Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json)
Hash identifier: aKJ3LVNCJ8nHXrWlv+4NwPO7QPhHFztSrVQhrhEfWto=
Subject key identifier: 48:95:F1:46:AC:DA:3A:65:14:3C:7D:6F:DF:A9:B7:47:CB:54:9D:0E
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial: 04AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
Manifest number: 04A0
Signing time: Fri 31 Jan 2025 00:01:37 +0000
Manifest this update: Fri 31 Jan 2025 00:01:36 +0000
Manifest next update: Fri 07 Feb 2025 00:01:36 +0000
Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: 5WQhQ0gdJnzTL/Kngwdoy5pCvONuDeKmhddQ9daUz/c=)
2: BB682E3E81F711EF9D066A30C4F9AE02.roa (hash: UceF9Jk11/rYCZ/7KBV1vwtKGVF8D/5YWRRFXi2vUh0=)
3: 6608D04620E911EC891FA162C4F9AE02.roa (hash: Z4wJM9m1tPtvkDVz1F/WGCE99pWJyL2jqGPGtjvRAFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197 (0x4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Validity
Not Before: Jan 31 00:01:36 2025 GMT
Not After : Feb 7 00:01:36 2025 GMT
Subject: CN=679c12e1-b4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:7a:c3:1f:70:ba:15:c9:e7:fa:0a:58:02:
e1:6d:31:2a:9e:45:b5:50:70:9f:6f:90:ea:77:44:
a0:01:ee:28:33:1d:69:10:14:c5:68:c9:13:f1:b8:
99:ba:c6:9c:01:62:68:98:07:62:c3:d7:2f:0c:2f:
53:6f:b7:39:07:fb:fd:da:d5:bb:f9:24:45:21:a5:
f5:8a:5d:d2:25:31:b3:c3:9d:9c:42:6f:ff:d2:07:
4c:b8:b3:73:ea:8a:17:a1:55:3e:d5:0e:f2:e4:1e:
bc:26:92:ed:73:05:96:ed:55:e8:1e:1a:cc:2a:60:
90:9e:8a:d8:f9:76:5c:2d:d0:28:c7:ac:5b:0b:95:
2f:f8:00:b2:33:28:ff:15:0c:d4:c7:08:e7:dc:23:
24:77:f2:ba:ed:d8:fd:f7:8d:d0:19:64:b2:4a:65:
7b:0e:97:c1:e6:d0:19:00:71:10:3e:e1:06:ef:4d:
78:bb:36:15:9b:b2:74:8e:cc:32:f7:42:6d:db:49:
36:20:df:7c:f0:74:d9:9c:54:38:2f:7e:be:c3:17:
7c:e6:a5:bf:bf:25:05:33:b5:bf:1c:9d:d3:19:72:
7e:3e:02:95:b1:41:cc:10:3b:e9:45:b2:26:e6:ca:
5f:1b:73:10:07:0d:a5:dd:96:31:5d:f3:b6:53:1a:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:95:F1:46:AC:DA:3A:65:14:3C:7D:6F:DF:A9:B7:47:CB:54:9D:0E
X509v3 Authority Key Identifier:
keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:e7:46:73:a5:8b:cc:bb:8c:02:f9:34:b0:59:58:c7:6b:41:
8f:16:12:b5:d6:8e:2f:51:84:08:20:af:07:26:2c:05:f8:18:
0d:3e:a8:20:9b:30:9e:34:21:76:c9:4d:91:7c:73:62:79:ed:
d2:f4:c3:b0:81:f5:d3:6e:49:a8:14:ef:a0:ff:03:6c:bb:13:
1e:94:15:61:8d:4b:b4:ef:eb:be:2e:05:18:db:0f:df:c6:f8:
21:b6:35:68:14:4e:68:8e:86:fa:9d:15:f0:ce:db:ca:ec:05:
42:1c:fb:2d:1a:bf:2a:61:6b:17:ee:20:00:71:3c:df:59:4f:
f6:56:f4:88:39:d1:20:b9:6a:be:d7:8e:c9:1d:ce:d6:a7:f5:
bb:d1:65:e0:af:51:d2:a1:65:e4:97:22:fc:5d:c8:b7:4e:fe:
6c:fa:38:52:fa:5d:0b:9d:5a:e6:a0:9b:bb:5a:32:c9:78:93:
7c:47:61:fa:a3:b9:79:b9:b8:a9:e6:8a:75:2f:88:59:22:c8:
e3:26:43:81:3f:54:e9:07:e9:a1:8f:60:fb:7f:ea:84:e3:89:
95:51:ef:8b:da:ee:05:42:7f:73:4a:31:c8:d6:18:ec:a6:f0:
9f:a3:5c:b6:db:9d:4a:d4:6f:ad:67:ab:7f:1d:68:dd:3b:3a:
cb:e5:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:56 2025 by rpki-client