Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json)
Hash identifier: 9ku4s4ie52EeC4qhqRGn9ZTUGbORi7yqqX9RbYwkrwQ=
Subject key identifier: 97:57:30:CD:C3:88:79:6B:71:B2:02:5A:DC:60:35:6B:E9:DD:29:51
Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97
Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97
Certificate serial: 067F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
Manifest number: 067F
Signing time: Thu 30 Jan 2025 22:18:49 +0000
Manifest this update: Thu 30 Jan 2025 22:18:49 +0000
Manifest next update: Thu 06 Feb 2025 22:18:49 +0000
Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: 6uIKsc27THkZZKlDncdQBClBhKqLvknK2LbP16p+9Q4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1663 (0x67f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97
Validity
Not Before: Jan 30 22:18:49 2025 GMT
Not After : Feb 6 22:18:49 2025 GMT
Subject: CN=679bfac9-977b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:6b:9c:3f:ab:b8:d6:cc:f7:35:ed:93:97:
0d:46:3a:ca:be:c3:6c:69:53:92:d5:4f:75:aa:7e:
2f:3a:ed:76:d7:93:36:29:4c:6a:33:87:7a:23:16:
03:e4:59:e8:f7:39:c6:7e:4b:ef:1e:97:7d:91:72:
74:3f:d9:ab:0c:21:eb:82:b9:76:ba:62:5f:7b:89:
26:5d:1d:d0:c7:fc:68:13:f3:4a:20:d5:b0:f6:8c:
09:f1:53:63:08:58:05:2d:f3:63:69:9d:0f:ae:eb:
be:56:12:1b:83:4f:31:38:bd:da:83:5a:15:4b:e6:
9c:b9:2b:ee:4d:a1:cc:cd:8b:8a:94:65:4d:b3:12:
db:b9:d6:74:36:1b:8d:7c:6c:97:8a:18:7c:63:81:
8c:ad:d1:f2:61:e5:b1:2f:84:2b:62:c9:5e:af:6d:
dd:3c:a2:2e:86:63:33:1f:a3:50:2c:89:0c:f2:3d:
49:27:e0:00:72:85:58:32:44:b0:50:84:c6:5e:3a:
0a:ba:cd:0d:06:dd:de:08:95:13:a2:ff:0d:78:62:
32:73:af:b4:db:02:ae:fb:51:47:50:39:7c:bd:e9:
ef:ae:ad:72:2b:be:0a:fd:09:3e:a4:8f:9d:b5:7e:
10:03:28:ce:4a:7e:af:8d:30:91:89:76:bd:60:cb:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:57:30:CD:C3:88:79:6B:71:B2:02:5A:DC:60:35:6B:E9:DD:29:51
X509v3 Authority Key Identifier:
keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dc:47:9f:74:91:05:0e:1c:23:11:db:3a:6f:aa:75:84:a1:
d0:9d:bf:02:90:f6:6b:0f:cf:10:f9:e0:3d:40:79:34:11:d8:
9c:b2:be:6c:b4:70:a8:77:80:11:5a:9f:d5:0f:92:d8:e6:94:
86:e5:54:3c:1c:51:19:93:f0:1c:d6:cc:42:47:57:f8:d2:cc:
3a:8c:e7:7b:ca:81:03:24:73:d4:d1:03:81:d4:88:b9:de:eb:
e8:ca:bd:5f:22:40:99:0f:eb:85:2e:64:8f:cd:22:38:73:dc:
06:de:d0:a0:6c:02:07:8c:b4:ce:a3:a9:16:c7:0d:dd:6e:d5:
c2:b5:5f:7e:34:5d:68:a9:6e:2c:6f:a3:57:62:6e:49:9f:46:
c7:e2:f7:ff:e0:66:7c:ca:c9:f0:7c:11:8a:f2:6a:7e:bc:77:
48:2c:fe:5a:0d:9e:3c:26:61:50:18:20:12:a1:5a:b4:cc:e1:
65:d2:2a:53:c1:ac:53:04:35:ef:66:79:5d:f1:f9:11:4a:9c:
2c:75:94:16:35:eb:83:64:28:40:fd:75:7c:fc:34:8c:50:85:
38:6d:95:2d:a1:88:99:15:11:ba:c2:ed:5f:d6:2b:bb:90:15:
28:7f:a4:10:7e:1a:67:d7:7f:bc:24:01:b6:83:4b:77:76:b4:
e2:0f:fe:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:54 2025 by rpki-client