Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
File: H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json)
Hash identifier: kJqFAQ4yrwyJMPkwHmoV54+YNSeL5C3toz1pG5pWf/g=
Subject key identifier: B7:89:8F:72:08:47:E5:71:06:A2:6D:CA:D6:96:27:47:EA:56:F1:ED
Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6
Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6
Certificate serial: 086F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
Manifest number: 0866
Signing time: Thu 30 Jan 2025 20:42:54 +0000
Manifest this update: Thu 30 Jan 2025 20:42:53 +0000
Manifest next update: Thu 06 Feb 2025 20:42:53 +0000
Files and hashes: 1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: OL9H7iYtSOHRln6iHuTBfWb3BzxA9LyWEJOm80bBv+c=)
2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: SN8H+wlNRKYrCxUHxIAyf/X+hOgrSPj705PxLlFgAuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6
Validity
Not Before: Jan 30 20:42:53 2025 GMT
Not After : Feb 6 20:42:53 2025 GMT
Subject: CN=679be44d-3182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:11:ce:4f:42:24:22:e7:b6:96:54:31:ab:
05:4b:e7:5a:27:73:9b:e4:cb:ef:77:87:38:64:f2:
1e:1b:9b:41:68:a8:f0:a5:b1:c7:81:7b:6b:91:0f:
db:ca:5e:1e:2e:56:13:63:57:3c:42:7c:09:de:00:
2d:44:b0:a7:82:a1:8f:43:5f:ca:22:0f:14:3b:33:
16:59:94:88:44:d8:da:e2:ae:d3:b5:80:c6:e2:1d:
56:62:5d:c2:b7:f8:09:4b:3e:e5:21:4a:3b:fb:9f:
d0:9c:14:d4:2a:9f:c6:d1:a5:ec:65:c6:95:64:48:
a9:60:71:1e:a7:f9:2b:2a:f1:91:ed:61:33:73:d0:
b7:93:21:65:59:5d:0a:dd:cf:b2:93:f1:f8:43:2f:
e8:06:9c:80:4c:9c:db:ef:b1:92:ab:f8:89:b2:dd:
2c:27:7c:aa:ab:ed:8f:db:93:03:f4:c3:fa:cc:57:
c8:02:42:4e:2a:3f:7a:8f:ac:8e:df:86:28:43:1f:
a6:68:fa:13:11:a2:45:72:e2:bc:4c:c2:d1:6c:7b:
67:58:e1:e3:f1:77:ca:74:c7:f2:90:43:3a:f4:cb:
0b:8d:22:7e:23:6d:84:1b:4e:10:f1:bf:9b:96:d6:
17:5f:02:b8:7a:70:a5:02:f8:90:d1:c9:b8:f5:02:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:8F:72:08:47:E5:71:06:A2:6D:CA:D6:96:27:47:EA:56:F1:ED
X509v3 Authority Key Identifier:
keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:7b:53:f9:c6:1d:26:a5:44:66:fc:6c:a1:a6:72:73:b7:84:
7f:1a:d0:4f:ba:0a:1b:ba:53:c2:a7:1e:0f:8a:9c:0f:15:60:
ba:bb:9e:c0:4e:90:0b:db:a6:84:a2:20:ba:dc:12:4b:1c:34:
8f:be:2b:3d:6e:02:c7:49:10:54:72:65:ed:57:3f:02:f1:41:
2e:ad:aa:19:18:0d:71:56:f8:3a:92:f8:47:13:14:93:70:2b:
3e:46:0b:14:0e:79:fd:e5:81:d8:90:cb:e3:b9:77:dd:2a:d1:
b9:8f:66:b2:21:c8:39:70:25:f2:5f:a2:92:50:da:97:15:14:
e7:14:c5:b5:f1:fa:37:95:a2:3e:2a:01:9f:96:44:4b:a3:b5:
d8:6f:8e:34:75:98:d3:55:c3:e2:86:2a:51:89:c5:f5:cf:1c:
79:00:6b:67:c5:01:42:a5:b3:54:cb:4d:33:2d:65:1e:1f:9e:
33:1c:83:3b:26:7c:59:eb:29:fb:ff:94:6a:12:b5:a9:db:f3:
2e:1a:b6:26:cb:a0:fb:aa:31:67:4b:c3:67:04:eb:d5:7d:bd:
89:4a:e8:a8:28:f1:d0:52:e4:be:6d:49:49:0b:dc:ea:14:97:
9e:3c:90:c3:ec:bc:31:6b:f5:2e:6c:a5:94:40:3b:39:70:bd:
19:21:64:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:42 2025 by rpki-client