Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json)
Hash identifier: VlHO6jbvtEJb8nXq9ClD8tSWoohGLl6k09CduASRB1w=
Subject key identifier: 15:7A:E2:41:31:E2:99:8A:D3:70:29:F8:FC:C1:21:01:4A:C5:FE:D8
Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE
Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE
Certificate serial: 3455
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
Manifest number: 344F
Signing time: Fri 31 Jan 2025 15:10:43 +0000
Manifest this update: Fri 31 Jan 2025 15:10:43 +0000
Manifest next update: Fri 07 Feb 2025 15:10:43 +0000
Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: 9/ppsiKSucrPD1FZEvHw0WXLV+BVVlNIVmU/JMoFzEM=)
2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: M+qrH+d4hQUO8WoGFe8+wMrHk3LjUTfGpHtbU5q49ds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13397 (0x3455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE
Validity
Not Before: Jan 31 15:10:43 2025 GMT
Not After : Feb 7 15:10:43 2025 GMT
Subject: CN=679ce7f3-c5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:a9:3a:ae:5b:8e:8b:f2:49:44:17:1c:4c:
a9:15:c3:60:90:1a:d3:23:da:aa:e2:39:b8:1b:01:
32:e3:c9:ed:ed:ca:cf:9c:3b:ec:30:b3:e0:60:5a:
08:c7:a5:fd:d7:f0:37:ca:c4:23:45:f1:08:1d:39:
9a:66:41:01:0e:2d:f4:59:d7:b5:e9:a5:f3:2c:63:
92:96:13:d8:f5:62:a2:d3:69:e0:c6:65:4e:c2:c3:
c9:4c:df:75:f5:e1:8b:eb:b3:7e:bc:c0:14:02:df:
c4:40:31:e8:6e:45:5e:da:c1:3b:c1:b4:5a:76:79:
b3:aa:63:9f:31:f5:ef:a4:83:e9:e4:92:13:83:cf:
48:9f:1c:6d:09:08:74:9c:ef:8c:8c:b2:84:b1:0a:
d8:08:8c:ca:2e:45:ee:7c:af:7c:6f:90:4c:86:89:
56:dd:fe:fd:ab:a1:b9:71:76:31:d2:5b:50:ae:f2:
85:23:f6:6d:d4:bd:6b:7c:ab:48:99:ee:47:39:fc:
08:98:9e:69:d3:d3:a9:ae:8a:63:14:54:96:dc:89:
1b:15:55:f1:fa:b2:e1:63:d3:2c:80:1b:31:24:f2:
a5:30:45:f1:4c:3d:f4:9f:b0:a0:54:6c:44:a0:99:
47:da:f0:c3:b0:cf:96:ef:52:c0:f9:17:d7:34:02:
e9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:E2:41:31:E2:99:8A:D3:70:29:F8:FC:C1:21:01:4A:C5:FE:D8
X509v3 Authority Key Identifier:
keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a1:c5:65:6d:60:74:02:f0:a4:af:4e:80:cd:ef:21:b0:7c:
ed:b3:18:3b:80:74:dd:50:aa:0c:31:06:82:45:ae:f2:16:b7:
f0:d0:57:64:16:00:ee:93:78:f6:be:c7:0a:24:82:c7:71:0f:
50:1b:38:9b:3e:bb:1a:aa:f3:81:00:66:4e:fc:e6:7b:16:5d:
27:f8:21:b1:50:59:c5:c2:5a:2d:8a:bc:91:5a:17:61:2c:d4:
57:53:c2:15:4b:bf:b3:a6:fe:1c:9e:33:c2:06:42:a1:3d:73:
5a:67:b0:9b:fd:a5:d5:71:01:5f:83:18:c0:bc:c2:bb:b9:c9:
af:b7:2a:ca:5a:60:07:90:59:bf:2e:34:12:48:5d:91:cb:8d:
69:b4:9b:de:79:54:97:a3:d5:55:41:26:c2:a1:32:22:98:c3:
f4:cc:08:6f:e1:a5:95:7e:29:8d:2e:ce:fe:46:ad:ee:8f:7c:
6c:c6:9f:37:76:79:27:38:1b:f2:0b:c1:5c:24:e6:f7:aa:45:
31:e6:17:db:36:2e:3f:fb:a1:12:c3:aa:80:f0:d7:6c:12:05:
06:45:81:00:c7:2f:da:35:f5:90:e1:8c:51:69:52:9e:25:0d:
2b:39:27:28:f0:8a:a2:51:ba:16:9b:7a:11:46:b7:c9:d3:c1:
ff:78:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:32 2025 by rpki-client