Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json)
Hash identifier: j+KVOXxQbmu6LMFeYybyIl89ELYXjOqNtDyCH4bpYBw=
Subject key identifier: AB:5D:FD:4D:63:AB:80:25:CB:5B:AB:46:96:57:86:0C:03:E5:AE:9B
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial: 1D96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
Manifest number: 1D88
Signing time: Fri 31 Jan 2025 16:07:58 +0000
Manifest this update: Fri 31 Jan 2025 16:07:58 +0000
Manifest next update: Fri 07 Feb 2025 16:07:58 +0000
Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: oM4M5tkR9e0riWBgIXmEKqlk9d/yO9lHLBbqLJZHrFA=)
2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: 2edhdcxDL3hq/Y/5irWUYjIM2MnhCjcG113R+cVIiMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7574 (0x1d96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Validity
Not Before: Jan 31 16:07:58 2025 GMT
Not After : Feb 7 16:07:58 2025 GMT
Subject: CN=679cf55e-153f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:c7:7b:52:25:65:21:30:e4:a0:b4:b3:02:
8d:49:5a:f6:52:4d:c3:38:1f:c7:df:15:a2:52:44:
f7:f4:29:3e:f9:59:7f:a8:d6:86:0e:b1:87:09:b3:
43:25:42:20:5c:2a:63:c5:33:83:8f:52:90:d1:8c:
de:0f:44:ba:8d:fa:7e:b3:2f:e7:49:64:63:c7:a5:
3e:f2:fa:5a:a3:10:e8:9f:fb:6d:2c:2c:f8:d1:be:
07:41:1e:32:ac:87:7a:53:cf:24:3d:db:a1:9f:2f:
fb:21:80:f8:d9:c0:52:b6:6b:c9:ff:28:b1:7c:79:
a0:13:68:80:40:93:71:4a:85:c0:56:7a:2c:81:09:
a7:ae:f2:d4:f8:30:39:f2:e0:07:7d:8b:af:a2:ec:
b0:10:76:25:d2:9a:e2:5f:0f:3e:81:57:bf:c7:ee:
8b:3f:b9:cd:9a:b4:0c:5d:b0:fd:fb:24:af:ef:c2:
d9:b9:40:29:94:a2:4f:45:ee:ac:e1:a8:c0:92:ae:
be:81:0f:3b:6f:79:90:06:3e:e7:0b:8e:e6:4e:a3:
cc:25:ce:68:ad:9d:a8:44:12:ec:a0:04:f3:ec:77:
54:f1:46:d9:15:ec:44:59:38:92:5f:2c:03:41:a8:
4c:4a:a1:d2:ba:01:3e:87:f1:7d:d4:0a:87:55:68:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:FD:4D:63:AB:80:25:CB:5B:AB:46:96:57:86:0C:03:E5:AE:9B
X509v3 Authority Key Identifier:
keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:d6:d0:5c:9b:ab:e3:57:60:20:ac:c9:23:14:09:ad:c6:da:
36:11:f8:59:83:66:4f:1a:15:8d:64:b9:0e:1a:d9:95:8d:aa:
0d:b9:05:68:10:d0:9c:8e:70:a2:25:48:e2:5e:f4:25:f3:1f:
ea:e7:60:38:37:1b:5a:4a:fc:6a:ee:7d:fe:a1:8d:c0:ce:3d:
64:10:86:99:ae:7e:8e:e6:6f:5b:75:8f:63:49:a8:22:7c:c7:
dd:ff:3a:91:0b:9a:c3:35:58:f5:64:96:b3:74:3e:86:2b:4a:
f3:f7:1c:8c:53:77:81:4a:c4:cc:46:0c:1a:94:db:09:b3:00:
18:74:94:cc:2b:5e:02:05:07:6b:2b:35:e0:dd:e8:65:c8:e2:
38:3c:3a:70:12:fa:1c:70:bb:0c:c2:b9:46:7d:ba:0a:2c:5b:
a0:c0:a2:aa:a5:52:22:fe:58:de:13:6d:5a:18:44:c4:3d:26:
f8:33:78:ae:d9:ad:7e:0a:19:70:b8:57:e9:b6:37:a4:64:f8:
9b:75:69:41:32:65:e2:d4:52:31:cb:c4:4d:27:d6:15:8e:8d:
a9:75:4c:59:63:ae:d5:13:30:92:9a:87:7a:3b:7e:31:b8:cc:
ef:53:f0:8d:38:e1:63:92:f6:cf:ca:ec:d4:93:41:22:78:57:
be:19:f3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:17 2025 by rpki-client