 31 Jan 2025 16:31:36 +0000
Manifest next update: Fri 07 Feb 2025 16:31:36 +0000
Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: Dw7od1kY+MT+oCxA49anrPB62VbE/i4Taa+pwcVRfsc=)
2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: c8eXvMsfFA7Ytf2InKLX8jw3aUNTnVG1lQg01oaNTHw=)
3: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: ytFM1wPJb+ZhqA3+BNReAuRWiZPk0aQTwlVWywjJ0c8=)
4: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: wfXqeuO++f5A3YBGSiIBBPBFFyOKEJbFfKtCHF7f7hI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6208 (0x1840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Validity
Not Before: Jan 31 16:31:36 2025 GMT
Not After : Feb 7 16:31:36 2025 GMT
Subject: CN=679cfae9-8b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:22:56:b2:86:c9:fa:ba:d3:1c:14:e7:4a:
8d:81:2f:6d:aa:4f:b5:37:bc:42:84:f3:12:d7:1b:
a9:4d:2d:94:ac:54:eb:53:0b:cc:ce:55:55:d8:b0:
4a:c5:0c:b6:f3:f8:2c:9b:f9:20:f0:ec:39:76:f8:
e8:40:58:31:07:a6:05:79:02:22:7f:dd:c5:e7:57:
6a:17:f6:f1:6b:dc:f0:0f:2d:aa:31:3b:7b:72:a6:
83:d3:69:ed:88:5b:21:22:72:c9:50:11:35:61:81:
49:ca:46:09:8b:b8:fe:45:77:f8:1b:a2:15:34:76:
82:a8:2d:c8:30:40:d3:5c:6b:1b:b3:79:0d:ef:13:
39:97:b4:d6:87:b2:39:14:b5:14:43:5e:14:af:96:
46:20:13:2a:b7:11:d1:20:22:13:d6:7f:dc:de:c3:
74:6b:f5:2e:ba:66:83:e9:2b:1f:bb:b9:f0:2b:34:
33:6f:d9:bf:b4:1a:29:51:b4:f1:80:b5:33:0c:0a:
92:5e:17:e6:0b:4b:5e:52:4a:83:4a:fb:c2:3f:39:
79:b0:e6:a4:45:38:16:c6:a5:b6:f4:bb:f9:d4:db:
df:ac:3f:c8:85:e4:93:c2:25:f1:3c:c4:b3:1d:03:
17:16:97:34:69:02:15:9a:e3:d8:c2:bc:b6:bc:cf:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:99:42:10:AE:F6:1E:15:D2:33:2A:CE:59:F2:20:50:98:4D:40
X509v3 Authority Key Identifier:
keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d6:47:ab:bd:f3:4e:9b:89:ec:4a:93:c4:8d:00:77:f6:90:
6f:1a:5a:7d:22:be:c3:af:d3:eb:5f:34:1e:0f:25:52:d4:62:
2c:5f:92:66:4f:e6:01:e5:83:db:36:20:09:a8:d9:48:3f:ff:
be:88:8d:d1:7f:9a:6f:de:a9:2e:47:58:41:90:8a:83:bb:75:
c1:1c:d7:56:a0:a0:b6:20:ab:41:cd:45:14:10:87:c7:21:d0:
3b:07:e2:52:ce:b0:ba:a6:ba:38:f7:8e:5e:f4:c1:1b:2c:7f:
06:1e:8b:fd:75:3a:56:0f:3d:dd:29:1c:47:66:d1:19:60:68:
7c:d9:dd:de:1e:08:94:4c:c2:d0:c1:2a:95:f8:7d:7a:f8:8f:
8e:0a:ef:8a:08:aa:e0:af:9c:44:b6:e6:04:b2:57:3e:06:3f:
d3:bf:d4:e3:83:e5:ea:3a:87:0e:4e:2c:34:19:c6:9f:eb:59:
a1:7f:a9:cc:fa:0a:02:27:fa:e4:6e:74:f7:c1:18:56:ea:47:
a3:01:64:50:ec:2d:bc:2d:d1:9d:23:14:00:1b:24:92:d6:eb:
06:f8:67:8f:b6:47:43:2f:7d:f3:31:da:6b:f6:21:60:62:18:
d2:3d:24:89:59:c0:82:09:ea:4c:9e:be:30:02:d6:a8:2f:51:
9a:dc:25:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:32:57 2025 by rpki-client