Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json)
Hash identifier: RvghGZRztbdJRmyvskzc4fw6iLn6TC8mKliw2TeyMuI=
Subject key identifier: 5C:4E:58:2A:CB:63:FF:68:1B:50:F9:83:25:0A:4D:40:DA:AA:76:28
Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94
Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
Certificate serial: 028B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
Manifest number: 0282
Signing time: Fri 31 Jan 2025 01:41:50 +0000
Manifest this update: Fri 31 Jan 2025 01:41:50 +0000
Manifest next update: Fri 07 Feb 2025 01:41:50 +0000
Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: EXT2XCqHBCvQ4kO55EgHxFC3DAlmKK1nBg8sMoFo8AU=)
2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: tIjRYvm7kHb3Z/vuy4/Hasw9Jy2neJdJRNnPansBj78=)
3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: llPQK6RAm7smNmRGwi10ZC04JcuM8comzd+cTfPYGBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
Validity
Not Before: Jan 31 01:41:50 2025 GMT
Not After : Feb 7 01:41:50 2025 GMT
Subject: CN=679c2a5e-ad1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:bc:96:66:8f:cf:ba:02:a3:6f:43:86:eb:
ba:38:0a:97:28:35:63:75:06:e7:e3:5a:03:d5:7a:
89:2f:3d:22:dd:7f:e9:b4:cf:30:89:4e:78:f7:64:
67:94:af:f3:87:16:89:ea:c0:6c:a1:d8:90:b9:7e:
6a:99:c4:82:8f:32:3e:cb:f0:0a:ca:62:47:f5:ab:
c5:3b:8c:17:71:46:e0:42:2d:96:57:5d:83:18:a5:
fe:d6:ff:2d:d6:bb:0f:0d:dd:e6:ca:10:7e:92:9a:
52:a5:cf:91:8f:7f:aa:37:16:c8:65:02:bc:66:6c:
b5:50:f9:34:3d:82:71:e1:3b:6f:d9:26:7d:6a:4c:
b0:bc:4d:61:51:38:5b:8d:3b:f3:61:a3:45:ec:18:
0b:2e:ff:b3:f0:87:06:46:f0:06:1d:c5:18:75:42:
13:60:24:8f:b7:19:ea:c6:95:57:32:fd:42:d6:39:
43:be:37:17:3f:fb:05:73:5c:b1:e1:ff:6b:9d:ba:
59:88:52:53:17:0f:52:20:6d:08:d0:83:02:0e:af:
4d:00:c4:0f:97:97:78:10:a0:06:50:50:58:31:bb:
77:ef:77:6a:b5:b5:69:b8:74:a0:6e:63:72:84:5f:
dc:23:e4:57:72:21:03:cd:28:a0:5f:ef:ed:2d:13:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4E:58:2A:CB:63:FF:68:1B:50:F9:83:25:0A:4D:40:DA:AA:76:28
X509v3 Authority Key Identifier:
keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:08:61:99:12:fa:72:1e:b2:72:41:76:b5:83:7f:9c:d5:6e:
d9:c6:af:c4:1b:ab:71:38:7b:1a:37:3a:38:53:75:26:48:31:
99:71:dc:7e:09:a0:d6:47:de:e5:b6:57:43:e9:2a:99:f0:9e:
b8:2c:51:3f:3b:5d:6a:36:45:7f:7f:0d:12:14:af:2d:7c:ca:
a5:f6:77:96:46:9c:17:bb:62:d8:1c:99:00:62:ab:b9:c6:67:
90:84:a0:c4:aa:2f:ff:44:69:01:7d:1a:76:b6:18:f0:33:65:
d7:62:82:a0:a3:c4:c4:c2:5d:50:99:3f:9d:5a:02:64:88:3a:
21:1f:97:82:8c:fa:80:b7:db:9f:b8:84:fc:c9:95:19:31:44:
11:8a:34:77:2f:9e:c3:c3:36:85:25:52:42:5f:fc:fd:27:9f:
b9:77:b9:63:00:52:69:3c:6a:99:48:85:40:22:54:d8:18:00:
76:0c:e9:dc:05:05:51:e8:fb:2c:73:e3:25:32:a6:b5:06:19:
53:07:04:df:e1:ec:62:0e:6f:f8:5a:dc:47:2d:b3:db:4d:ed:
3a:b8:21:7f:ae:bb:c6:a8:8a:22:f4:7a:32:dc:2e:ea:cc:67:
21:19:8f:1c:8c:78:0b:56:d9:5f:4c:aa:8a:d8:c5:7d:55:79:
6f:aa:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:49 2025 by rpki-client