Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
File: rHE1BMtD6841eUt90irqe7WCPEk.mft (raw, json)
Hash identifier: ypBEmXn/hRoQ0EraZVZGZWdjfnJgPjH8ulLXk3CaHt0=
Subject key identifier: 61:4C:C6:1E:D9:93:A2:7E:00:F5:62:0B:AF:7F:24:24:06:C1:9E:3F
Authority key identifier: AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
Certificate issuer: /CN=A9186777/serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Certificate serial: 0BFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
Manifest number: 0BF1
Signing time: Fri 31 Jan 2025 18:35:50 +0000
Manifest this update: Fri 31 Jan 2025 18:35:49 +0000
Manifest next update: Fri 07 Feb 2025 18:35:49 +0000
Files and hashes: 1: rHE1BMtD6841eUt90irqe7WCPEk.crl (hash: 7GpKbfVELCBVUr5RCV1h4zP9CoPBUA2a+/2LQDSEt0o=)
2: 54E193E20AD511EA8397192EC4F9AE02.roa (hash: iCRxHoIYmuUpTDYftZ3k58gB4Zc7olQd/IBHuDRYSeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186777/serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Validity
Not Before: Jan 31 18:35:49 2025 GMT
Not After : Feb 7 18:35:49 2025 GMT
Subject: CN=679d1806-1b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:2e:a1:57:67:3d:09:b4:82:c5:1b:4b:43:
4b:d6:4b:56:89:58:f8:99:79:42:ff:76:d4:22:8c:
58:e2:e8:6b:ff:98:fb:b6:3c:76:e1:d8:14:b6:42:
6a:7b:25:fe:35:bc:0d:68:78:fa:8e:ef:ae:8a:2a:
94:26:f0:c1:18:72:6e:ba:40:ac:4d:e6:a9:68:9b:
e3:84:82:e0:ba:19:41:a1:d2:b0:ff:ee:13:bf:4b:
9f:80:55:af:cf:f8:35:ae:84:76:78:ca:13:56:4e:
25:e1:c0:36:bb:c0:12:a6:e6:bc:12:29:6f:c2:be:
8b:4f:8f:02:f0:70:1f:a3:b4:0d:e7:84:67:8a:c0:
33:ff:52:4d:cb:0d:7e:6c:0c:3c:95:fc:c9:a3:fa:
08:ab:b4:9b:a3:80:fa:d9:da:6b:dd:26:ef:d4:4f:
ca:4a:85:e7:58:c1:53:b4:2c:ea:25:58:86:90:e7:
03:f2:a0:14:3b:1b:81:8d:5a:9b:5f:63:e0:1e:17:
0c:a3:f1:e7:f8:da:04:7d:cb:69:f5:21:dc:8d:e6:
32:db:fd:27:aa:33:6c:5e:3c:b1:4c:12:c2:b8:f8:
09:3d:91:cb:ab:2e:8d:2a:9a:2b:9f:a7:b0:80:b5:
dd:78:52:9a:e7:81:0b:b8:f4:bd:99:c7:88:c3:f7:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4C:C6:1E:D9:93:A2:7E:00:F5:62:0B:AF:7F:24:24:06:C1:9E:3F
X509v3 Authority Key Identifier:
keyid:AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ec:69:30:c4:84:5b:08:36:fd:ec:7c:1e:09:30:de:11:72:
2a:44:73:70:49:9b:8d:15:e7:f1:0f:45:57:d1:c3:b2:92:6f:
47:60:50:af:b6:6d:73:a3:c4:5a:51:e2:33:05:01:fa:ee:00:
6e:77:53:20:7e:05:59:32:1a:37:6f:f2:70:6e:64:46:0a:de:
81:ad:86:57:01:dd:2c:b6:68:bc:39:bd:16:e6:1e:a8:66:11:
6f:ca:f7:04:8e:32:e5:03:5c:2c:32:cf:59:ce:47:5c:e6:2f:
9e:e4:14:13:7b:05:4b:77:87:77:83:27:f2:37:f7:6a:12:62:
0c:56:c3:42:1e:55:1e:27:71:0b:1e:76:21:ad:7e:de:ad:86:
f8:6f:ce:41:14:5b:42:f9:e9:bc:1e:9e:63:af:e8:74:42:a7:
7e:08:cd:41:d3:79:5e:b5:c9:6b:03:83:8a:30:d5:e7:47:0a:
a5:b8:29:90:ae:81:b5:82:a2:72:f7:4f:9f:ff:a7:40:43:ec:
8f:0c:cf:74:4c:d0:20:c9:13:29:4e:0a:e9:ea:3f:9c:fb:bc:
53:a6:15:64:06:57:77:a0:15:39:e2:84:e9:26:f1:be:90:1b:
df:17:66:b5:d6:33:c6:98:74:4c:f5:46:7d:e4:aa:6d:df:2b:
27:00:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:00 2025 by rpki-client