Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier: dVauQmcxBAW1/uZyIafE8TSnyMpEM81ezZi/KBvHnBw=
Subject key identifier: 56:85:5E:7F:D4:33:1F:5A:55:73:6E:C7:89:64:1D:A1:7F:82:F4:50
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number: 013F
Signing time: Fri 31 Jan 2025 03:34:30 +0000
Manifest this update: Fri 31 Jan 2025 03:34:29 +0000
Manifest next update: Fri 07 Feb 2025 03:34:29 +0000
Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: 3n50ngK+kSAcNCu50CO64FKOFSMmoF/0hyvmi9Ca810=)
2: 1FE69168F9CB11EDAF704E7FC4F9AE02.roa (hash: ecoU/18dnE70yGBufRntMgWEavYiNwHveeZ+SS7xzWQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Validity
Not Before: Jan 31 03:34:29 2025 GMT
Not After : Feb 7 03:34:29 2025 GMT
Subject: CN=679c44c5-d2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:db:f1:be:48:ac:87:5f:45:ed:ac:ac:2e:
cf:bd:21:fc:ba:32:af:33:ac:46:8a:18:9e:73:76:
42:3a:de:97:d7:56:64:1e:86:0a:32:f3:d7:e0:94:
5f:79:6e:2f:40:80:ab:d5:dc:99:59:9a:71:71:11:
2b:a6:c2:f6:bd:84:94:d2:19:69:64:0c:f7:10:c4:
af:bb:fb:44:9c:53:46:ea:4d:3a:27:85:62:de:ee:
69:af:ea:b7:a3:9f:88:e1:ff:24:85:14:1b:43:13:
49:50:35:8e:27:e4:b2:85:7c:33:f7:c2:de:4f:6f:
a4:7e:92:4b:87:92:01:db:57:ec:4d:ee:da:47:0b:
b1:85:32:f5:79:9f:25:6d:bf:73:16:22:6a:d5:7d:
ad:7a:d6:48:e4:b5:77:76:94:eb:2d:f0:b9:e0:d1:
3a:ad:4f:f4:43:13:7f:da:75:c2:87:cf:fb:2f:3f:
16:df:5d:41:58:37:5e:10:c3:a7:17:65:14:51:8b:
91:37:91:65:5e:ec:be:82:14:8d:d2:e6:d9:53:0e:
64:7e:3c:64:74:43:0a:2c:d6:9a:37:e7:bb:5d:d1:
19:f4:34:f4:ed:95:42:31:9e:b8:08:8b:00:73:99:
02:1c:61:2c:d9:3f:58:39:8a:9c:11:a9:3c:c5:08:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:5E:7F:D4:33:1F:5A:55:73:6E:C7:89:64:1D:A1:7F:82:F4:50
X509v3 Authority Key Identifier:
keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:e7:7f:b9:2d:e4:28:2c:db:1b:ea:26:a6:66:ba:16:a8:ab:
03:3a:33:55:3f:c2:6b:d3:91:ed:a5:6e:70:be:87:52:91:be:
ed:5c:a5:6c:d0:87:2d:b8:b3:56:06:2d:20:5a:df:7f:63:71:
dc:24:c8:36:80:18:65:01:63:e7:53:02:78:df:97:4e:9c:2c:
fe:f0:7d:bb:fd:dc:40:90:e9:d2:0a:8a:3c:0b:5c:5a:84:87:
f8:c9:ae:00:c7:7c:94:01:70:71:96:2e:92:2d:b0:9a:7e:f8:
84:27:f9:84:d4:8d:9f:2d:a6:4c:a7:c5:cd:80:9d:b7:83:d9:
ce:7b:77:cd:81:65:f8:cc:ba:fd:6e:e5:5e:cf:23:b4:4a:43:
31:97:af:70:5d:41:b5:89:37:18:5a:21:b0:e8:9c:79:8f:92:
a1:b0:0d:fd:db:1a:b0:da:ef:c2:63:61:ca:bb:20:7f:67:28:
90:92:91:29:28:c0:90:2f:b7:ed:f1:97:81:f1:4f:9a:66:ad:
57:5f:aa:d6:dc:37:84:95:a9:0c:8e:64:f2:4e:b6:f7:d8:35:
58:7d:34:9a:af:10:e0:dd:fc:59:14:5e:9b:35:10:b9:3d:a7:
5d:a5:a4:0c:b7:f3:79:95:76:78:c2:46:dc:3f:df:f6:a6:d4:
f6:70:06:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:25 2025 by rpki-client