
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json)
Hash identifier: iCxC95VC6eZFdn0o3YGRI/8tJ1yc6kIeSid/sXG6tmk=
Subject key identifier: 36:55:63:8C:98:80:03:EA:8B:0D:00:99:04:5F:03:E8:94:CB:7A:6F
Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04
Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
Certificate serial: 0758
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
Manifest number: 0752
Signing time: Thu 30 Jan 2025 21:29:46 +0000
Manifest this update: Thu 30 Jan 2025 21:29:45 +0000
Manifest next update: Thu 06 Feb 2025 21:29:45 +0000
Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: 4PZ6oA635d32vnQE0DRxad2w6+dHqyewdBXi3lEx5ag=)
2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: V4JUuTRtv40XYY/VZRfInArQdDKfffORyJnUaqVGJBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1880 (0x758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
Validity
Not Before: Jan 30 21:29:45 2025 GMT
Not After : Feb 6 21:29:45 2025 GMT
Subject: CN=679bef49-f9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:32:2d:03:ec:a3:87:b3:e7:fd:31:3b:91:
a9:84:2d:76:70:24:0a:25:3e:14:86:4f:b6:4e:de:
bb:57:81:24:a8:69:1b:20:4f:5f:17:90:da:cf:0f:
48:96:1d:5d:36:7d:44:f7:6f:32:96:30:22:1c:1f:
47:e3:12:eb:04:20:0c:47:28:ee:5d:af:73:a6:11:
2c:77:dc:d7:a1:fb:45:a9:6f:4c:8e:13:2c:ad:ce:
ee:8d:4b:80:cd:53:1e:e0:3c:d3:b4:85:81:10:97:
57:c7:13:fd:b5:ad:3b:77:59:77:6c:9b:22:e9:ae:
9c:c0:e1:49:16:54:12:51:80:22:7a:a3:a9:08:22:
76:71:7e:e8:02:ba:b2:60:f9:60:a3:a1:be:61:91:
8d:73:98:15:98:ba:aa:1b:d5:6f:0c:42:40:d5:1a:
60:c9:7d:84:dd:57:be:82:1b:e0:eb:9c:da:bd:58:
a9:11:f9:8a:aa:59:dc:bc:2d:0a:7c:a7:a7:bf:0c:
e5:89:c9:5c:f8:f6:7e:47:1c:71:c5:56:a6:e3:7d:
97:e8:26:c7:da:64:5f:13:e5:7c:22:21:0f:bb:84:
33:bb:35:91:54:aa:34:f4:07:02:1d:3e:d3:ef:08:
7c:e1:27:bc:52:ba:82:55:ad:a9:15:da:69:f0:08:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:55:63:8C:98:80:03:EA:8B:0D:00:99:04:5F:03:E8:94:CB:7A:6F
X509v3 Authority Key Identifier:
keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:17:da:56:e3:a1:6a:d9:1b:4c:63:7a:a1:43:3e:63:cf:79:
bd:56:df:ae:ec:2f:9a:a7:21:00:8e:af:a1:38:a6:83:b8:23:
50:d5:5f:5e:a3:82:61:33:f4:1f:2e:ab:3e:4f:0f:3b:0c:df:
8c:3d:87:f6:c8:6e:0c:07:c2:c8:df:0a:0d:23:12:86:dc:1e:
1f:48:18:7a:1b:b5:ed:d3:ef:59:82:52:52:f2:49:db:53:9a:
02:d9:f8:9b:d5:9e:68:4d:02:33:d8:08:82:99:78:b9:90:f2:
39:ad:69:d3:2f:26:5d:85:f8:08:5a:c7:5a:bc:d3:17:69:9e:
ba:ef:eb:97:dc:66:e5:f6:88:32:5b:6f:23:39:31:65:5c:c3:
c6:06:7f:04:19:73:2d:f2:9d:42:04:ae:19:6d:a6:f0:8a:5c:
b0:02:e2:cb:59:07:48:5a:52:63:5c:40:d2:13:9e:28:38:31:
81:ca:56:82:7f:0c:84:89:39:12:83:7a:89:39:bb:d7:c2:54:
c3:61:e9:ce:70:d1:f3:64:de:68:4c:6d:4e:1a:dd:21:38:f3:
be:20:4f:cc:09:49:ab:d7:a8:0f:c6:d5:77:c0:14:44:cb:10:
da:72:aa:8c:69:8a:70:13:73:c0:55:74:d3:f3:94:a9:de:98:
bd:09:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:31 2025 by rpki-client