Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
File: hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json)
Hash identifier: 0Y7P3i6bjgGR5Vgbf5MvzSSxc7P9kPmhfayP9u5hvw8=
Subject key identifier: BC:00:A3:A9:71:6C:7C:FD:C9:41:BF:23:38:58:D0:99:A0:D9:B6:E1
Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
Certificate issuer: /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
Manifest number: 1D
Signing time: Fri 31 Jan 2025 07:00:54 +0000
Manifest this update: Fri 31 Jan 2025 07:00:53 +0000
Manifest next update: Fri 07 Feb 2025 07:00:53 +0000
Files and hashes: 1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: X6OmO0sFzVgoOxpKDjQnX12MhFMvZtMQQJLMqGEDI7k=)
2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: nKrpei7NHXS/yvzIer9NaLALl/Q2sUCsHstVjHOpR2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Validity
Not Before: Jan 31 07:00:53 2025 GMT
Not After : Feb 7 07:00:53 2025 GMT
Subject: CN=679c7525-a65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:64:e3:1b:00:8d:57:e2:6e:79:2f:87:72:fc:
5c:7a:14:80:f7:0f:20:2f:8e:21:68:af:12:7b:44:
8b:be:1a:2f:79:2d:16:e2:35:ec:15:fd:6f:a2:23:
74:22:ca:40:9a:96:f6:f7:1f:66:3f:8c:fb:a5:c2:
5d:4c:5d:a5:9d:e9:e7:75:a3:08:a4:cd:d2:77:73:
f1:c6:25:62:30:b5:06:d1:a0:37:20:65:b3:34:0c:
3e:81:bb:62:d0:29:ba:82:7d:98:00:b9:be:3a:b9:
2f:54:7f:53:de:58:0b:9e:a4:46:11:0e:33:36:5f:
6d:4c:8d:88:4b:64:1d:59:de:30:eb:ae:ba:f6:39:
69:98:06:b8:68:af:8a:6d:f5:6f:f3:3c:75:7c:84:
56:b9:e2:0a:c6:9f:55:fa:51:76:9e:65:8a:1f:06:
78:ab:38:cc:0e:af:5e:c8:ad:b9:77:57:28:63:64:
70:d3:c8:8a:93:86:dc:da:46:36:be:e2:15:ad:ef:
15:61:fa:31:fc:67:87:86:c1:dc:f8:f2:6b:75:e5:
28:08:f2:75:71:ce:f2:b8:2f:cb:05:b6:ed:b7:99:
86:a6:e0:2b:3b:7c:5a:e6:e4:a8:9b:1e:6f:6f:de:
e7:76:59:f2:9b:89:29:82:c6:7c:bd:ac:d9:a9:e4:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:00:A3:A9:71:6C:7C:FD:C9:41:BF:23:38:58:D0:99:A0:D9:B6:E1
X509v3 Authority Key Identifier:
keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e6:05:8c:b0:b1:4c:3d:e6:e3:af:af:0e:20:dc:5b:47:f6:
e8:c1:c2:c8:7c:ad:13:a4:1a:6c:7e:47:5b:cf:a7:8f:3b:c3:
1d:b1:8c:76:5d:75:57:ea:6b:a6:c2:3b:de:be:68:51:0b:80:
62:27:e9:62:dc:83:bb:3c:83:e2:f8:82:20:97:1a:ad:f0:02:
21:88:b2:c3:21:b0:78:15:a0:eb:17:6c:78:21:2d:87:55:68:
d8:bb:4a:30:b5:ed:5b:06:ec:e5:e9:fe:f4:d2:9d:fe:58:1c:
56:8e:ac:61:2c:60:68:16:f7:9b:01:7d:e3:8b:32:c1:17:53:
bb:16:b0:05:8d:4c:e4:31:1c:1a:80:ac:df:1d:62:34:dc:da:
7c:1c:32:93:0d:d2:ca:19:5e:73:36:bf:a6:89:26:94:dd:c4:
26:62:fb:1a:3f:af:72:22:73:e4:91:77:36:d8:29:a1:bc:dc:
16:66:a6:d3:60:fe:bf:ac:59:b2:a8:fb:03:aa:4a:a5:ca:c4:
c2:49:4a:45:82:eb:b9:db:0b:e8:d4:1e:3a:de:67:14:22:60:
e0:97:ec:57:a4:23:ca:94:75:b8:fa:2f:30:69:29:3e:b8:6b:
95:4c:fa:2c:a4:7c:19:03:a4:86:8c:08:90:91:0b:b0:02:a7:
c8:ef:99:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:33 2025 by rpki-client