Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json)
Hash identifier: ODBppLDwg1Yrp2x+GZrhzpxEEEPG91AL9pF9QtwlU88=
Subject key identifier: 40:85:D5:6B:0D:11:67:68:11:5A:9F:70:93:C9:1F:34:D5:5F:DC:1A
Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Certificate serial: 0B60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
Manifest number: 0B5A
Signing time: Thu 30 Jan 2025 19:10:12 +0000
Manifest this update: Thu 30 Jan 2025 19:10:12 +0000
Manifest next update: Thu 06 Feb 2025 19:10:12 +0000
Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: gKiaADv1U95yKM8SbAgtaMel50Zp8PEcjv5IKauu1CE=)
2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: QngpTkCC8JSyoEjRCbNY7hFfX4Je7JGO3cicNA6+xBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2912 (0xb60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Validity
Not Before: Jan 30 19:10:12 2025 GMT
Not After : Feb 6 19:10:12 2025 GMT
Subject: CN=679bce94-2c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:ae:8c:2d:4d:20:44:0e:ef:b9:a9:bb:32:
c7:59:79:da:50:ee:53:e9:2d:d2:29:65:8a:43:a9:
81:f7:4a:8f:1a:db:8d:2d:94:28:fb:88:fd:92:a5:
8a:13:59:ee:57:c6:56:94:06:8c:94:7c:a7:68:38:
1b:51:50:25:fc:64:90:12:d8:7a:c6:ae:d9:13:10:
18:14:45:5d:73:b6:21:f4:12:1d:8e:dd:06:1e:00:
23:9f:18:3e:cf:99:92:b6:66:61:80:9d:b6:66:ea:
ce:09:78:94:41:0b:84:b0:39:2b:d2:1f:57:2e:66:
93:5f:0f:fd:82:01:96:20:ce:91:f4:7f:93:a3:eb:
cb:18:44:94:bb:ac:63:05:06:fe:10:b8:4d:28:c0:
44:d0:92:71:ae:b1:d1:27:ce:68:62:cd:1f:0f:34:
fe:3e:83:64:0e:00:97:21:b3:02:bc:34:86:e8:83:
e4:79:a7:15:12:c0:74:fd:bb:e3:44:b6:ae:32:7b:
92:4b:99:db:af:f8:07:32:00:b9:8e:ad:26:65:88:
60:28:d0:c3:57:38:c0:10:d4:90:f0:f4:a8:10:e1:
33:4c:fd:36:6e:58:b2:ea:bb:31:02:bf:3a:a9:da:
fb:0e:6c:fb:ac:7c:c6:e2:81:d4:d9:ee:68:52:3c:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:85:D5:6B:0D:11:67:68:11:5A:9F:70:93:C9:1F:34:D5:5F:DC:1A
X509v3 Authority Key Identifier:
keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ac:2a:eb:3c:fe:bd:fa:1d:c8:ae:be:13:b1:ea:c4:95:54:
e9:82:86:21:67:2e:f1:f7:5c:79:99:16:e4:28:e8:61:81:c7:
a9:50:19:ab:65:06:12:db:49:8c:c5:6d:0d:43:b0:a6:f6:1a:
0d:23:17:c2:3b:20:8c:b0:e4:92:c7:18:ff:25:bb:03:d5:fe:
8e:a4:e0:32:0d:0c:21:e3:d2:4b:fe:f2:d0:73:8f:eb:9b:dc:
52:75:03:9a:22:02:e2:02:20:39:f8:d0:48:d4:3c:72:a2:90:
01:eb:ee:a0:e3:d1:2d:17:90:ce:94:db:9c:85:ae:1c:03:3b:
88:70:e6:49:26:cf:0a:5b:3d:2e:16:9a:14:8a:5f:42:80:ac:
77:bb:e8:9a:35:3d:48:b2:a3:3b:f9:7a:86:8a:11:60:21:fe:
21:db:1e:45:84:da:cf:83:0a:9e:39:03:40:16:1c:71:2c:b4:
b7:3c:ab:a2:56:6d:9e:c1:d0:e8:61:fd:fb:b1:56:a3:c5:fd:
18:1c:da:a9:b7:82:9d:20:68:36:71:b4:8a:f8:6f:36:02:bb:
c2:07:95:f7:91:a6:78:dc:09:a1:21:72:a2:db:d1:44:8d:e6:
25:2d:14:8f:e0:6b:e9:59:8c:30:13:a9:34:d8:67:6e:0f:51:
ae:30:3f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:44 2025 by rpki-client