Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
File: DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json)
Hash identifier: HGxsETZFyymg2tDwWVi0j6VgRLa7EPTdDJzdNDZBfuA=
Subject key identifier: B0:DC:03:4F:56:FC:AB:B3:A6:DE:EA:88:5A:7B:0F:35:2C:A6:50:98
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
Manifest number: B8
Signing time: Fri 31 Jan 2025 05:08:54 +0000
Manifest this update: Fri 31 Jan 2025 05:08:53 +0000
Manifest next update: Fri 07 Feb 2025 05:08:53 +0000
Files and hashes: 1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: AtrdJXV7c7h0jzW3QQEjCsv4cLVrcSDwdkOAH2U6PLE=)
2: 79F7221E892911EF896D1145C4F9AE02.roa (hash: CdVHSgSFwVlvO0qZ+589iYkzFfVCO/HTOSZdhmiqYtg=)
3: F278C026892911EFB08D7746C4F9AE02.roa (hash: C5af6g+Lu9mdrwbxySM/XZuzLumGfZMRdOD7/d/Fh8M=)
4: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: h643cI2g+iFcUuenN+s6pHi62OFIxZQfh52pwbMjNbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Validity
Not Before: Jan 31 05:08:53 2025 GMT
Not After : Feb 7 05:08:53 2025 GMT
Subject: CN=679c5ae5-33bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9e:fa:9d:a8:67:07:15:33:a4:1a:25:59:2e:
73:3f:6f:9c:34:3c:25:e6:63:6e:e3:9d:a0:03:5f:
83:1a:a5:36:5c:2d:7d:6a:ed:48:9f:f4:e8:d5:82:
07:07:ce:41:85:4e:49:bd:4f:99:ce:67:cd:66:0a:
6d:8a:af:97:ca:ed:4f:a2:c2:ed:4a:b5:5e:2f:aa:
80:a6:c9:c8:c4:fc:57:f5:6c:ae:b2:82:61:4e:45:
52:4f:ca:b9:94:8f:44:13:ca:ea:0f:a0:e4:87:47:
93:1d:63:1f:ce:62:0d:d3:8f:08:0c:46:ad:6b:aa:
f7:2c:f1:dd:66:07:b5:2a:af:c0:c3:bd:3d:90:d3:
df:65:56:7e:df:0d:15:8f:e1:22:bf:ca:99:89:6c:
61:c8:09:fb:2c:a8:d7:99:57:cb:0c:d5:72:3b:72:
94:d4:e5:8a:8c:a0:1c:c0:91:86:b0:0d:29:95:d1:
fa:11:a3:a8:6f:aa:83:81:61:a4:10:a2:60:38:85:
42:35:e1:3d:ac:f1:ed:d6:ab:98:53:89:6d:10:b7:
4d:42:d5:6a:c5:4a:d8:c9:ab:f5:38:d1:61:34:32:
ed:4d:fc:2b:c0:22:8b:e8:09:e4:e2:84:e4:2e:4e:
4c:50:f2:34:95:8f:1f:ce:5b:61:a2:0a:05:90:9d:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DC:03:4F:56:FC:AB:B3:A6:DE:EA:88:5A:7B:0F:35:2C:A6:50:98
X509v3 Authority Key Identifier:
keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:49:37:df:05:ce:4d:90:88:f9:6c:00:ca:15:32:7b:2b:50:
18:ba:ff:51:1a:e2:c8:cd:d8:5a:2a:b0:d7:53:4f:cb:c7:c6:
32:58:99:5a:38:f2:b4:7d:12:12:28:ea:f3:e2:48:51:30:66:
11:37:51:07:17:38:d7:72:f1:28:38:d3:85:a5:0e:3d:dd:45:
0b:4a:39:5a:4e:93:4e:f6:09:8d:73:19:e5:95:e6:90:21:3a:
23:72:11:b6:26:c2:ca:9f:e7:37:07:d4:ca:f5:26:c1:fd:78:
30:c1:2e:33:e8:a1:df:2c:1c:e8:6d:8e:88:39:02:48:ef:d8:
9b:f2:d2:c4:9c:df:3e:9f:ac:fe:6e:43:ac:99:9d:91:5a:35:
b2:70:06:50:72:f3:83:a6:5e:4e:a2:80:c6:00:67:dd:0b:eb:
6b:7d:be:df:d7:3e:05:96:f3:ba:16:32:5e:9e:35:1e:a6:b1:
d2:6b:30:ca:b4:73:4b:fd:b5:b0:52:a9:a6:b8:72:59:01:e9:
d1:b1:61:87:d9:7b:76:ce:2e:12:93:96:4f:bd:27:2f:b1:96:
f8:91:47:e4:aa:e6:a7:c6:44:4c:83:b9:14:31:22:81:35:b3:
37:a8:47:c1:33:d9:7b:a4:a8:f0:6e:09:c6:13:5f:3a:65:71:
92:b4:09:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:19 2025 by rpki-client