Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
File: ulHQnhOT5woFhzID_3zE4f1-pw8.mft (raw, json)
Hash identifier: 7mUgxtHrgwW6U4MW/gWXdUSZM4ozz2KUIk34dumnUo8=
Subject key identifier: D0:31:14:B9:7A:A2:EE:D0:51:0E:21:BF:42:4D:B7:39:1D:86:98:17
Authority key identifier: BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
Certificate issuer: /CN=A9168B03/serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
Certificate serial: 1B9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
Manifest number: 1B92
Signing time: Fri 31 Jan 2025 16:16:07 +0000
Manifest this update: Fri 31 Jan 2025 16:16:06 +0000
Manifest next update: Fri 07 Feb 2025 16:16:06 +0000
Files and hashes: 1: ulHQnhOT5woFhzID_3zE4f1-pw8.crl (hash: WMDtGVspClHbQAg3iuYN9Xxj6jHrEGxtrcFkCbMhd+Y=)
2: D3EAE1500B5911EA8CC1114BC4F9AE02.roa (hash: 6kshU0HtAchRgiTjP8s8Hd2WuIT7tJbRCmHqG1erYdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7071 (0x1b9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B03/serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
Validity
Not Before: Jan 31 16:16:06 2025 GMT
Not After : Feb 7 16:16:06 2025 GMT
Subject: CN=679cf746-6328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:c7:ac:05:43:a6:20:db:45:6d:19:b9:58:
95:b2:82:3b:07:48:ba:7d:07:99:50:f2:d7:21:cc:
fc:46:fa:fb:d3:56:af:af:34:82:8e:b0:1b:30:c2:
87:7f:7d:28:70:a1:44:f0:6b:94:9a:3d:34:8a:83:
a8:0b:18:89:a1:cd:51:39:64:49:5b:da:a6:5b:14:
73:8b:5b:7d:45:ca:82:5f:c7:42:74:72:32:b0:e8:
b5:2a:b6:08:f0:94:09:2e:c8:8c:7b:c8:eb:f4:bf:
aa:7a:46:d2:9f:56:74:82:5d:9b:72:bf:ea:47:fd:
5f:89:a3:d2:aa:3d:d5:6c:a1:6f:78:f2:18:ee:0f:
53:cf:ad:ae:8d:f1:7d:b6:c6:46:9d:c9:1e:f6:71:
08:33:5f:cc:24:2e:c1:e4:fa:5c:00:4e:b6:be:c9:
99:38:cd:b1:23:f9:06:11:43:d0:1b:37:91:b8:cf:
92:5f:1e:9a:12:97:1d:07:72:b6:8c:33:05:37:9a:
97:0a:92:f9:a9:a2:f7:b6:ad:6d:e5:70:fe:fb:9e:
90:6d:59:81:2a:ed:81:af:7c:81:e6:65:fe:50:67:
6c:0b:a2:5e:de:6a:5b:c9:af:04:1f:32:70:9c:22:
95:8c:09:51:ed:bf:8f:31:76:22:c4:1c:d3:a9:45:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:14:B9:7A:A2:EE:D0:51:0E:21:BF:42:4D:B7:39:1D:86:98:17
X509v3 Authority Key Identifier:
keyid:BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:60:b4:01:c3:25:ad:3c:a1:b0:4f:d4:9b:34:ec:82:fc:63:
ef:f4:6d:b2:ce:7a:40:13:ed:25:23:b7:b3:32:a5:bd:95:69:
35:30:15:f7:fa:85:d4:eb:97:d1:76:bc:14:8b:57:be:22:5d:
6c:9c:76:ad:61:5d:1d:7f:b6:68:50:46:ca:7c:00:ad:8d:5e:
28:19:8d:5c:61:38:c0:33:ba:dc:e9:a6:c9:dd:80:3c:ac:72:
df:ca:ce:f0:8c:66:84:b4:94:a4:50:56:94:c6:94:6a:1e:ab:
88:7b:aa:4a:d6:21:75:5d:23:fc:a1:06:b1:bd:52:af:e7:9a:
e2:35:94:30:48:82:38:b4:bf:71:99:6e:e6:80:82:17:01:26:
a4:2d:1a:f1:42:b6:d4:80:39:47:e3:64:53:b6:1d:23:da:e1:
81:1a:b0:9a:02:ac:21:89:99:76:c4:41:9d:15:6a:76:25:11:
d1:ed:e3:0c:8d:d1:db:49:33:8e:fe:46:17:78:78:c8:56:0e:
39:f4:f5:21:d6:50:29:0d:ae:dc:36:0f:cf:df:df:a8:9b:38:
3d:bb:cf:6d:b0:c3:a4:6a:bd:66:8d:01:59:a3:b5:3f:26:ac:
5c:e9:e6:32:e7:60:e7:fd:80:25:01:b2:3e:8c:53:12:38:d4:
b1:e9:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:46:42 2025 by rpki-client