Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
File: H2wzTrxkYqJkUoZ6u1-E72itwCw.mft (raw, json)
Hash identifier: HeWmML44w/4jJJQvQVTRYhdQxT1XDEH65RKDlpPD8Z4=
Subject key identifier: CF:D9:9E:DD:D0:F3:5F:1C:72:3B:E5:18:B2:AD:76:5F:1A:4E:2C:62
Authority key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
Certificate issuer: /CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Certificate serial: 08AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
Manifest number: 089D
Signing time: Thu 30 Jan 2025 20:37:44 +0000
Manifest this update: Thu 30 Jan 2025 20:37:43 +0000
Manifest next update: Thu 06 Feb 2025 20:37:43 +0000
Files and hashes: 1: H2wzTrxkYqJkUoZ6u1-E72itwCw.crl (hash: gA5885hKEGUZOkv0CS+PGZX2wU5tGBRIiHewFTb6Qdk=)
2: 6AD73A584A8811ED8D0B8B38C4F9AE02.roa (hash: fXl2igGJye4ZYwQR43jAvZ6b6h7qYdiNfyIYWYelBPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2219 (0x8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Validity
Not Before: Jan 30 20:37:43 2025 GMT
Not After : Feb 6 20:37:43 2025 GMT
Subject: CN=679be317-cbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:a8:8f:a7:c9:1d:00:1f:0d:88:dc:46:fd:
7c:a8:14:6b:65:1d:13:2b:8b:5d:b4:c1:d9:12:ed:
bf:07:16:91:56:b8:9a:c0:87:f0:c1:fb:cc:29:65:
b2:88:41:94:22:47:86:0b:29:8e:0a:fd:39:fa:8f:
50:bb:0b:65:17:9d:2f:de:96:05:80:94:b0:ce:44:
a0:e6:0d:d3:53:a0:27:eb:d0:1f:39:98:e1:bb:09:
c9:9d:61:58:79:a6:70:db:36:a5:cd:29:3c:14:1d:
2b:c5:f0:e6:37:ed:c4:8e:79:df:fc:02:0d:bb:ce:
fb:62:06:8d:bb:fc:e7:aa:bf:84:df:6d:44:eb:5c:
e8:6e:b7:5b:94:36:76:d6:95:ae:fe:12:c7:17:41:
5c:a6:00:23:69:fb:b9:2c:9f:95:87:3d:ec:e8:7b:
c1:a4:e6:93:b1:c1:22:7f:da:d7:a2:26:a9:cc:cb:
40:ce:0f:57:87:f0:62:d0:31:98:09:38:35:b7:8a:
2f:20:ac:25:be:8b:5c:19:ca:ca:71:34:91:05:cc:
aa:53:4f:0e:70:fc:e7:f2:10:5e:09:15:2a:0f:13:
25:51:fd:a5:f9:ab:4a:3c:b6:61:9a:7a:47:f5:23:
a4:ac:38:1e:c3:c2:da:2d:1b:f7:a9:e9:b1:08:46:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D9:9E:DD:D0:F3:5F:1C:72:3B:E5:18:B2:AD:76:5F:1A:4E:2C:62
X509v3 Authority Key Identifier:
keyid:1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:db:7e:c3:f9:f1:44:c9:35:ef:45:15:c3:e7:93:45:5d:e7:
8b:69:41:8b:6a:ef:98:0c:61:c4:51:f6:6d:2a:26:fc:34:3f:
d4:79:0d:97:af:a7:76:e5:d3:29:bb:01:3b:77:02:33:93:da:
b5:3c:1a:a9:b5:d7:31:c9:5d:3d:a3:55:70:11:39:fc:27:2b:
f5:32:18:58:d3:46:dd:f1:34:23:71:94:b0:bb:16:3f:db:d9:
31:90:3f:1c:7a:1f:ff:93:23:af:ca:29:be:ba:f5:ff:df:c5:
39:38:dc:2f:48:a1:80:7a:3e:7b:ee:30:9a:85:4d:b2:a7:e5:
29:33:2a:5e:e9:77:9e:f9:73:b5:f5:cd:79:10:68:b1:2e:e5:
4f:db:60:ed:e5:a9:31:55:d1:04:19:3e:5a:06:03:9a:f1:db:
42:96:2a:ae:a3:08:d1:cd:6a:03:24:1c:ce:07:ad:ea:c7:42:
23:33:6b:6f:2e:f5:4c:6e:ba:f8:72:1e:45:a1:93:1b:8a:59:
e9:14:8d:34:b5:ae:8b:5e:ff:4a:a8:f9:d0:c8:17:1b:40:c0:
f4:eb:ec:27:55:95:af:b2:a6:ed:05:97:72:12:cd:00:1a:94:
b5:6c:c4:79:e9:9a:08:0a:0a:82:d2:48:e2:6f:16:19:31:80:
e6:ee:ab:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:13:22 2025 by rpki-client