Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft
File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json)
Hash identifier: TgavrlEE9mypdDQLmw8LxX5nOlf2WnS2mEuhNs4s5rg=
Subject key identifier: A1:D0:48:FC:77:C3:35:48:01:DB:89:04:C8:01:19:E9:3E:BB:97:E4
Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29
Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129
Certificate serial: 0C0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft
Manifest number: 0C08
Signing time: Fri 31 Jan 2025 18:24:27 +0000
Manifest this update: Fri 31 Jan 2025 18:24:26 +0000
Manifest next update: Fri 07 Feb 2025 18:24:26 +0000
Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: CJGekCEkb+AnL/hzUIf+PjGphRNbIdJ/ZJ1aL+ApX9E=)
2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: ++efN2YnvlpaiN/cGnRcdVoz/L09sx0IMn5rgvBIJi8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3086 (0xc0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129
Validity
Not Before: Jan 31 18:24:26 2025 GMT
Not After : Feb 7 18:24:26 2025 GMT
Subject: CN=679d155a-544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:37:a6:3a:96:45:7b:b1:0c:2b:ad:d2:ee:
3b:5f:c9:d2:cc:a4:dd:7a:a2:9e:d6:08:2e:92:87:
e1:bf:7d:f4:9d:7d:e2:eb:3b:45:6a:33:bb:60:64:
1a:ca:7f:b3:2c:45:5e:fd:57:89:84:89:c0:23:c4:
30:30:2b:a3:86:ad:16:70:9a:43:5a:a2:aa:fa:de:
dc:bc:3a:a3:2b:41:c2:00:f1:62:3e:c7:65:86:34:
d8:cf:b5:8b:c9:ba:a9:aa:f7:08:69:b7:18:01:c5:
2e:34:93:7e:dc:e7:60:b7:f5:74:ed:ad:ea:52:31:
6f:52:d7:63:df:3a:19:50:bc:9e:44:c7:34:d1:12:
d8:a7:8b:49:9f:0c:00:46:97:1b:04:3b:66:81:3d:
f2:62:aa:35:7a:d3:47:ed:4b:2f:45:19:0d:f5:08:
25:ef:0f:7b:92:be:d4:11:46:47:ce:f4:65:3f:96:
d3:19:c7:c6:0c:1f:37:dd:81:c6:15:6f:c6:93:5c:
8c:c9:4b:50:54:b5:af:3c:6a:50:95:3f:ce:ad:18:
10:65:ab:12:fc:1f:e2:26:9c:ff:39:21:af:83:0c:
11:a3:5f:b1:6f:72:7f:05:fa:f4:7a:0d:a2:86:7e:
cf:22:60:be:25:1a:ef:3c:14:47:61:ed:98:ee:7d:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D0:48:FC:77:C3:35:48:01:DB:89:04:C8:01:19:E9:3E:BB:97:E4
X509v3 Authority Key Identifier:
keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:b1:01:67:d8:14:e2:42:75:02:c7:49:98:be:14:d7:87:c6:
4e:74:da:55:9c:77:69:9e:10:e0:d3:d5:4c:57:32:8b:8f:f5:
ea:47:ed:44:41:e8:b5:29:a1:51:dc:96:02:97:5e:2c:89:54:
ce:da:3c:19:d0:59:9f:15:ef:fe:c7:a5:37:6e:12:b2:70:19:
fc:d0:73:21:50:29:a9:ac:1b:3c:44:fb:65:61:e2:58:72:ef:
11:5f:2b:91:65:7c:a0:79:32:19:4f:0f:1d:09:00:aa:47:0f:
a6:66:73:e3:ae:99:44:3a:65:34:d8:30:dc:72:fe:53:2e:b7:
13:ec:33:1a:45:77:62:e3:28:8c:ab:c2:e6:2b:82:4b:5b:fd:
af:a2:48:98:50:7b:37:dd:f3:0f:f1:57:ae:43:13:9d:fb:2b:
6c:74:f2:b8:00:ef:3d:f4:68:56:a3:14:66:e2:55:09:c9:6c:
79:8a:1d:55:ec:d2:c7:7c:b1:7c:87:c5:2a:b9:e6:db:8b:53:
e3:88:29:b4:06:a6:1b:7e:1d:88:4f:a4:d6:b9:33:8b:d5:fd:
2d:14:db:4e:3c:2d:37:12:d9:8c:1d:62:69:c0:9d:47:69:d2:
f7:45:30:8b:82:15:72:9f:1c:a2:d9:35:26:d4:de:5a:17:25:
9a:5d:b2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:51:44 2025 by rpki-client