
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
File: h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json)
Hash identifier: smJbgWFS45yIl2mXVzK/C8qyDtUFuY2o3xtLx+kUJxw=
Subject key identifier: 30:CC:0F:05:BE:BB:CE:BF:7E:4F:E8:D9:A2:04:E6:5C:C3:10:16:A1
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Certificate issuer: /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial: 059C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
Manifest number: 0594
Signing time: Thu 30 Jan 2025 23:15:48 +0000
Manifest this update: Thu 30 Jan 2025 23:15:47 +0000
Manifest next update: Thu 06 Feb 2025 23:15:47 +0000
Files and hashes: 1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: 8oq19lgieu0gHVN/aStSEQO5+Ny1ycQaYpqjRl85ZiA=)
2: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: UO8+/PNJyP8F2PV5d82ae9pJgiAAnCCFoOA6ej/PePM=)
3: C49CE482BEA411EB85828650C4F9AE02.roa (hash: SYzw7W4I8ERB2k6TGS/FM3oGH7TQqDLdsyK12v9ZWyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1436 (0x59c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Validity
Not Before: Jan 30 23:15:47 2025 GMT
Not After : Feb 6 23:15:47 2025 GMT
Subject: CN=679c0823-1fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:2f:89:d9:94:04:8d:73:83:56:fe:02:c2:
b9:e2:4c:e4:30:24:76:a0:aa:1e:07:bb:3d:34:8b:
94:f6:85:73:7c:81:87:78:33:5d:2c:9e:15:5d:da:
c9:ef:3e:83:ac:4c:18:b0:37:f3:56:c7:99:01:71:
46:5b:20:df:fe:e7:10:ce:71:d8:4b:49:70:b5:92:
5c:2d:3d:1e:77:21:19:fb:54:fa:60:77:af:7a:2d:
b3:78:8c:8f:34:ef:f8:9b:1b:e4:22:84:a8:88:f1:
ff:38:1b:99:2b:e6:fa:e8:87:97:47:74:d3:e1:2c:
09:a6:42:e0:04:34:6d:a4:fc:d0:7c:f3:e3:da:d0:
5b:ae:5d:6f:10:df:cc:a1:90:ae:06:cc:c2:67:a3:
c5:94:a0:75:2c:72:7b:3e:43:12:a7:c5:21:02:95:
00:0e:e3:76:6c:99:90:9e:fe:bb:11:72:f2:cc:1e:
8d:b0:5a:cb:f6:02:d9:11:14:5e:9d:9c:28:37:32:
b2:a3:b0:f1:82:70:c6:c0:18:08:3b:75:89:c5:1c:
52:f7:4a:30:fa:c3:39:44:a7:34:bb:a0:b3:a9:14:
73:e5:ca:d3:52:a9:11:13:3e:60:f2:8e:34:65:66:
22:d3:a9:dc:45:8b:fa:a4:03:ec:ab:35:e0:52:bd:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CC:0F:05:BE:BB:CE:BF:7E:4F:E8:D9:A2:04:E6:5C:C3:10:16:A1
X509v3 Authority Key Identifier:
keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d1:fe:86:a0:9d:0b:25:e0:f5:c1:57:ee:74:9b:c5:e2:be:
e9:9a:1c:d6:d4:3e:9b:df:c0:ea:06:de:7f:4c:62:c9:29:aa:
74:85:39:74:85:9d:5a:d0:55:23:71:88:86:18:84:0e:a1:7f:
be:a8:b5:b2:f1:d3:be:9f:7a:e2:de:16:18:1d:e3:20:82:ca:
15:95:7c:97:91:2e:3d:ae:f6:ee:06:11:1d:41:dd:46:f7:38:
33:8b:e9:1d:75:90:43:42:82:09:95:0c:50:eb:44:16:2c:63:
4e:2d:f8:4a:1c:db:c1:5c:ff:7b:56:c7:5e:87:af:41:42:48:
47:b8:7c:8c:5e:89:33:71:25:55:d3:07:3e:ba:1b:1f:23:54:
39:af:7b:54:14:d0:b5:2f:2d:f8:62:c1:65:d4:ba:44:83:d0:
34:2f:c7:54:b0:a1:e4:e2:19:67:c1:45:4f:c5:5d:b6:de:3f:
7f:db:0b:ce:2b:ff:2c:6f:cc:7a:1b:0a:1c:7f:1d:5c:74:63:
8d:cf:78:ea:7a:de:00:20:c4:7a:39:f0:ad:63:46:53:6e:ae:
66:a0:01:1a:f7:81:8c:af:0e:6e:0e:2b:54:da:f5:aa:30:00:
99:e7:21:d4:a6:b8:46:54:89:99:b0:62:86:72:b3:48:24:a4:
9f:30:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:38 2025 by rpki-client