Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
File: RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json)
Hash identifier: mxAMQRWS5TM01zcSt0nJzMtiPs64VDNLkhYD26PqYQA=
Subject key identifier: 8B:DA:16:02:E7:5F:B4:B9:17:4C:CC:EC:9E:D2:99:C8:05:5C:C1:47
Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
Certificate issuer: /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Certificate serial: 1088
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
Manifest number: 1082
Signing time: Fri 31 Jan 2025 17:20:40 +0000
Manifest this update: Fri 31 Jan 2025 17:20:39 +0000
Manifest next update: Fri 07 Feb 2025 17:20:39 +0000
Files and hashes: 1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: maUGxRqnBKMd7gaxFZtq0UJts7KHONiTTs0wWA1v1pc=)
2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: +KeTCKuOfeRgu5RimCaRxKh/0Sa4v6tZDxtG+Krp5ho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4232 (0x1088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Validity
Not Before: Jan 31 17:20:39 2025 GMT
Not After : Feb 7 17:20:39 2025 GMT
Subject: CN=679d0668-5303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:46:67:1d:ff:e8:d2:be:97:4b:5b:5f:34:
9b:86:3a:fc:de:f3:03:e4:50:b1:c0:5c:34:b1:10:
5d:73:51:bb:42:b4:59:8a:53:cc:ef:1e:da:ba:7d:
dc:19:4b:50:16:10:ae:10:a9:5e:18:a3:8a:5f:38:
7b:13:7a:55:ed:93:5f:71:84:92:68:e1:85:73:f1:
c8:e4:7d:13:d8:89:e1:24:50:22:55:7b:7d:f5:9e:
9d:78:0f:77:b4:80:95:ea:f8:b4:7f:eb:05:85:0a:
ff:ff:4c:35:a2:84:d7:7d:2e:ff:b2:aa:58:ff:26:
b4:da:2f:a4:21:95:6b:4b:d4:b6:43:cd:3d:8c:a8:
c0:61:ef:45:26:92:46:2a:88:d1:09:09:5c:4e:d0:
28:64:19:a8:bb:a0:8b:28:0b:ae:9e:a6:ff:fd:a0:
f1:27:33:f2:e5:0e:f1:92:61:ac:e4:75:d0:3c:9e:
51:08:d6:f1:24:63:8f:65:f0:ee:30:5c:1b:82:f1:
1b:9b:f7:e1:63:75:60:70:45:d0:0f:81:b4:dd:4f:
8b:76:ad:22:96:5c:09:22:30:5a:62:ef:c2:57:f6:
f9:04:74:e6:b2:23:6e:97:bd:38:dd:56:32:d0:78:
ee:dd:7a:87:47:ce:c6:f6:ad:01:fb:e1:f3:35:c2:
12:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DA:16:02:E7:5F:B4:B9:17:4C:CC:EC:9E:D2:99:C8:05:5C:C1:47
X509v3 Authority Key Identifier:
keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:23:c5:4b:2d:77:b6:e4:5e:40:3a:17:2d:a7:2a:fe:d8:7a:
0f:b5:25:39:34:ac:f5:7f:b6:5c:8e:06:54:13:36:73:76:f5:
58:5b:16:da:af:84:f9:d5:ee:f7:75:18:a6:f5:4c:8a:df:47:
3e:a4:f8:ca:cf:c9:8f:27:dd:38:c0:80:46:2a:30:62:55:87:
90:ff:d5:c0:df:2b:67:89:7b:fe:b7:7d:fe:81:6a:9b:4d:52:
60:db:6f:f6:2c:6d:21:1f:fa:d0:58:9e:f3:a3:c1:37:58:98:
a8:59:99:e0:90:db:f4:02:1f:ad:5b:e4:04:d7:46:ad:a7:d3:
a1:aa:91:00:12:4a:7c:84:86:c7:40:1f:25:ee:a9:4a:7d:b5:
56:bf:6d:8d:3e:61:d6:5d:0e:34:a7:52:79:9d:9d:c1:dd:c4:
95:57:93:e5:e6:e4:56:e7:85:ea:3a:9d:a1:02:1a:cc:82:7a:
05:1c:8a:87:49:41:e9:9b:95:7d:fe:8d:c6:c8:8c:89:48:16:
33:cb:2e:73:8a:c2:5f:8f:d5:2a:9a:bb:4e:f6:2c:01:8f:a6:
bf:f5:3d:5c:bb:00:98:39:d2:8c:72:b5:a0:ad:57:c9:42:2d:
81:ef:29:40:d1:b0:f0:91:4e:99:be:f9:fe:e0:51:da:40:67:
05:7e:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:02 2025 by rpki-client