Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json)
Hash identifier: 4zSIDK7wye/y5TZBQZMFaSycYpZguM8lj/z1Gyj/vno=
Subject key identifier: C7:47:3C:14:FB:92:CC:92:68:10:BA:F9:59:72:1C:17:89:35:89:C2
Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14
Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
Manifest number: 0197
Signing time: Fri 31 Jan 2025 02:43:36 +0000
Manifest this update: Fri 31 Jan 2025 02:43:35 +0000
Manifest next update: Fri 07 Feb 2025 02:43:35 +0000
Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: itLth6YN14wey/mXVZc1yz4E4sHxcRBMr1K4Gtin8ac=)
2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: k1Zwpv5X+PU26A87kFtIjFMNyUjqNWGBGW/MolkeBNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
Validity
Not Before: Jan 31 02:43:35 2025 GMT
Not After : Feb 7 02:43:35 2025 GMT
Subject: CN=679c38d7-6f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:49:c2:2a:39:1f:e9:85:02:cc:3f:da:30:70:
e1:a2:f7:bd:89:a6:db:9a:df:40:4f:26:55:e7:54:
57:76:d1:e8:1d:00:48:53:f0:87:b9:37:7e:00:89:
c3:6e:5c:f8:56:a3:c8:e6:63:3a:92:d9:5d:c3:59:
98:40:fe:21:1c:8c:a5:e9:03:3e:6b:61:8b:23:32:
43:21:d9:a0:c3:14:c5:99:53:e0:20:7e:02:1a:0a:
8b:79:55:7e:37:07:99:71:eb:2a:c0:0c:3c:d5:fe:
b3:48:b4:1d:d8:7a:4b:5a:b4:97:17:d5:11:83:6b:
ef:2f:86:83:f8:ab:02:f9:b7:a8:9f:1b:12:14:21:
d7:b9:33:78:01:56:92:cd:43:2b:ac:65:ec:b7:9d:
49:5a:b9:d4:e7:25:bb:71:7a:f9:53:dc:30:55:7a:
a3:92:d9:c8:a6:fd:65:0b:59:c7:e5:76:a3:41:18:
e4:bc:d9:ba:0b:1a:13:61:f3:a9:68:69:84:69:e3:
59:50:e3:b7:95:1d:db:04:56:5a:96:82:70:d5:38:
97:3c:dc:af:0e:b5:53:a4:91:1f:4b:6f:80:ee:86:
d8:ab:37:9c:07:64:4e:4d:ce:4b:9f:c8:60:06:8d:
63:4e:96:f5:d4:ca:6a:19:f9:2e:67:91:fb:1d:52:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:47:3C:14:FB:92:CC:92:68:10:BA:F9:59:72:1C:17:89:35:89:C2
X509v3 Authority Key Identifier:
keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c3:40:d2:22:2d:5a:3d:88:6f:f9:27:b0:0e:1a:95:6f:3b:
1e:6d:c7:ef:aa:21:55:79:f8:a9:3c:60:0f:e0:80:b7:84:74:
ef:e4:cd:3b:68:6b:44:42:d8:cd:60:dc:3d:85:58:cf:c3:78:
25:d2:2f:61:66:37:4c:54:4c:10:50:b5:fa:38:c2:12:03:c9:
19:39:3e:20:9d:fc:98:73:cc:b3:34:eb:7b:15:ea:bb:49:0d:
a8:f0:8b:01:a2:af:64:88:de:74:0e:c4:13:be:c4:96:36:f1:
cb:12:a9:7e:a8:63:dc:39:be:7b:0e:25:1e:72:c9:cb:59:70:
5c:3b:a7:ad:9e:08:5d:f9:d2:f7:3e:f4:ea:80:90:54:5f:01:
95:e1:59:ca:92:e7:5c:ec:1b:12:e9:45:ef:86:e3:fc:8c:1a:
96:b1:11:f6:40:67:44:14:8d:d1:73:d3:df:36:31:f5:ff:bf:
cf:d1:5b:9b:16:e9:94:1b:fa:14:a0:4b:ac:37:1b:65:a9:d6:
3f:df:3e:32:e9:6f:27:eb:31:27:9e:6f:f6:c4:2c:6b:dc:51:
ad:97:31:9c:47:95:d3:21:2a:e4:ee:3e:61:2b:bc:4f:ba:e7:
b6:c1:9d:2f:b1:43:cb:4c:d1:22:a1:76:92:45:15:be:6a:16:
1d:20:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:13:06 2025 by rpki-client