Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json)
Hash identifier: 71diJQPHKGgG+ItuuWQuFfDicD/pHEsY954J6dwbY7w=
Subject key identifier: 09:AF:64:30:93:97:BB:F0:05:45:D0:16:C0:EE:D8:8C:7B:1B:DC:C7
Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
Manifest number: BC
Signing time: Fri 31 Jan 2025 05:05:12 +0000
Manifest this update: Fri 31 Jan 2025 05:05:11 +0000
Manifest next update: Fri 07 Feb 2025 05:05:11 +0000
Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: IJyo01tCK5sGaVhb1l+m7FjtNtejk1Oy/DCfexrg5LU=)
2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: U2pgcPipddVZ72wsOjIBUQaJaHNGvZhnk8uGYFZu+oo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Validity
Not Before: Jan 31 05:05:11 2025 GMT
Not After : Feb 7 05:05:11 2025 GMT
Subject: CN=679c5a08-73d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:0f:dd:52:fc:51:2d:1d:3b:4d:f5:6f:60:
3f:a6:c0:17:76:67:84:1b:55:bd:a4:a9:16:d3:e4:
b9:57:fe:df:c1:5b:50:60:c4:45:d5:50:9d:06:09:
6c:6e:89:65:36:61:34:95:c3:9d:dd:0f:04:46:08:
e6:73:41:6b:09:e3:a5:fd:9b:48:e8:b2:1e:2d:1e:
cd:2c:4f:5e:a6:77:0b:6d:f9:98:07:d5:02:80:8d:
ab:48:90:8c:cb:e2:48:57:45:b3:76:5b:06:64:6f:
85:cb:0b:5e:28:09:bf:1f:de:da:92:ee:d0:7b:41:
b9:ae:2c:9a:40:a0:25:86:cb:ba:55:fa:5b:68:1e:
94:b6:36:21:ee:be:e9:02:fd:32:d8:7e:34:9b:3e:
2d:be:6c:95:a0:c1:3b:61:eb:48:28:f4:65:b8:26:
66:32:f9:50:82:2d:18:51:a7:3e:d3:38:cf:69:0f:
9c:78:52:79:93:fa:b2:78:28:16:c5:48:0b:59:f5:
c3:6e:2b:8c:19:bf:75:ec:fd:d4:c4:f4:b3:30:e7:
2b:e3:c1:5c:f9:21:d0:ce:a5:cd:e6:1e:5b:68:ce:
be:ed:38:24:13:ba:94:8b:eb:64:9d:d8:3e:cb:a1:
d0:ea:ff:32:14:a5:5e:fb:1a:34:6d:fd:3f:8e:a8:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AF:64:30:93:97:BB:F0:05:45:D0:16:C0:EE:D8:8C:7B:1B:DC:C7
X509v3 Authority Key Identifier:
keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7c:f5:02:44:82:af:c8:f2:ce:54:e7:3b:da:81:58:44:53:
2c:a6:20:35:0c:d3:77:ea:eb:72:ba:5f:d4:1a:e4:9f:e2:2e:
d9:48:aa:79:b5:22:1b:30:64:77:78:f3:c0:39:c1:67:b1:62:
fd:52:43:20:d7:a1:52:94:33:f3:fe:c0:a5:75:c2:e3:70:eb:
b2:54:bc:20:6c:39:83:19:0a:76:b7:fa:bb:cd:95:84:e8:86:
0e:09:92:40:59:3f:fb:79:6e:0b:07:ed:5e:32:08:52:fe:15:
cf:24:9e:7d:07:52:10:8b:28:5f:13:0a:5e:fd:ab:eb:1d:94:
8f:5e:eb:32:29:bd:3f:81:a9:18:f0:e7:bc:b8:df:fe:da:7c:
fc:52:61:c1:7e:d5:81:ed:cf:1d:2b:41:03:b3:94:2e:11:fa:
91:34:b4:8b:5a:04:d9:5f:64:5d:53:16:61:35:0d:07:b8:bd:
47:c3:65:e2:ff:34:88:d1:d2:d7:69:c5:6b:c8:aa:50:1e:4f:
df:9c:2d:ca:11:99:00:f0:cf:ca:51:83:91:92:f5:f5:04:a3:
b2:24:32:76:31:a2:c7:91:3f:b6:74:b1:24:14:0d:b6:d3:d5:
29:6a:57:e7:18:60:ad:22:6f:eb:47:1d:9c:5d:94:db:d3:89:
99:67:89:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:55 2025 by rpki-client