Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
File: HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json)
Hash identifier: mPv058CeU6UGjZuiKRWFxcHPncHfZuacmTL6102SDh4=
Subject key identifier: D4:52:D9:54:0C:55:77:60:56:9A:DE:24:2D:88:4E:64:9E:BB:71:A4
Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C
Certificate issuer: /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C
Certificate serial: 171A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
Manifest number: 171A
Signing time: Fri 31 Jan 2025 16:37:25 +0000
Manifest this update: Fri 31 Jan 2025 16:37:25 +0000
Manifest next update: Fri 07 Feb 2025 16:37:25 +0000
Files and hashes: 1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: XnpIVAHwhcOr4WWkc5KTBBL4JuPse7gtSoSc7MfzOXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5914 (0x171a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C
Validity
Not Before: Jan 31 16:37:25 2025 GMT
Not After : Feb 7 16:37:25 2025 GMT
Subject: CN=679cfc45-b580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:02:dd:d9:77:2f:f1:d0:89:68:8c:68:08:
09:67:4c:1c:74:b9:c4:13:21:8e:fe:e4:52:48:22:
07:7d:78:e8:fd:87:6c:45:4e:d4:26:51:de:4a:ce:
00:5b:84:8d:92:72:63:b0:fe:ae:f5:be:62:9e:5c:
72:dd:dd:19:5b:fd:bd:e2:d7:59:3e:5f:de:4e:75:
13:27:37:6d:70:ae:da:05:6e:ed:ec:65:fb:4e:a8:
ad:56:6e:a6:35:db:78:9d:43:be:f2:43:c3:72:13:
85:ae:5b:a1:87:c0:dc:de:dc:1e:40:a0:2a:ce:f6:
f8:4a:70:4b:72:ef:72:ae:01:e7:bd:a2:ab:c7:e2:
09:c3:d1:41:4e:b8:3b:8d:c9:a7:df:10:97:6f:03:
ad:67:55:b6:01:eb:bd:da:94:f5:32:cd:7c:75:43:
30:82:c0:a2:f8:08:be:d5:af:b9:fe:b8:88:ae:d2:
eb:82:7b:cf:7a:d1:54:39:d5:c5:9e:9b:a6:3d:96:
c9:dc:f0:21:d0:4c:15:75:19:cb:c6:5b:25:25:f9:
14:27:b5:ef:ce:99:b9:f7:85:8d:3e:d6:7f:71:b7:
1c:9c:d6:c5:8b:59:6b:5e:70:0c:a8:c9:fb:ad:68:
0d:86:38:91:a9:45:34:ba:f8:46:94:92:15:ca:52:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:52:D9:54:0C:55:77:60:56:9A:DE:24:2D:88:4E:64:9E:BB:71:A4
X509v3 Authority Key Identifier:
keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:52:44:0c:66:1f:d1:25:01:d6:3a:59:3a:32:65:b1:c0:ae:
d0:a9:0d:be:ea:cb:f3:ca:6e:4c:c3:7f:ac:67:c9:7d:a7:37:
08:41:31:ea:fb:02:5c:2b:de:0c:a7:eb:8c:c0:3c:c8:51:00:
ad:5c:e3:dd:6c:1b:16:dd:c9:e8:f3:27:05:58:0b:76:86:98:
fe:23:db:a2:ca:f9:e5:b2:a9:88:9f:7d:29:b6:22:79:e7:8e:
cc:c8:d9:16:ae:50:f3:fd:70:17:e9:e0:f1:27:bd:7e:f1:8d:
ed:59:7f:11:83:c4:c9:cb:cb:e9:f1:c0:8f:55:77:e4:97:dc:
45:a2:58:0d:20:64:44:95:6c:60:fc:b4:07:47:85:1c:05:7d:
73:fc:59:49:97:e0:c5:9d:2c:3f:69:7b:76:9d:3c:1b:00:da:
4e:ba:e9:b7:91:69:be:f1:36:55:ba:ca:8d:35:0c:8a:0a:42:
be:61:44:07:cf:07:ef:ee:9f:d3:e5:36:7d:06:17:2d:05:e0:
8f:44:8a:7b:53:4d:8f:51:59:fa:e5:a3:09:c4:a1:6a:17:0e:
17:3f:72:b3:e6:1b:27:e3:2c:5c:70:d2:5b:e5:bd:55:91:c4:
99:dd:92:cf:a3:8c:d4:e1:da:00:c4:9a:e3:ae:27:26:2a:97:
88:41:a4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:50 2025 by rpki-client