Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
File: H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json)
Hash identifier: zYvXIKpSu1AwVlrliuneK7yOLXnRe38DIfuffGfXFi4=
Subject key identifier: 08:B1:9F:2D:07:3E:3F:82:CE:C7:0F:09:31:E9:D2:46:7C:55:A9:8B
Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
Certificate issuer: /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Certificate serial: 05BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
Manifest number: 05B9
Signing time: Thu 30 Jan 2025 23:06:36 +0000
Manifest this update: Thu 30 Jan 2025 23:06:36 +0000
Manifest next update: Thu 06 Feb 2025 23:06:36 +0000
Files and hashes: 1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: Cn3JBwBpr3V2DpvGMiIXf0ALM3bDm+J4JcCWTQKsd/0=)
2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: qXECf2jd3YFbV0dkm4BI5o/k7Qx5MHMWmZ0P/f7Exss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1471 (0x5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Validity
Not Before: Jan 30 23:06:36 2025 GMT
Not After : Feb 6 23:06:36 2025 GMT
Subject: CN=679c05fc-ee5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:6e:50:07:35:39:4b:4b:4d:9c:15:a5:7a:
b4:e5:b6:df:ea:a9:31:da:f4:0e:71:05:f4:e9:61:
f8:57:bf:31:c9:f9:fd:e1:9f:10:d7:5d:05:11:d1:
05:c6:d0:39:ee:19:82:43:50:65:be:49:d2:f8:1b:
eb:09:e9:1e:fa:69:96:49:11:cd:0e:89:4b:0c:ca:
d6:e1:b6:a7:bc:74:8a:47:87:92:01:bd:e2:9d:cd:
ad:f6:26:bf:b2:ba:71:65:4c:d4:fc:7e:c3:26:cc:
35:47:9c:18:cb:3d:51:c7:c3:fc:a5:c9:ba:05:2c:
ed:b9:aa:b6:1a:8b:0d:99:9e:c8:62:7a:08:a6:aa:
77:67:e0:d0:e1:a7:ee:6c:0b:47:80:0d:1f:82:9c:
2f:df:62:d5:e1:98:a5:1e:48:36:9d:49:30:f7:4c:
3b:9c:34:67:b5:6f:35:35:02:fd:6d:17:39:b0:32:
6c:7d:bb:8f:d5:9a:f9:1e:f9:00:9f:20:5f:12:d0:
5d:51:a4:c1:44:de:92:51:62:1d:5d:6a:6a:63:92:
e7:b1:82:3e:d8:88:7b:06:87:bf:da:19:a6:cb:61:
bc:f5:11:57:3b:df:60:85:a9:62:16:4f:86:e8:46:
16:9f:42:c5:5e:68:16:78:e8:ce:8f:61:0e:2d:a7:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B1:9F:2D:07:3E:3F:82:CE:C7:0F:09:31:E9:D2:46:7C:55:A9:8B
X509v3 Authority Key Identifier:
keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:4e:1d:dc:3f:43:d9:66:ec:84:7a:b0:3f:40:0e:74:7d:
b3:a7:1a:a5:ca:f3:5c:c5:8b:a7:19:42:f4:20:cd:15:5c:59:
6a:06:79:5b:e4:08:28:c4:1e:65:48:ff:2f:bc:6b:67:f1:e8:
00:b0:a7:0b:d2:95:10:44:cd:97:34:31:aa:c2:ae:7f:93:0c:
d6:20:24:e1:eb:05:90:68:89:d2:95:ec:0b:78:d8:5c:97:a8:
6c:e6:8c:2c:0f:8c:39:bd:ca:a3:69:d6:f6:a7:c9:9b:de:6b:
7a:8b:9f:c1:59:e5:ee:9b:aa:78:fa:7a:af:15:23:b1:4e:1d:
ce:15:fd:26:84:cd:2b:5a:6f:c4:a2:6b:67:8e:ad:6d:2c:c2:
4c:92:b1:0f:df:bd:41:7f:4c:17:1e:35:eb:a5:e3:47:db:52:
fb:e1:09:87:2c:7d:28:ce:31:08:18:fa:98:fd:32:b4:8e:0d:
c6:7e:47:7b:c5:4c:45:d1:f6:b3:a9:f4:4e:1b:d9:37:81:6b:
93:27:20:a6:2c:c9:60:2a:5f:e1:80:65:7c:00:4d:42:a5:77:
88:2f:69:a0:2b:60:86:ef:11:cf:d0:e0:9f:1a:a1:3c:c2:95:
40:ee:80:53:de:47:cd:07:ad:27:e9:4c:a8:56:9c:1e:2b:63:
02:5a:52:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:40 2025 by rpki-client