Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json)
Hash identifier: H2Oen+MUvh3Bq5HCQDUpU/TJJRTGALTI73GwLobOuaY=
Subject key identifier: 0A:79:FB:19:62:62:5B:89:7F:8C:55:16:14:B5:1D:CB:47:D4:62:13
Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF
Certificate serial: 285E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
Manifest number: 27FD
Signing time: Fri 31 Jan 2025 15:39:00 +0000
Manifest this update: Fri 31 Jan 2025 15:39:00 +0000
Manifest next update: Fri 07 Feb 2025 15:39:00 +0000
Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: 71Zp4RlFYs5XGC/dij4sEEm0s0r2ZbahKd2BLLiUpiY=)
2: E80155244EFD11EF99FE4856C4F9AE02.roa (hash: hfyfE9N6ld1QFNz3a2yfUkMnQVr9rHVNWpny7anBOBE=)
3: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: 2hcpqbSOO71GKCF97O1xMngLy9TNlcdtInTMrm5iIZg=)
4: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (hash: 45spZzwYEgk7lMaVKPpv4EgfLo7rx6qAOQmI8hJ4JNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10334 (0x285e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF
Validity
Not Before: Jan 31 15:39:00 2025 GMT
Not After : Feb 7 15:39:00 2025 GMT
Subject: CN=679cee94-fe78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:b0:85:66:1d:be:7a:ee:13:6b:3d:99:3c:
6c:a4:e3:ba:68:da:76:0c:99:85:ec:47:37:d4:1c:
45:0f:05:60:f8:92:00:a2:dd:6a:22:7f:c4:67:04:
cb:15:20:b6:ad:b5:94:99:9e:b6:ee:a9:b1:7e:09:
e3:0e:74:cc:00:18:39:8d:9a:43:d4:65:3b:96:c1:
fc:fd:f7:52:2d:73:32:31:a1:5c:96:cb:d1:11:c7:
40:8a:4d:8b:9f:e0:83:a8:77:e7:05:31:79:f1:3c:
69:28:ad:38:da:ae:8c:43:b7:80:0d:e6:b8:74:6f:
b6:b2:5c:f9:41:47:3b:2f:c2:dd:a9:cc:66:12:6b:
a8:b1:80:3f:fe:d7:72:af:fb:5c:0b:db:70:a7:f8:
53:7e:0a:1f:99:e5:f2:41:e2:cd:88:9b:08:74:dc:
89:de:0f:da:54:6e:30:bd:4b:96:c1:37:f8:f4:18:
79:c7:db:8b:d0:c4:5a:48:de:1a:97:c9:fe:4c:38:
ee:90:53:58:d2:4b:a4:32:4b:63:74:2c:21:c6:73:
a1:9b:1f:4d:f5:da:a5:2d:8f:68:4a:a6:d8:62:e7:
eb:01:33:ac:21:c1:e4:33:5c:ac:34:22:c5:f2:de:
8c:cd:3b:72:43:ed:af:b6:a8:e6:63:b0:c3:84:18:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:79:FB:19:62:62:5B:89:7F:8C:55:16:14:B5:1D:CB:47:D4:62:13
X509v3 Authority Key Identifier:
keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a6:de:56:cf:4b:4f:d1:ad:99:fe:96:53:a2:54:98:ae:f3:
10:89:03:78:ab:95:56:94:9f:ac:14:cf:77:0b:2d:07:01:8e:
7f:81:10:da:47:0d:97:47:81:d7:8c:b3:26:9e:33:0d:06:61:
2e:43:56:35:50:0e:38:3b:dd:31:78:b3:96:59:d4:99:a5:49:
96:1c:c2:93:c6:82:a2:89:b8:63:1d:7f:aa:b2:c1:d0:b1:56:
09:5f:e7:38:da:b9:ae:2d:96:7f:ae:66:03:54:d8:e1:24:ea:
85:c7:68:ac:6d:b2:82:bf:63:47:f4:00:2c:3a:48:f0:46:5b:
bb:8e:56:fe:34:f7:fc:79:a7:05:be:09:8a:c9:2c:c6:10:56:
af:47:13:0d:70:20:af:d7:f1:e4:5a:2b:5a:47:9b:ad:f5:c0:
0c:d0:a9:a3:7d:ea:95:82:ff:1e:3c:bf:34:99:12:ca:a1:21:
5c:c4:74:94:03:01:07:c8:8c:0b:bb:2d:ad:d3:ab:f8:44:c7:
ac:e2:d4:61:d4:ee:da:fd:51:ae:de:12:e0:1c:0b:ee:7d:c5:
8d:7c:f8:ef:8e:8c:b9:e9:95:48:76:7d:1c:33:4b:17:b6:00:
6f:fd:f9:bc:d3:14:28:b2:3d:a3:03:3c:36:79:b7:75:00:39:
cc:ed:71:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:21 2025 by rpki-client