Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft
File: hQaYWfujzd6OwbgaHgTdYFCzgRM.mft (raw, json)
Hash identifier: ujoOZINwlgjat4O62zD0Nj8YtA+93YYHphZQ+fPqkIg=
Subject key identifier: 13:D3:23:F7:4F:5A:B5:6C:62:CA:DA:12:BA:98:51:A2:48:AA:07:9C
Authority key identifier: 85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13
Certificate issuer: /CN=A91509C4/serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113
Certificate serial: 3449
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft
Manifest number: 3449
Signing time: Fri 31 Jan 2025 14:36:22 +0000
Manifest this update: Fri 31 Jan 2025 14:36:22 +0000
Manifest next update: Fri 07 Feb 2025 14:36:22 +0000
Files and hashes: 1: hQaYWfujzd6OwbgaHgTdYFCzgRM.crl (hash: 0e5nWtIg0wOmSxKY/WqZBxIow8WqPO6xiDUgyh18J/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13385 (0x3449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509C4/serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113
Validity
Not Before: Jan 31 14:36:22 2025 GMT
Not After : Feb 7 14:36:22 2025 GMT
Subject: CN=679cdfe6-db01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:c9:81:12:2f:3e:e6:dc:c5:96:be:f6:a8:
64:3f:80:42:9c:2c:48:d7:2b:45:18:68:9a:4e:6e:
69:a8:56:fd:54:37:a1:be:26:79:f3:d3:61:2f:e8:
ec:4c:56:f3:d8:e1:14:94:f6:35:7e:a4:61:b3:4f:
1a:8d:59:56:e3:5d:87:69:fc:c5:a0:2b:4f:7f:81:
8e:8f:00:44:87:7f:81:17:c3:35:08:81:5a:4f:d4:
88:3d:29:e4:85:1d:3f:91:8c:68:c8:9a:e1:00:5d:
04:3a:b4:a8:d8:21:2c:78:d7:44:f9:63:89:03:e1:
cf:f8:87:0d:a8:c7:c7:7a:b6:d5:97:ae:3b:a1:dc:
34:33:f1:bc:8c:b5:d8:b4:9b:4d:4b:8c:40:2d:d5:
b5:bb:c7:90:50:f3:f9:b7:41:5d:81:70:d3:4d:99:
ca:f7:57:5e:44:c1:cf:28:4d:fc:5a:21:88:ef:a9:
1a:89:e9:1c:93:b2:08:28:81:a6:4f:c2:0b:42:25:
b8:87:6c:f4:ca:a9:c4:ee:ef:23:cd:37:2c:09:25:
29:77:1d:70:4f:61:5a:c2:e4:d6:01:37:e8:1c:db:
6b:ff:69:9a:d2:85:79:63:a4:12:71:99:89:93:3a:
ac:2e:af:32:47:83:ba:ee:5c:34:cc:b2:0b:ee:3c:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D3:23:F7:4F:5A:B5:6C:62:CA:DA:12:BA:98:51:A2:48:AA:07:9C
X509v3 Authority Key Identifier:
keyid:85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:fd:f7:80:ea:e5:8d:5c:2e:72:7f:8b:18:cf:c8:2e:89:04:
b8:1a:1e:ba:df:e1:f2:d3:7a:97:e1:d3:3d:5f:7f:12:93:c6:
e1:f7:d0:c3:e6:c0:45:07:c3:fa:8b:31:73:6c:4b:0b:f4:a5:
30:fe:e0:ce:d3:16:79:fe:e8:af:86:5d:af:d9:42:29:2d:62:
f7:c9:fe:37:7a:04:72:05:d5:8a:7e:21:e8:82:2d:03:14:e9:
02:dd:11:4c:0b:5a:e9:63:c8:5a:d0:45:d2:0c:97:3a:77:ad:
af:a1:94:1f:29:18:97:1e:1b:a5:90:29:4b:5d:4e:59:c4:f1:
e9:33:3e:5d:78:a7:e8:19:b9:a3:da:42:42:2a:05:db:f4:d8:
42:ee:e5:d3:1d:52:3e:a8:be:a1:88:2a:36:f2:53:0f:ae:df:
3a:88:43:b4:5d:d3:da:b8:3c:16:04:b5:af:27:3c:a5:32:32:
5d:58:e5:e8:8b:7e:c0:24:a0:84:b7:7a:93:b5:c9:b5:c5:e3:
96:d9:e4:ac:ae:fa:07:6b:52:94:35:03:32:a4:fc:75:89:7c:
c0:20:d0:b0:c1:e1:1e:cd:0d:31:d5:28:fd:61:70:af:71:68:
dc:a2:e6:c3:ba:41:c1:35:3b:47:14:3a:db:09:30:9e:bd:0c:
c1:49:f6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:34 2025 by rpki-client