Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
File: HaAa_AiIyqYXHgoOdBz8kE7S328.mft (raw, json)
Hash identifier: 6G9D+T86hmUKmafvQ624tNynPiNMBBoinLCxauUkfsg=
Subject key identifier: 18:5C:70:3D:DB:86:A9:A1:9A:AA:41:9D:3F:A2:F7:02:0E:1F:9D:F0
Authority key identifier: 1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F
Certificate issuer: /CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F
Certificate serial: 0891
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
Manifest number: 088C
Signing time: Thu 30 Jan 2025 20:38:26 +0000
Manifest this update: Thu 30 Jan 2025 20:38:25 +0000
Manifest next update: Thu 06 Feb 2025 20:38:25 +0000
Files and hashes: 1: HaAa_AiIyqYXHgoOdBz8kE7S328.crl (hash: MA1Gtqvjl/qrLyTrhfgyT0vNvqgKWaM79/yUuuffQPY=)
2: 939AAE78B1D511EA8E3DAE1CC4F9AE02.roa (hash: 2AnHzJwonUE0Oio1jBjuypmq05cqTxtCSZ5dai/xpII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193 (0x891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F
Validity
Not Before: Jan 30 20:38:25 2025 GMT
Not After : Feb 6 20:38:25 2025 GMT
Subject: CN=679be341-d1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c1:31:a8:09:58:d8:3b:98:ef:92:4f:dd:31:
c1:61:63:ba:df:bf:c0:0b:9f:85:3e:a5:6f:b1:81:
8f:dc:5a:05:1f:04:28:8f:ac:4b:49:52:c1:d6:ab:
89:16:d2:f8:ee:8a:4d:5b:0a:88:f3:a2:84:ab:82:
06:89:48:4f:b7:a6:74:8b:7c:07:01:82:7f:c4:4a:
bc:fc:89:fb:84:2d:31:dd:74:ff:7f:16:f8:8f:a6:
89:ac:5c:9d:5b:c5:de:d4:62:6a:b4:03:0c:9c:20:
e5:1c:07:58:e8:75:ec:ea:13:50:bf:5c:17:22:e4:
ad:e7:98:9c:65:08:01:89:43:8b:a7:7b:09:dd:b5:
0b:d2:9b:a6:30:06:e0:7e:89:ee:1b:16:79:ba:da:
4f:46:ea:ff:ae:2c:e7:8f:9f:d2:8e:ef:43:99:36:
fc:9a:f1:53:64:39:c7:e9:a5:1f:57:81:f4:ea:eb:
6e:3b:14:01:df:f5:ef:6e:c5:9c:1b:58:8a:18:cd:
ca:d1:9a:35:49:87:33:e4:c5:e3:fd:f4:00:1d:41:
e8:dd:f9:9f:80:e2:8f:77:d5:4f:94:92:22:c3:83:
0a:23:a0:e3:c8:1d:ed:4d:4b:65:94:9e:41:94:1c:
3e:0b:75:01:10:c0:48:31:7d:d9:c3:17:40:e9:cd:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5C:70:3D:DB:86:A9:A1:9A:AA:41:9D:3F:A2:F7:02:0E:1F:9D:F0
X509v3 Authority Key Identifier:
keyid:1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:a4:af:76:fa:a0:c6:6f:ee:ed:3a:cf:7b:60:77:d9:7a:6b:
a4:d4:dd:13:fe:43:b0:e1:7e:50:67:cc:11:1d:56:0e:79:39:
7b:9e:d1:3c:3a:e6:5f:67:80:09:84:cf:91:e8:17:38:d1:60:
84:b3:f0:25:81:c3:b7:39:9d:0a:6e:08:a3:89:a2:cc:f0:ae:
94:a6:1e:2d:2b:02:db:71:1e:4a:27:e7:76:6e:19:c1:4c:30:
27:3c:8f:ef:fe:aa:c0:a8:0f:57:be:30:0d:88:4b:66:fc:f9:
e3:14:02:e9:05:df:4e:12:4d:a6:65:ef:fc:b7:0f:7a:e4:c0:
fd:75:4e:ec:5f:03:a9:3f:1c:c3:5a:c8:97:b6:bc:a6:99:46:
72:1c:3a:6e:50:54:d8:ed:a3:39:ef:bf:fa:57:f9:25:76:0f:
58:23:e1:12:1e:07:5c:09:96:b8:46:7e:af:c6:10:12:4e:83:
f0:b9:7a:89:c9:0c:39:e6:82:b8:22:40:4b:4f:7d:af:77:aa:
d5:bd:4b:6d:08:70:ae:31:0d:dd:42:fd:f1:96:ce:d9:be:e5:
55:fb:86:e0:56:d3:44:c7:c3:2e:4f:e6:19:91:7a:d6:b1:4c:
da:7f:de:41:16:ee:43:57:10:b4:26:b6:85:b1:de:0d:24:b0:
2e:ae:2a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:37:52 2025 by rpki-client