Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json)
Hash identifier: 72eHb3tkuTDKehvfsz3Q2Q7sqUvHH3PP3JgsjqjR4sw=
Subject key identifier: A0:34:0E:31:F6:80:C8:72:01:CB:13:5D:CA:01:00:DC:A2:7F:A6:D9
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
Manifest number: 0D
Signing time: Fri 31 Jan 2025 07:09:45 +0000
Manifest this update: Fri 31 Jan 2025 07:09:45 +0000
Manifest next update: Fri 07 Feb 2025 07:09:45 +0000
Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: T4M4E/beX9tM/FwxYs7bqWh0s5xv7pDF+o6nB/LSZSU=)
2: C4B41888CF3911EFBA26F564C4F9AE02.roa (hash: PeoexpeZuhtxvOaSUXuGABP7Es0mdREYJbAZJzL28uQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Validity
Not Before: Jan 31 07:09:45 2025 GMT
Not After : Feb 7 07:09:45 2025 GMT
Subject: CN=679c7739-8afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:60:1d:2d:86:15:dc:8d:59:d4:aa:6f:a0:
84:43:36:e4:20:f0:bb:8c:a1:4b:85:f5:16:1d:d3:
8a:95:ba:61:f2:52:70:45:8e:f7:ce:a1:a7:96:34:
6f:c7:f2:d8:9d:2b:8b:68:d8:8f:0a:62:c8:78:56:
54:29:65:82:ef:e2:8b:a2:0a:f1:f3:70:a8:a5:63:
f6:1e:7d:3c:d2:ce:74:ad:24:6f:ac:6b:4a:f2:0e:
c1:ce:b3:07:56:4c:ad:59:8f:12:c8:84:17:a9:ea:
12:8e:e6:56:ff:33:63:2b:c2:bd:ea:04:02:b9:ab:
ef:90:9f:d1:64:ee:1b:1a:96:44:e1:57:14:a0:d0:
b5:36:75:c9:08:45:3d:25:f7:ae:7d:4e:b5:a0:22:
79:79:e9:dc:bc:1d:9b:f4:58:03:d2:8e:6f:b0:6f:
1f:80:e2:0c:d5:dd:58:26:54:bd:41:bc:68:14:09:
cb:f0:b0:2d:f2:90:70:4b:a8:09:4f:86:89:7d:d7:
48:8e:8e:ab:2f:59:d2:7a:bf:8a:9b:a8:0f:af:c4:
42:f8:de:94:25:ef:5f:ae:7f:3e:4c:8d:a5:5f:ca:
3c:ca:11:40:16:86:bd:08:11:17:be:07:68:34:72:
a7:76:13:8a:95:8e:fb:13:c8:55:34:f4:ff:09:69:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:34:0E:31:F6:80:C8:72:01:CB:13:5D:CA:01:00:DC:A2:7F:A6:D9
X509v3 Authority Key Identifier:
keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:62:73:d9:2f:ed:63:d7:f9:d4:c6:3b:d5:d1:98:56:e1:0c:
13:6a:66:b5:40:3e:75:67:d4:86:57:ed:50:87:c7:10:a5:fa:
e2:af:0b:89:ca:c4:81:45:52:f2:13:32:60:b3:74:bf:dd:98:
96:87:11:91:be:08:dc:9e:41:cc:35:d9:3e:92:f0:fa:d3:de:
12:b0:e5:f6:f4:5d:7b:85:65:be:da:8f:23:86:2f:9f:32:41:
7d:e4:10:bd:68:ca:1c:b2:e7:ec:0d:dd:27:80:69:a9:a3:69:
79:e4:6d:7c:be:60:2c:e8:ac:4f:2c:ac:f8:bf:e2:38:db:a0:
c5:ba:78:20:80:76:80:e1:7f:04:51:3d:0a:e8:25:88:df:9a:
6c:d0:13:23:46:07:f3:2c:24:d4:2d:b2:2f:27:84:af:54:5f:
09:46:6b:b5:e1:5e:b6:96:f9:51:a3:68:0f:ad:6e:53:ae:52:
c6:24:53:1a:28:f9:3b:c1:d7:75:e7:a4:81:0d:f9:9c:1f:0b:
5b:c3:c6:03:85:ea:5e:17:f9:a9:c7:2f:78:c0:50:96:c2:72:
d8:1a:47:c6:3c:0f:13:e1:06:d8:e8:88:1b:f1:e5:f6:3d:06:
a0:aa:66:7b:6c:df:fa:e7:b9:6f:38:01:cf:1f:07:df:4c:e8:
4a:6a:25:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:11:55 2025 by rpki-client