Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json)
Hash identifier: CrXSkVgfNJwBhqhiQqUE4py/8JdSHRtR5QEfMt7mhys=
Subject key identifier: EC:BD:27:33:C1:7F:BF:1D:4C:87:51:6D:6C:08:17:F3:DB:2C:75:98
Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Certificate serial: 0765
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
Manifest number: 075C
Signing time: Thu 30 Jan 2025 21:28:54 +0000
Manifest this update: Thu 30 Jan 2025 21:28:54 +0000
Manifest next update: Thu 06 Feb 2025 21:28:54 +0000
Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: EXu7uf+MFBOOtVkWX+BMihH51XBD2gztAoI1mg/wBfM=)
2: 8C6AAF380AC511EB890DE026C4F9AE02.roa (hash: a4ANf8uGuOcHttQZdM48a5efk77lhvSIMBktbozPiW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1893 (0x765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Validity
Not Before: Jan 30 21:28:54 2025 GMT
Not After : Feb 6 21:28:54 2025 GMT
Subject: CN=679bef16-421f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:74:a3:89:a1:d4:3f:22:ec:7c:d4:3a:bf:
eb:b5:e8:74:ad:96:b9:49:a7:9f:4c:44:4e:04:7f:
bd:c0:d9:df:16:07:c2:95:c0:84:2d:87:47:01:f7:
c8:85:bb:4e:c9:68:62:c6:cf:b7:bc:cf:8b:c6:28:
c8:3d:ca:c5:7f:a1:b1:fc:d8:98:bf:73:2c:01:51:
c5:e2:8f:a1:c5:9e:f2:10:c6:92:28:6c:e8:6e:ca:
00:6b:2e:3e:0a:ee:91:4f:b4:e5:d8:d4:1f:a2:06:
4a:46:e1:30:4c:90:41:b7:5d:06:33:32:6b:34:3a:
39:bb:09:49:fd:51:91:c8:d0:00:74:24:96:7d:ae:
16:de:71:63:c7:ba:54:39:4f:3b:a7:87:eb:e6:fd:
19:ff:ad:1d:35:36:f2:78:7a:82:94:0a:ee:08:36:
8c:9c:8b:41:97:9e:be:a8:96:21:1e:91:a8:04:fc:
da:41:57:18:c0:45:99:ea:ca:09:58:47:01:1c:50:
cd:77:06:52:cf:e4:6d:8b:a9:d9:62:8b:05:b9:83:
10:9e:57:04:59:e1:9f:04:91:00:52:72:45:62:19:
a1:ad:bc:78:ec:1c:ff:b6:2c:6f:42:db:5a:e4:77:
e8:63:e2:14:95:43:18:6a:24:c7:51:d1:01:a5:c0:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BD:27:33:C1:7F:BF:1D:4C:87:51:6D:6C:08:17:F3:DB:2C:75:98
X509v3 Authority Key Identifier:
keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:fe:22:f9:dc:4b:b1:a1:c4:4f:e3:7f:74:09:cb:9a:60:e1:
79:8d:95:98:36:1a:a7:86:58:cf:bc:47:bd:d5:ee:c7:1d:51:
30:fa:e3:9d:05:bc:70:fa:8d:57:19:6b:2b:d4:94:5d:ae:b7:
dd:16:33:56:0d:fa:33:a4:54:39:93:e2:54:71:73:78:08:a2:
e7:99:be:f6:07:e0:1e:f6:ff:47:4b:31:8f:6c:9b:aa:6c:5f:
5d:62:7c:72:58:71:56:37:7d:30:03:e6:a3:d3:31:04:fd:ee:
28:75:25:d4:e5:7f:97:59:2e:31:54:8f:55:6c:42:1d:6c:c7:
ad:8e:0c:f0:e4:a5:e0:3d:4c:cb:4f:da:65:9e:d2:53:79:d3:
8e:ac:19:31:eb:07:45:2e:84:a3:8f:29:04:43:65:07:64:43:
96:61:2b:7f:f4:27:d8:59:4b:62:5e:f8:6c:41:62:5e:c0:43:
99:ef:cb:9f:cd:d7:c8:7d:a5:6d:e4:90:d5:5c:cb:ac:0f:23:
60:09:fe:d6:87:7f:47:7c:b5:ad:22:be:1a:2f:e6:9b:2e:a6:
d5:a7:b6:0e:b9:11:f7:eb:0f:76:fa:8b:d5:15:6e:65:c1:94:
fc:db:bb:df:0e:a5:92:63:3c:fd:0e:76:2a:aa:21:4b:57:b5:
d3:22:3d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:18 2025 by rpki-client