Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier: xrjKoA/6bfQsDDMFYEX2wbVx38DgsDCEXusVVnM7lfY=
Subject key identifier: A5:5E:DF:91:F4:2B:D9:D7:A1:15:E6:3B:D5:3D:92:AD:1E:8C:E2:48
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer: /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 06:47:04 +0000
Manifest this update: Fri 31 Jan 2025 06:47:03 +0000
Manifest next update: Fri 07 Feb 2025 06:47:03 +0000
Files and hashes: 1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: 4KJq42B3jgzZ6cgCL0qWRqGYQhg5x0HYOo4Ydxt+qmU=)
2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: ow0JlSSKtHwrzhAKotnC4Hb7SPL+BmK/kbudjjYhQGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Validity
Not Before: Jan 31 06:47:03 2025 GMT
Not After : Feb 7 06:47:03 2025 GMT
Subject: CN=679c71e8-c8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:22:a1:3e:da:4a:55:8a:e5:cc:f9:0e:1b:
82:31:ad:5f:ae:8d:bf:93:76:1e:d2:8e:60:4e:f3:
d7:03:99:58:85:54:67:f3:ad:48:ed:67:d4:22:b8:
b4:5e:0e:19:bb:6a:8e:2c:44:3e:88:24:5d:de:98:
12:0b:14:c1:c0:92:f7:8e:80:7f:ac:b3:3d:19:51:
60:ff:72:9c:b9:b5:e2:eb:08:a7:de:2f:de:f7:9b:
e1:b1:25:a8:68:7e:d5:42:a8:33:3b:35:c5:fd:1c:
81:06:c9:a5:7e:a1:72:b9:ee:2d:ca:92:55:2c:fc:
0b:ca:f3:dd:7a:4e:8c:68:80:b1:58:a9:23:5e:4c:
0f:1d:65:07:6e:1c:b0:66:b1:a0:fe:fe:b7:3f:a7:
86:ef:70:12:90:ec:b5:7f:45:11:8d:c3:3a:d6:3e:
9c:b3:8d:25:7f:8d:d4:ef:c9:b2:0e:51:43:19:7d:
2b:00:cb:24:65:54:b1:65:f9:1f:75:d1:3b:0d:b1:
0c:c4:d6:75:7b:06:8e:8e:39:57:e4:78:1d:de:67:
72:d7:8b:84:2c:3d:54:3c:01:10:94:95:49:41:cc:
a0:57:56:fd:e6:e0:85:9d:af:7d:85:c8:6e:98:ea:
cb:00:a9:08:fa:26:89:9d:6e:f7:87:54:87:b8:9d:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:DF:91:F4:2B:D9:D7:A1:15:E6:3B:D5:3D:92:AD:1E:8C:E2:48
X509v3 Authority Key Identifier:
keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:5b:71:92:bf:d8:61:65:fd:9f:1d:59:44:4a:d3:56:8b:7d:
a4:28:59:5a:4b:0f:39:f1:6d:39:bf:8b:8b:41:7e:01:0f:e7:
4b:7a:5e:ba:bd:a3:a1:e0:fb:69:46:39:bc:1d:ef:8a:62:27:
56:9e:c9:19:07:ec:7d:3d:ec:58:a9:bc:bf:94:e2:9d:94:01:
21:c6:55:9b:08:c4:8e:e9:13:17:83:f9:a4:3c:cb:d8:37:06:
c5:29:6c:c3:c8:0f:c7:be:15:79:e8:d1:2c:dc:29:d0:4a:58:
07:45:b3:64:7d:fb:05:0d:90:33:19:13:22:78:56:21:ea:c5:
d6:81:57:56:4f:31:02:29:7e:07:1f:ce:29:8f:3d:0b:b1:31:
ea:81:af:01:41:53:1f:c1:f9:e4:03:9f:c4:08:77:cf:71:86:
9a:10:e1:2c:a6:8f:b4:0b:ec:f7:19:d9:93:1c:6e:a4:af:0c:
ec:aa:72:50:d8:98:48:f9:26:41:8f:a9:ef:d3:9a:40:92:e5:
df:02:c4:1c:fd:91:de:e6:41:2d:d4:2b:be:99:d5:3f:eb:2f:
0e:a2:b5:d9:6e:e8:84:69:56:a8:08:8a:9f:c5:34:0d:45:3f:
fe:fb:30:a0:b5:1b:c0:b6:06:7c:e8:5d:af:12:7b:56:cc:01:
6c:98:02:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:49:24 2025 by rpki-client