Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json)
Hash identifier: DTgFYl6KZZLMe9+G/bhdbwbd7dV8PAr5rSccgniFiw0=
Subject key identifier: 38:E9:64:E7:AE:36:A3:00:DB:E8:51:3D:81:6B:1D:7E:5D:2D:AD:45
Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Certificate serial: 0BFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
Manifest number: 0BF0
Signing time: Fri 31 Jan 2025 18:34:50 +0000
Manifest this update: Fri 31 Jan 2025 18:34:50 +0000
Manifest next update: Fri 07 Feb 2025 18:34:50 +0000
Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: 4jhH9Y7FLeCwcS2gQai+VQobFgrIKBGwoI3krrgpw9Y=)
2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: m+JE5pCglgWFiHYLAbZNmBupgcN+FxTJD3mSp1g3gfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Validity
Not Before: Jan 31 18:34:50 2025 GMT
Not After : Feb 7 18:34:50 2025 GMT
Subject: CN=679d17ca-a52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:ea:ae:eb:10:e3:62:09:9f:72:89:f6:2c:
4e:96:97:47:a7:f3:7b:1a:28:4d:ed:12:07:0b:c7:
29:7c:e9:8b:88:ab:39:e1:63:24:81:0d:bf:04:b9:
c6:04:cc:83:81:f0:4c:fb:af:31:2e:3e:d2:3f:a4:
f4:bf:29:21:e2:dc:7e:d1:03:2f:19:1f:d8:b6:79:
68:82:8f:6c:a6:e4:15:6d:75:90:0a:4c:f1:4b:19:
e7:0d:54:66:e1:53:94:85:4a:98:49:1c:e0:2d:e4:
76:f2:dd:0f:46:e1:c2:ed:3d:1e:7e:e3:b5:be:d8:
53:7e:25:2e:82:f9:86:0b:d5:7f:39:96:3e:3b:4f:
20:e9:a3:35:ae:37:bb:88:77:e9:81:c6:4f:72:71:
d1:22:e9:54:f5:4c:02:a2:51:2d:28:51:c4:ba:4e:
e5:4b:95:b8:91:d6:e7:50:4b:65:c8:a7:e0:88:d1:
3d:52:22:ba:9d:ba:b8:e4:98:1a:2f:01:33:90:19:
0b:ba:11:c9:f5:8b:45:28:7a:af:91:56:10:10:14:
34:14:01:7c:64:8e:83:a3:01:06:9c:a2:4f:a4:5a:
43:93:81:e1:fb:31:28:fb:90:8b:32:cd:a2:4a:36:
b0:7d:45:3e:e7:66:13:7d:7e:ec:63:fb:b2:f8:23:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E9:64:E7:AE:36:A3:00:DB:E8:51:3D:81:6B:1D:7E:5D:2D:AD:45
X509v3 Authority Key Identifier:
keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:10:fb:52:6c:12:74:43:af:34:16:46:de:33:9e:95:d7:b0:
fd:18:26:82:83:06:91:ad:3d:f5:d9:99:2a:92:ea:59:e0:f6:
33:f4:f6:3d:43:d0:05:2e:e8:8e:73:b2:ed:c1:ec:89:e3:89:
54:86:7f:ff:5e:30:87:7f:a8:f6:6b:d5:82:ac:b8:b2:f0:c3:
c1:c8:a3:b4:75:4c:3e:6a:33:e2:20:e0:b0:f5:cf:55:7c:50:
fd:5a:13:83:cb:85:d7:c9:17:3f:35:86:d9:22:2a:1e:69:02:
14:f9:4d:a1:0c:b1:ec:d0:c9:c4:ba:9e:3d:90:7f:3c:0d:b9:
fe:92:dd:ff:39:89:62:13:a3:66:2b:3e:28:01:59:cb:80:24:
9a:d8:d4:23:f9:8c:cb:75:44:01:81:94:9c:40:ff:1e:5d:b6:
e3:ed:01:42:53:c6:1f:97:08:6d:6c:f2:d3:5c:01:50:0a:87:
cd:ed:89:91:71:39:40:9d:0c:ee:91:21:1c:3b:76:0b:56:d0:
19:b1:9b:80:3d:d8:b8:e5:c3:49:a2:bb:02:d1:c9:4f:61:52:
4a:61:73:4a:a0:f6:1f:b3:00:4e:20:04:4a:51:6c:b6:b3:fe:
f6:74:d1:f7:be:ea:7a:39:20:63:fe:da:36:ac:39:37:b2:af:
6a:a6:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:21 2025 by rpki-client