Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json)
Hash identifier: RNCv4VgtrKf1ERBAjpAKsy1acWGpPUpgwQtIr2ur9qg=
Subject key identifier: 3A:48:F1:8A:29:D9:41:97:5A:A9:D5:B6:AC:C0:21:F4:CC:92:45:F4
Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89
Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
Certificate serial: 02FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
Manifest number: 02F9
Signing time: Fri 31 Jan 2025 01:20:26 +0000
Manifest this update: Fri 31 Jan 2025 01:20:26 +0000
Manifest next update: Fri 07 Feb 2025 01:20:26 +0000
Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: BpRUj10/rDxZknZ45T7EklH3MKPIrMcefcpNRgovE0g=)
2: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: JGWjIhX5RIjoHrKhwJbgn3Pu8vTcZZqlk7E2DqruuO8=)
3: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: wILHqpy9Ti/8MJSzUe1aVFwRV4mS5BPVF4SBXg86ZeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767 (0x2ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
Validity
Not Before: Jan 31 01:20:26 2025 GMT
Not After : Feb 7 01:20:26 2025 GMT
Subject: CN=679c255a-d852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:d2:79:a8:f9:0c:a3:f7:e9:66:b3:97:35:
df:64:62:33:1f:65:d8:0c:1d:7b:f3:34:df:3c:aa:
f9:7f:aa:e2:59:88:49:5a:8b:df:0e:c2:eb:83:2b:
de:44:d4:3c:08:ef:d4:de:be:05:44:bd:14:e8:52:
ce:e9:3b:dd:92:76:ad:87:fb:2a:e5:5c:4a:28:f9:
7c:8d:96:ab:fc:23:ac:4a:cd:64:77:e3:69:97:60:
2b:97:c7:67:1a:63:33:e4:f0:ee:a8:ef:83:8b:41:
0c:c6:23:7d:6e:6b:d7:3e:07:be:e3:c7:59:c9:95:
a7:3f:c0:dc:5e:cd:79:d0:c5:0f:18:dc:62:e1:16:
19:94:ab:11:46:1b:b4:f2:15:92:60:74:70:8d:3e:
37:79:80:d5:25:4c:5b:22:85:b3:46:79:ee:4c:9e:
71:bd:f3:89:3d:f6:eb:11:6a:aa:f6:6d:5b:8a:54:
6c:57:74:04:05:dc:73:05:07:d4:7f:f1:ca:fe:a5:
c8:30:f1:31:16:50:d0:37:04:f2:86:f1:41:d2:16:
0b:d3:29:aa:58:d7:08:d5:06:03:6b:97:bc:57:ea:
bd:f3:a6:cd:19:b9:30:5e:59:88:d8:54:ee:91:57:
26:b8:ea:44:bb:68:18:58:c8:27:91:dc:0a:e3:f7:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:F1:8A:29:D9:41:97:5A:A9:D5:B6:AC:C0:21:F4:CC:92:45:F4
X509v3 Authority Key Identifier:
keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:41:17:5e:58:53:08:b1:70:20:b4:e2:6d:43:32:1b:dc:04:
7c:ab:fe:d3:c8:4f:2a:ec:75:36:0b:ea:95:47:cb:c1:7e:f6:
f6:42:54:29:be:82:c9:cc:06:02:95:e1:ca:20:c9:2e:68:7c:
c5:dc:68:27:e8:7a:46:f9:66:d0:65:9e:25:ee:3f:a6:d5:f7:
13:3e:82:d1:92:05:47:52:3b:52:9e:b5:07:11:75:1e:d9:2e:
a1:b1:2a:f2:6d:0d:e8:07:ee:77:1b:9c:69:cb:4a:43:da:ed:
14:4b:0f:2c:77:e1:25:a3:bc:91:97:3c:3d:ea:0f:29:6f:81:
d6:4a:69:72:08:34:a9:01:25:f4:54:cc:e9:14:55:dd:ba:08:
af:1e:56:8c:3d:a2:6a:13:bb:b9:3f:69:9e:2d:ad:32:a2:e8:
36:7e:6a:d5:bd:c2:a3:70:c6:f4:a6:7c:5d:eb:f3:34:2e:fc:
6b:e1:99:52:0e:80:cc:db:bc:a3:d7:73:ed:9f:2d:72:0d:63:
0d:3b:05:e2:5b:ff:19:4d:98:c5:68:fc:1e:9d:b8:dd:f1:4b:
e3:c0:39:21:7a:79:a6:f7:7e:19:b8:bb:37:da:02:9d:c3:42:
e1:b5:94:c8:e5:54:76:22:7f:81:41:af:b7:a3:e9:ce:36:fa:
2a:36:98:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:42 2025 by rpki-client