Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
File: 2-mhAMSp66SyzRomcTKN73j-duE.mft (raw, json)
Hash identifier: kxsb4oeWaLF+WohUDwBezq0WGnPoDfC2BmSh7HwLwH4=
Subject key identifier: 6D:CD:09:3B:51:BA:11:B3:1A:4C:3D:1E:FD:F3:D8:23:74:D3:A9:B8
Authority key identifier: DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
Certificate issuer: /CN=A91AB74D/serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Certificate serial: 05D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
Manifest number: 05D5
Signing time: Thu 30 Jan 2025 23:03:10 +0000
Manifest this update: Thu 30 Jan 2025 23:03:10 +0000
Manifest next update: Thu 06 Feb 2025 23:03:10 +0000
Files and hashes: 1: 2-mhAMSp66SyzRomcTKN73j-duE.crl (hash: e6HQGlgxRI7fmF2Tsan5R+LuX4rLUXOB2ko/7UKY0iU=)
2: A0D57302A33D11EBA479491CC4F9AE02.roa (hash: 29wrV3aOIMAFp0GF5fJZDO6ldPmXnBQp+J/+s7gWVoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1497 (0x5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB74D/serialNumber=DBE9A100C4A9EBA4B2CD1A2671328DEF78FE76E1
Validity
Not Before: Jan 30 23:03:10 2025 GMT
Not After : Feb 6 23:03:10 2025 GMT
Subject: CN=679c052e-468f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:91:7c:fa:83:21:e0:87:8f:7b:92:1c:e2:
a2:1a:ff:af:23:1f:2a:2a:d9:a7:80:1c:15:21:a8:
44:68:78:f1:46:32:db:c2:cc:de:bc:a9:d0:51:da:
a6:45:c5:4f:b7:7b:42:ea:d1:ba:61:80:8e:ca:02:
6b:58:9e:bd:58:d2:56:03:bd:ad:02:eb:b5:b6:46:
95:c4:59:61:5f:27:82:6c:16:90:b7:62:ac:38:b8:
ea:88:22:8e:91:bc:8e:fa:e8:70:da:18:d0:3e:1e:
c8:49:ae:1a:51:a5:e2:1f:f0:b3:70:37:35:db:ea:
0b:38:22:1d:e5:f0:2b:ef:db:c4:9a:5e:46:8c:55:
d0:32:50:69:e4:b6:5d:b7:29:d1:2a:13:11:ac:0c:
46:79:b3:f5:5c:0f:6e:fe:81:77:36:9b:d3:50:03:
f8:69:74:cf:37:e1:d6:42:f8:d7:f6:4e:1e:d5:60:
f4:b5:35:02:56:33:7b:1a:b5:16:a6:a6:91:b1:5e:
f2:71:a3:24:46:ca:f8:6d:31:80:98:6c:4b:c1:e5:
a9:b8:62:c1:08:a3:28:67:16:b6:78:6b:5d:85:66:
56:50:94:9c:2f:04:59:c5:69:b0:0e:62:ce:4f:bd:
63:60:fa:59:cf:3e:42:e2:3e:92:12:fd:78:b4:12:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CD:09:3B:51:BA:11:B3:1A:4C:3D:1E:FD:F3:D8:23:74:D3:A9:B8
X509v3 Authority Key Identifier:
keyid:DB:E9:A1:00:C4:A9:EB:A4:B2:CD:1A:26:71:32:8D:EF:78:FE:76:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-mhAMSp66SyzRomcTKN73j-duE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/1D713D08A33C11EBB12CED1AC4F9AE02/2-mhAMSp66SyzRomcTKN73j-duE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d5:24:0c:02:1a:d9:58:73:8e:1b:12:e8:29:a0:4e:56:90:
7b:ef:97:57:62:87:ff:8d:0c:f1:bf:78:91:30:e3:2f:9b:46:
5c:bc:4b:f5:ea:ad:7e:2c:07:06:86:26:08:0d:d0:95:cb:6a:
81:23:db:4a:bc:8f:be:ad:4f:5f:0a:8d:25:bf:1c:3f:89:ea:
b8:d2:75:65:55:1b:bf:95:d1:56:bf:c7:4b:dd:f9:8e:2e:22:
24:d9:3f:c4:89:d3:02:c9:a6:83:53:90:c4:8b:bc:7d:cc:62:
0c:98:e2:dd:93:de:92:e9:14:8f:0f:2e:59:25:c1:64:51:e3:
ea:5c:db:fd:ec:6b:4d:1c:9d:ef:29:91:e9:ca:4f:5f:d2:04:
ac:2b:7c:19:63:e6:00:a1:1e:0c:08:de:5c:50:03:57:15:68:
73:9c:27:72:38:a3:2f:66:18:5a:ba:12:59:99:a6:11:ed:e6:
7b:2e:2c:bd:d6:e2:52:40:46:be:7c:30:91:26:68:c2:48:6e:
88:a0:be:0d:37:e6:6a:d0:d5:8c:e9:8e:6b:ce:29:93:65:98:
72:93:9a:96:7e:2a:57:b3:8b:7b:53:2e:db:05:23:ff:c8:43:
d0:93:4e:6f:35:33:a6:79:86:ef:2e:95:66:4b:11:9d:a9:1a:
72:df:e6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:04 2025 by rpki-client