Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
File: 2HXmPHNQjdifas3MBgFEoIwIZtw.mft (raw, json)
Hash identifier: 8ZRSE6PNoNRNwMtSqapbn9Y/yvH1P7JgN7GIJR3sYOE=
Subject key identifier: 97:F2:33:CE:59:8F:0E:58:CC:96:7C:1B:7B:C6:9C:22:1D:BD:85:EE
Authority key identifier: D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC
Certificate issuer: /CN=A914E950/serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
Certificate serial: 0384
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
Manifest number: 0380
Signing time: Fri 31 Jan 2025 00:54:27 +0000
Manifest this update: Fri 31 Jan 2025 00:54:26 +0000
Manifest next update: Fri 07 Feb 2025 00:54:26 +0000
Files and hashes: 1: 2HXmPHNQjdifas3MBgFEoIwIZtw.crl (hash: aTVz9RWZauYfQbzKl+TVnv6M4iBDIZwspmu7R2mgq4c=)
2: 6199B5668DE011ECB9F9C06EC4F9AE02.roa (hash: 2v76irvv8YBootZ9ixmNS7BdVolsdY5VCXkGVLqaKlA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E950/serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
Validity
Not Before: Jan 31 00:54:26 2025 GMT
Not After : Feb 7 00:54:26 2025 GMT
Subject: CN=679c1f43-bbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:20:d5:4d:2a:23:7d:1b:14:e6:a7:ed:23:79:
69:e1:25:ca:74:75:2a:1c:64:b3:e8:21:0e:c2:28:
d2:d4:88:e6:87:37:07:e9:d7:27:8d:18:92:1d:87:
57:8b:98:f2:65:3c:24:a6:c7:05:25:95:3e:1a:6f:
03:e9:03:7a:00:0c:06:4a:55:bd:38:20:d4:48:10:
1b:7a:08:c3:35:59:8c:68:51:72:a6:fc:4d:8e:b1:
ab:4b:b4:6b:a6:a1:43:13:5c:ee:be:9b:33:f6:32:
61:2a:63:30:60:21:42:82:07:bd:b6:a6:e8:db:a9:
f7:28:7e:45:e9:99:b3:5e:2f:5e:27:f4:3c:8a:33:
ba:c7:b8:90:16:9b:12:79:09:fb:df:2a:64:d6:57:
0f:8c:0c:8b:6b:a5:51:30:83:46:7a:0d:40:ce:ac:
eb:ad:dd:c3:a5:d4:8e:52:3a:47:71:a7:f1:2c:16:
42:48:30:28:2b:1c:cc:78:19:ca:b0:23:84:e5:b4:
50:4c:a9:16:e8:66:86:56:d6:4c:61:16:aa:8b:18:
c6:26:fe:8b:33:23:00:93:e7:a6:90:fa:d2:39:e3:
48:81:ac:52:a6:59:48:9f:a1:9f:98:28:d3:66:33:
85:89:64:63:3c:8a:bd:39:ae:83:df:94:e6:aa:53:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F2:33:CE:59:8F:0E:58:CC:96:7C:1B:7B:C6:9C:22:1D:BD:85:EE
X509v3 Authority Key Identifier:
keyid:D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8d:42:9b:ce:14:b5:ae:94:ff:a3:76:ab:ad:01:96:22:8b:
66:56:10:0d:84:58:a5:8e:40:54:12:6e:8d:d5:29:22:2e:5e:
9a:b9:ef:2e:27:7c:62:bc:9f:e5:92:d3:89:cc:b7:37:16:24:
b8:07:f6:a4:2b:ad:06:d6:02:ad:69:90:6c:f7:74:bd:88:bf:
2c:f1:0e:00:82:0e:f0:75:b7:e3:48:a2:b7:68:01:0b:f3:23:
fa:44:6b:f6:e1:ea:5e:b0:dd:dd:0c:64:6d:b4:ac:47:58:7a:
1e:d2:93:a5:e9:f2:9a:75:a1:ba:7e:a0:50:84:22:a7:bc:b5:
76:d8:af:eb:7e:fa:17:e3:dc:e5:da:be:84:d9:9e:dc:98:5f:
76:f4:b1:56:7d:bd:82:92:00:e3:82:62:d5:3b:cb:1e:b3:1c:
ce:6b:08:7d:81:d6:b4:9d:bb:d8:cf:56:47:b3:b3:a8:b4:42:
b3:ef:ff:30:c2:f9:0e:26:bb:09:be:65:d2:ba:8b:8c:a0:a2:
f7:8a:d0:ee:c3:54:31:78:eb:ef:62:f2:70:84:f3:01:c3:35:
4a:ad:10:47:a0:32:25:46:cc:88:f5:af:81:98:d2:1e:56:21:
19:f6:0c:96:ba:a7:7f:82:2d:a9:b2:4f:d7:b6:e2:64:14:fd:
7c:f0:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:54 2025 by rpki-client