Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
File: HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json)
Hash identifier: G4Km9crhrlwskNFFZ7dYK1E7R8t44PLK5nD2t6bFqq8=
Subject key identifier: 00:9C:2C:36:E5:16:F4:45:28:94:A7:04:BC:FE:B8:A2:0C:66:22:68
Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
Certificate issuer: /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Certificate serial: 3452
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
Manifest number: 3452
Signing time: Fri 31 Jan 2025 14:21:38 +0000
Manifest this update: Fri 31 Jan 2025 14:21:37 +0000
Manifest next update: Fri 07 Feb 2025 14:21:37 +0000
Files and hashes: 1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: pChQmSpFdK5kvuOe1eVKog8drUpB8wcM4OKVbcp92tg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13394 (0x3452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Validity
Not Before: Jan 31 14:21:37 2025 GMT
Not After : Feb 7 14:21:37 2025 GMT
Subject: CN=679cdc72-ebb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:2d:03:ad:f5:0f:e1:66:d5:66:ce:f6:44:
18:cd:ee:b5:9c:91:63:42:2d:b6:72:ef:0b:77:b2:
a5:72:cb:98:6b:65:91:86:6d:72:c1:71:14:eb:97:
f3:a0:36:5e:6c:b1:33:ff:90:44:c5:66:8c:24:6a:
d3:22:f0:20:72:f8:98:25:07:8a:2e:c8:ce:12:5a:
6a:0f:0a:65:67:e3:27:a4:44:2d:f7:88:6e:11:4d:
2d:7f:da:0f:c3:db:14:21:35:4e:bc:bf:24:a4:47:
f2:9e:c5:0a:a8:8e:68:f8:89:39:b0:79:ed:99:bc:
b0:15:bc:6a:05:3e:5e:3b:c1:f0:6b:b2:cf:49:8c:
0f:f3:cf:54:d1:f1:1a:77:d9:da:69:95:07:3a:55:
e8:9e:2f:58:09:26:74:42:6f:3f:ac:30:fa:3a:2f:
9e:3a:00:35:9a:3a:e5:86:db:3d:1b:d1:1c:4d:7c:
c1:df:18:ef:0f:0b:ff:a7:9d:fe:29:5e:1f:74:3f:
f8:f4:86:8a:63:b3:80:d5:41:a9:18:83:a6:1a:38:
f2:2a:70:5f:4e:47:81:c6:33:8e:28:04:ae:9a:ce:
6a:58:14:75:07:ce:fc:36:b4:8e:86:26:03:cb:3a:
bd:42:56:99:0a:4e:e7:ce:65:08:ac:8e:1b:2b:c9:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9C:2C:36:E5:16:F4:45:28:94:A7:04:BC:FE:B8:A2:0C:66:22:68
X509v3 Authority Key Identifier:
keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:71:fe:ce:a1:f6:97:d8:b4:01:14:02:e7:1b:f4:19:85:7b:
43:91:3e:e2:21:b7:30:8b:4a:f2:84:dd:db:87:ca:34:0a:c8:
06:6c:8b:6d:95:c1:c6:48:74:83:47:cf:de:6d:26:cc:3e:e8:
37:81:ce:b1:26:df:82:75:b3:7c:2f:14:12:4d:f2:aa:99:c0:
82:5a:0a:43:bc:c6:dc:fd:bb:b3:91:f8:a5:46:67:aa:b2:39:
1f:9a:79:dd:c2:be:7b:76:63:ae:33:f2:07:28:14:0a:ca:5c:
8a:4f:80:0c:cd:0a:9d:fd:91:b1:fb:ad:33:73:27:87:ec:2f:
74:fb:39:d8:50:76:49:0e:75:d3:8d:e0:e0:2a:d3:60:dc:46:
68:68:e7:22:82:70:1b:a7:30:2e:04:c0:ef:7f:1a:f1:fa:3d:
99:0c:d9:a5:f4:54:f3:f1:9d:53:49:14:8b:6e:18:d4:a7:37:
fc:7c:9f:89:49:63:06:86:4b:9a:a8:0c:f1:ce:7f:87:70:fd:
70:e8:39:3b:c9:d0:c4:18:72:93:9c:2c:5c:35:df:17:6d:46:
ba:bb:9f:38:45:dc:da:ab:5b:7f:d3:f7:c6:7f:ac:78:d9:e1:
24:f4:90:59:7d:4e:3e:ec:bc:de:aa:9b:52:de:78:ef:99:7e:
2e:87:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:19 2025 by rpki-client