Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json)
Hash identifier: 3yct182nT41ERteB+YOBbSWlab7pXp/p5FEeZK9SGzM=
Subject key identifier: FA:60:8E:9F:2A:DB:BA:EB:1C:D9:A4:52:FB:C2:97:DD:BA:66:C0:EE
Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36
Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736
Certificate serial: 3452
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
Manifest number: 3452
Signing time: Fri 31 Jan 2025 14:16:43 +0000
Manifest this update: Fri 31 Jan 2025 14:16:42 +0000
Manifest next update: Fri 07 Feb 2025 14:16:42 +0000
Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: I3vexupVow4eeq8BDfkU4g6/2tnfFx8PsjZVIB8U/RI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13394 (0x3452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736
Validity
Not Before: Jan 31 14:16:42 2025 GMT
Not After : Feb 7 14:16:42 2025 GMT
Subject: CN=679cdb4b-a483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:e6:5b:39:36:c3:b9:18:03:be:5b:14:28:
4f:3e:c4:65:11:45:c4:f3:59:e5:4d:d8:b9:cf:c4:
95:00:c7:5e:c2:e6:db:8c:7b:01:7c:b2:15:f1:a1:
37:91:69:ec:c8:f4:48:1d:b1:08:9a:5b:da:e2:d6:
51:6e:8b:8e:c7:60:b0:bf:81:b9:10:85:01:c3:0e:
dd:82:db:07:a8:4d:7d:ae:7e:63:9d:9a:2b:51:4f:
7f:b1:26:d9:e1:fb:33:82:d5:a1:e6:8d:21:ba:c0:
1d:cb:98:20:57:4b:ce:93:95:a0:ff:ca:9b:9a:d7:
5e:c6:f6:5b:b7:ef:29:0e:c9:96:2a:a0:68:e2:ff:
04:8c:d9:d2:a1:27:28:2e:72:4b:e0:19:f1:b2:18:
b8:c6:0a:f1:18:5e:bd:6b:50:4a:fd:01:83:4d:a0:
dd:2f:23:ea:38:f7:34:15:52:48:b8:ee:39:29:ce:
54:56:a4:84:d9:8e:19:42:c8:89:78:cc:03:59:95:
e6:e6:f7:ab:0e:41:33:2b:b6:af:63:b8:ac:fc:27:
62:13:e2:a5:0d:00:67:29:7e:fb:03:67:11:ba:65:
98:b1:8e:ad:a5:50:c8:da:ff:c7:26:96:14:c4:fc:
51:0b:38:e5:fd:0e:8c:28:c5:14:af:2d:11:26:38:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:60:8E:9F:2A:DB:BA:EB:1C:D9:A4:52:FB:C2:97:DD:BA:66:C0:EE
X509v3 Authority Key Identifier:
keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:67:a1:16:4e:4f:0a:55:bb:f0:52:0a:6c:4e:74:32:5f:a8:
2c:b2:4a:5b:77:cb:f7:4b:fc:9f:b6:1c:d8:7c:10:1d:4f:d4:
fe:40:f0:51:9e:69:c0:7f:dc:99:73:85:d5:e5:d8:be:a8:06:
a7:29:8a:bc:92:56:8d:32:e8:98:2a:f5:e2:07:02:d7:01:5c:
95:0b:18:19:53:a2:ba:47:98:37:ad:cb:0c:73:43:37:b6:77:
42:e5:e3:4a:4e:45:ec:14:d1:59:47:a6:f5:45:7d:5d:e7:8a:
06:6c:02:6a:1f:b9:c5:c2:b0:f1:bc:52:72:a3:25:2f:9d:b6:
19:91:45:41:6f:7a:74:fb:28:bd:52:a2:05:d5:ec:08:0a:a4:
f3:55:b3:58:e2:9f:36:36:ed:c8:ef:b3:94:c0:73:5e:6a:f8:
60:19:7a:30:b5:18:eb:ad:80:48:f9:c0:16:d5:4e:6d:41:13:
ec:05:fd:63:14:e1:88:2b:65:e0:d8:b1:2f:2f:55:2a:83:40:
b8:99:85:47:93:83:36:45:cb:46:1b:43:79:3b:43:a6:43:f4:
9a:c7:3e:f7:d6:3a:d5:08:55:36:5b:53:51:69:87:2e:3f:42:
2e:d0:69:0c:37:19:bd:2b:02:86:12:14:51:5b:1d:82:63:6f:
8c:50:26:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:35:32 2025 by rpki-client