Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
File: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json)
Hash identifier: DhNCvXbO9r1bhj3bC4mGYDflVauZr9I3fhiMoAH+nXk=
Subject key identifier: 9E:F6:AA:1A:F1:C3:DE:AD:34:A8:1C:DE:63:78:AF:A3:D7:4B:01:BB
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial: 0B67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
Manifest number: 0B5B
Signing time: Thu 30 Jan 2025 19:11:07 +0000
Manifest this update: Thu 30 Jan 2025 19:11:06 +0000
Manifest next update: Thu 06 Feb 2025 19:11:06 +0000
Files and hashes: 1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: Qee8pFsU1mURYx+qqqWa9W2y8Houko0wIuB5rEHrDMI=)
2: FB5C375499DB11EBBC50C376C4F9AE02.roa (hash: 5Tmm0+rmyNGdrIMpYadnPDVCCaqTEqx1NCKBxNGJPGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2919 (0xb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Validity
Not Before: Jan 30 19:11:06 2025 GMT
Not After : Feb 6 19:11:06 2025 GMT
Subject: CN=679bceca-04ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:ad:3f:18:82:1a:33:d9:88:a4:b8:fa:e7:
b6:6b:ec:ae:d4:ec:b9:04:5e:65:fb:5b:00:5e:d8:
55:de:33:26:9f:30:19:0a:a8:4b:46:57:82:e4:5a:
3e:06:18:5c:30:e4:4e:98:c7:58:99:d4:25:17:9d:
3c:fa:3e:df:aa:f7:84:1d:c0:78:10:bd:35:6a:19:
b6:8b:2a:46:ab:d1:02:6d:fc:b0:1e:96:af:56:f7:
6a:1b:4b:85:f4:7c:ee:47:cc:12:42:e2:b8:85:d3:
ac:68:bc:88:18:62:ce:e8:f8:79:04:f1:ad:33:59:
14:98:fb:51:ba:c2:ec:da:cf:75:8c:d6:44:9d:cb:
95:38:ff:48:9a:28:f9:c8:d6:df:55:b0:bf:0d:eb:
ac:dc:8f:4e:b2:5c:7e:09:aa:9a:b0:b0:69:d1:77:
91:f2:7f:1d:9a:74:a3:37:ee:d9:a4:0c:07:0f:7e:
94:4c:42:af:ce:bd:c8:00:1a:4c:13:a9:f2:5b:ef:
b4:33:0f:d8:c0:83:1e:86:40:96:19:9a:e6:7e:53:
ab:d0:02:11:05:eb:19:0e:c3:78:71:4b:2b:bd:a9:
61:c6:b9:5f:f1:79:e8:a2:bb:3a:9b:a6:80:f0:8c:
7b:fd:34:27:e5:12:c0:32:aa:98:3c:5f:dd:4b:14:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F6:AA:1A:F1:C3:DE:AD:34:A8:1C:DE:63:78:AF:A3:D7:4B:01:BB
X509v3 Authority Key Identifier:
keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:0a:c9:e8:e3:7c:98:59:c4:b5:b2:bc:fe:c5:32:79:97:a7:
59:fc:c0:e4:8f:67:75:06:43:ac:51:74:7b:22:e4:1b:ed:19:
44:fb:8a:7e:59:03:3b:9f:55:53:8b:bf:13:33:cd:6c:e0:4e:
91:3e:f5:77:7b:88:38:11:c4:60:9a:b7:98:da:6e:51:2a:c5:
77:44:6a:7d:41:62:31:10:c7:43:3a:4a:d9:56:64:72:63:87:
43:92:c9:f9:1b:8e:2e:1b:f3:ad:60:34:d5:0e:aa:c2:f4:df:
d0:52:ce:9d:b2:a8:53:4f:3c:44:0d:40:c6:81:0f:13:7f:46:
5a:a3:76:b8:8c:e6:68:9a:bd:cc:fe:8d:a2:eb:9e:6a:cb:71:
8d:ba:17:cb:87:d2:d6:35:ae:fe:b5:bc:d6:65:2e:9a:3f:6b:
8c:1b:4c:9e:4d:d3:33:02:65:29:52:22:68:71:6a:fb:41:c4:
26:45:8f:3d:57:87:64:da:91:9a:7e:11:09:e3:df:24:19:64:
ea:41:66:16:0d:d5:a7:2e:78:82:81:f7:e4:c1:c5:a2:fe:33:
b8:b0:28:e4:aa:cd:1c:19:85:4a:61:e8:63:70:11:c4:a7:2a:
db:a8:b0:15:50:03:9e:4f:14:4b:72:d0:88:e8:89:1d:64:46:
72:e3:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:09 2025 by rpki-client