Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json)
Hash identifier: kx5Aw8PMkMp04gRc+5LKliQ/yKQBlwdAQkmRCgzlXPQ=
Subject key identifier: EB:15:C3:21:15:A2:52:64:48:39:B6:50:46:52:39:54:01:98:EE:A6
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial: 032C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
Manifest number: 031F
Signing time: Fri 31 Jan 2025 01:16:28 +0000
Manifest this update: Fri 31 Jan 2025 01:16:27 +0000
Manifest next update: Fri 07 Feb 2025 01:16:27 +0000
Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: Y5DaFByfy9qC6zetWZQ97eqpKhnC8WsI1zgl7JH4PyQ=)
2: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: zs8pktOPHfnvWWzwinv/ESKJvGvVgZacv2SjT79jDzY=)
3: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: Qkfcmv4EU2MLLZ10mmkNAoxwMk8NbbQ+23qgsWTS+60=)
4: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: NaRD0KK1jvEXy4kbPXxWydeJpUs02KFzpXWmIcbr+ww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Validity
Not Before: Jan 31 01:16:27 2025 GMT
Not After : Feb 7 01:16:27 2025 GMT
Subject: CN=679c246c-0247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8f:7d:1c:31:d0:0e:6f:18:0a:fa:42:70:36:
1a:17:9e:66:b4:2f:00:d8:02:26:00:b7:8a:89:25:
0d:f0:dc:a6:11:3e:e0:02:9c:82:36:2e:b7:86:6a:
19:2e:2c:60:3e:ca:1f:1d:32:6e:20:a7:bc:39:9b:
59:24:4f:8c:bd:ca:d4:60:85:72:f3:6f:72:d0:d0:
8a:ad:a6:5b:97:0f:42:73:02:61:87:4d:fb:f8:80:
83:fe:13:c4:90:82:2c:36:60:cc:9e:cd:32:d9:b6:
66:20:e8:2e:2e:e3:70:0e:6c:1b:4d:16:5b:a1:dd:
59:77:6d:81:40:34:18:9a:51:cf:dc:1e:cc:fb:af:
34:75:c4:73:88:9d:16:3c:90:4b:03:ac:6b:f7:ed:
44:ac:3f:b6:9f:17:31:79:c4:a3:cb:7c:51:d3:ed:
bc:25:78:63:01:7c:51:3e:f2:06:df:a6:bc:13:58:
0c:35:4a:1a:53:52:27:5b:39:46:bf:8b:40:d4:3e:
51:eb:23:f7:4b:9d:86:e1:d0:ab:63:f3:27:79:a2:
b5:f0:5b:b0:21:0b:a3:32:37:c0:9f:01:13:3a:a0:
9c:60:92:46:6d:c1:3b:7d:b2:dd:9f:0e:28:a7:66:
5b:e2:86:5d:d7:db:d0:13:16:08:6b:1b:45:27:34:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:15:C3:21:15:A2:52:64:48:39:B6:50:46:52:39:54:01:98:EE:A6
X509v3 Authority Key Identifier:
keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d0:b8:1c:b1:a1:d1:36:f3:a9:c4:bf:a4:80:c3:5a:5f:32:
38:51:02:cf:da:78:5a:56:c4:16:97:05:6a:f2:04:41:00:19:
58:d6:d6:b3:5f:cf:80:4b:c6:d1:03:1e:eb:31:9b:d7:48:1a:
6b:c3:18:42:13:78:59:f8:74:12:66:75:49:e2:2e:78:1e:c4:
f7:75:a7:d7:e4:5d:61:24:aa:b5:00:c3:df:ad:6c:c9:c6:eb:
92:ab:66:25:1e:02:72:98:be:96:bd:3e:f3:cf:41:49:1b:64:
f4:a8:df:b8:14:ff:84:0f:be:1e:ca:fe:c3:01:03:5a:e5:88:
f5:98:1f:d1:c8:26:6e:86:cc:2f:47:24:6d:c8:5f:b7:5e:3c:
2d:c4:3a:ff:be:5c:0e:c8:f1:77:85:96:ef:b0:d9:f0:d0:df:
f4:84:d5:51:db:80:72:e7:66:20:81:2a:5d:d8:d1:bc:96:f4:
5a:da:65:96:56:c3:8b:fd:ee:52:8c:35:4e:02:ba:0c:f0:d7:
a8:3e:cb:e4:54:d0:2c:ef:41:59:35:74:af:8e:0d:f3:7f:77:
37:78:2f:36:10:3f:7f:c1:c5:5a:6a:4e:ed:32:dc:d4:3e:a0:
1e:cc:11:2b:cc:81:58:c7:16:9c:1f:2f:ea:e4:63:3e:02:61:
43:d4:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:52 2025 by rpki-client