Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
File: hs2LQhipuaG84vrF7m3HhbAKkx0.mft (raw, json)
Hash identifier: ADwmvBWaQr61qOU+aZORLo8/tqSQoV+CO7bt1OkKZzY=
Subject key identifier: 70:97:AA:29:C8:0F:1D:35:28:3A:9D:EE:F6:78:35:F4:91:F3:5B:5E
Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
Manifest number: 01D2
Signing time: Fri 31 Jan 2025 02:28:47 +0000
Manifest this update: Fri 31 Jan 2025 02:28:46 +0000
Manifest next update: Fri 07 Feb 2025 02:28:46 +0000
Files and hashes: 1: hs2LQhipuaG84vrF7m3HhbAKkx0.crl (hash: 22SEVs0S2fPZrTIKvaxWBQ61+q6LQAWkjqsx+qDBofY=)
2: FB9DB0B8778011EFA197A558C4F9AE02.roa (hash: Xb5H7vRLOBo1ZZodz8+wvrypS1HvOJ+5QJJOglzsKIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Validity
Not Before: Jan 31 02:28:46 2025 GMT
Not After : Feb 7 02:28:46 2025 GMT
Subject: CN=679c355e-af6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:ab:4b:de:9c:eb:60:ff:c2:6d:de:d7:0b:
7e:2b:59:5a:81:b2:93:0d:cd:ad:7d:eb:05:a0:ee:
8d:0c:47:d5:5c:2d:f3:1d:55:90:57:66:01:22:37:
38:d0:62:6a:a8:e3:51:02:e9:09:9f:5c:1f:24:48:
e6:0a:38:9b:17:29:c3:02:fd:cd:e5:13:eb:75:46:
14:d4:43:d4:c1:42:ba:7a:5d:20:4d:df:0f:53:4e:
fd:af:f7:75:12:55:3e:73:b2:c3:07:7e:9b:d8:db:
bb:72:5b:a9:8c:c5:cd:37:7f:5b:91:36:57:d2:36:
60:2c:c0:e8:b7:c8:82:fa:04:17:32:38:4b:f6:5d:
fb:e7:bc:65:b4:2b:22:10:dd:55:f1:16:82:ad:25:
a4:b7:ef:ea:7b:f1:0c:38:34:74:72:e2:df:fb:13:
ea:f0:94:9a:6b:04:62:8c:ef:7d:3a:a5:bb:3a:c6:
df:0c:91:65:6d:c3:3c:9f:50:50:05:67:87:dd:4e:
14:05:d7:71:a9:40:ba:7a:1f:c8:a2:65:06:e3:8e:
6e:9b:7f:e5:48:1d:9d:8e:ec:56:7a:b8:f5:e7:bd:
b1:06:ef:bf:d2:fb:80:ca:69:fe:4d:57:5d:bc:07:
b1:69:f7:f8:cd:c5:a9:ab:54:f5:42:5d:28:b0:a0:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:AA:29:C8:0F:1D:35:28:3A:9D:EE:F6:78:35:F4:91:F3:5B:5E
X509v3 Authority Key Identifier:
keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ff:9a:0d:8b:e4:d8:3a:19:2b:b4:e4:5e:a4:26:86:61:23:
e5:8d:67:f9:e0:9b:56:ac:a6:9e:f9:f9:28:2d:1e:92:ad:f7:
02:2d:74:00:a0:e5:b4:ca:da:ad:d3:11:c2:e9:da:0b:b8:97:
5b:19:27:a5:98:2c:e5:a7:09:80:00:ab:90:d0:08:38:51:b1:
22:25:35:34:02:e0:a9:57:da:fe:3c:54:3e:d5:99:cc:9f:14:
c6:53:92:aa:2f:87:53:1b:5e:23:1e:8d:5e:68:d3:eb:fc:85:
1e:c6:7b:71:ef:19:23:bb:fb:7b:50:c7:3b:8a:ff:56:7e:61:
48:e2:ac:37:22:0e:f2:dc:8b:04:bf:e8:70:9e:85:43:c7:08:
3c:d2:aa:07:ee:84:14:64:e9:39:36:2a:d7:01:d4:55:31:d7:
46:ea:0f:d0:1f:1b:7e:84:d3:25:11:d8:c0:32:ef:7d:83:6c:
f1:21:1b:0c:2f:aa:8a:e7:31:eb:b5:b5:9a:2c:b1:e5:7a:28:
e3:fa:a4:56:9f:01:79:f5:78:a4:62:b1:ab:72:1f:c2:0a:5d:
27:6c:3a:90:30:a3:11:97:1e:79:b4:4b:15:f5:6d:84:7b:9c:
2b:bd:81:59:42:c1:a9:1a:6f:60:cf:99:0a:45:a3:f2:77:f9:
e6:fe:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:35 2025 by rpki-client