Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json)
Hash identifier: x5KJablRDV+y11YnSrJjB+vbIQEAas6OhqpPB2klz7w=
Subject key identifier: 8C:27:BD:BA:53:C5:31:9D:1E:8A:B1:89:82:5E:71:EC:09:42:02:94
Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
Manifest number: 015F
Signing time: Fri 31 Jan 2025 03:17:14 +0000
Manifest this update: Fri 31 Jan 2025 03:17:13 +0000
Manifest next update: Fri 07 Feb 2025 03:17:13 +0000
Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: hieXG2AbXIPvabmHpRCQ42ofvEo/R+jqxKr6qmwGa7w=)
2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: wjMufEaDH/y4s6T5wRstNmQqRorcPZgCttuLv7sLSbk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Validity
Not Before: Jan 31 03:17:13 2025 GMT
Not After : Feb 7 03:17:13 2025 GMT
Subject: CN=679c40b9-4eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5d:1a:d7:ca:6d:34:eb:8a:ed:21:38:7b:be:
58:c3:03:39:72:f4:c4:b3:34:1b:b0:f2:9a:97:1e:
d3:cd:fc:ab:77:23:01:c7:8e:07:ea:27:85:d4:83:
d1:c6:42:1d:70:54:09:f4:0c:b2:4a:e0:3d:e4:dc:
90:23:81:e5:c4:dc:2e:29:47:c2:a0:41:43:45:60:
7e:cf:6d:f4:49:06:c0:68:ad:ca:7a:83:a0:c6:c6:
f8:92:e6:c1:8c:17:b5:3b:a5:c1:20:af:27:68:6e:
c6:49:75:50:35:18:3f:66:aa:1a:c2:10:10:a1:9e:
97:32:46:e2:60:39:d1:25:e5:51:59:3b:56:4c:f9:
c6:14:6e:f0:64:c3:c7:ec:e7:49:15:9c:95:4b:cd:
bb:76:ba:01:5c:cb:92:1b:48:8c:5d:37:64:79:cf:
2b:42:c1:c3:14:c2:00:77:ea:1c:8b:72:a0:55:a2:
f4:a5:55:1d:fb:6e:b1:e7:f4:18:6c:85:b5:cd:49:
93:cd:9a:cd:3a:38:39:59:45:40:bb:6e:64:03:2c:
3e:51:0e:0c:05:4e:aa:60:78:97:78:53:55:11:80:
9d:48:f2:9d:42:aa:2c:02:d6:fe:c0:ec:ab:03:fa:
64:3e:60:07:50:64:18:72:cb:bc:91:f0:8c:85:4f:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:27:BD:BA:53:C5:31:9D:1E:8A:B1:89:82:5E:71:EC:09:42:02:94
X509v3 Authority Key Identifier:
keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ea:f6:d9:2f:59:87:26:8e:62:36:22:f1:46:7f:7b:d3:a8:
38:0a:85:29:37:cf:36:41:69:09:13:61:44:18:c1:7a:51:29:
44:ef:52:58:9d:5f:e7:92:cc:ae:b6:b2:1d:5e:bd:a2:b0:0b:
74:13:ea:24:6d:a3:32:4a:76:84:87:d1:66:18:ec:2a:75:10:
ad:7a:76:5b:ba:73:54:5c:7e:09:e1:5b:38:ec:41:82:3b:96:
9a:7a:fb:92:5c:c5:aa:2d:79:71:d1:79:d7:08:eb:fb:6d:51:
6f:3f:2e:b1:b7:6c:b3:30:75:b0:cd:d1:24:bf:ab:73:67:40:
00:58:3a:87:f0:1c:6b:34:80:a1:b6:f1:07:7c:fd:e2:78:de:
c3:f0:26:e5:37:08:c3:c6:27:4d:39:fd:fc:7c:25:c6:17:bb:
ed:8f:64:5a:75:26:c6:50:0f:55:80:44:f7:04:9e:dd:02:91:
b8:ed:f4:f0:84:97:0a:65:f4:e1:be:2b:48:ef:2a:1d:a4:de:
34:09:3d:dc:2f:bc:9e:fd:35:ee:e7:f4:9c:cf:94:9c:24:e9:
7a:29:58:91:d1:23:07:bd:31:40:a6:62:26:56:ac:8f:04:9a:
14:d9:70:d6:b9:6c:2a:23:e6:f2:31:74:df:ad:b1:9a:96:aa:
99:49:11:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:44 2025 by rpki-client