Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
File: s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json)
Hash identifier: yt7HEuP14dqIg+QN2z9+6TW/gpDcTMwpR+pBr8Ot820=
Subject key identifier: AC:4B:25:36:1D:3E:CA:C3:8E:19:95:7C:73:E8:EA:68:21:C7:A2:7F
Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7
Certificate issuer: /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
Manifest number: 01A6
Signing time: Fri 31 Jan 2025 02:33:07 +0000
Manifest this update: Fri 31 Jan 2025 02:33:07 +0000
Manifest next update: Fri 07 Feb 2025 02:33:06 +0000
Files and hashes: 1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: 1NR+4I5sJ0gdc3/9na3Q6N+CvswX3lqFcA4vdknMbF0=)
2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: N+dN6EXW9kLpuaXIDcRP+SypH2TkoWeKEFt5XA9cnJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7
Validity
Not Before: Jan 31 02:33:07 2025 GMT
Not After : Feb 7 02:33:06 2025 GMT
Subject: CN=679c3663-b81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:d4:02:d6:e9:2b:9b:71:0f:dd:b8:36:a9:
0f:b1:74:d8:5d:1b:b8:2d:68:41:c6:00:e5:17:e2:
e3:51:81:91:c1:e9:35:25:1e:4e:31:be:e4:81:b1:
d5:ac:a9:cb:ff:9c:03:2a:35:2c:f4:d9:aa:86:61:
e6:c5:d7:99:de:ba:a8:fb:07:06:f4:9d:ea:49:03:
db:e9:c3:7b:18:ad:6e:f0:8c:fe:7e:8f:44:1d:0c:
4a:8f:b7:47:a9:c0:b3:8e:1c:d6:95:24:ff:62:14:
9a:ce:9e:b3:0f:76:b4:a5:cc:8b:1a:0d:44:dc:66:
cc:1f:e9:86:d1:03:7c:ee:8b:0a:6c:ea:06:eb:17:
c4:fd:c4:30:ad:49:f0:16:24:ce:15:6f:f9:e4:3d:
84:d6:de:04:2e:8f:d0:28:9f:04:16:67:d3:26:5b:
73:23:8e:dc:be:af:37:f0:ef:2c:01:29:ea:13:b1:
42:30:e0:b4:74:2b:12:b6:10:24:93:f2:83:0c:e7:
7f:80:4c:98:07:fc:63:83:ef:43:1d:04:dd:ec:a6:
d4:0c:d0:0d:d7:12:69:d1:1c:78:49:32:22:e1:42:
14:8c:40:e2:64:48:1a:f3:e1:53:ae:40:3c:31:a0:
b6:45:b2:4e:5b:67:99:dd:0b:f5:a8:19:f1:fe:65:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4B:25:36:1D:3E:CA:C3:8E:19:95:7C:73:E8:EA:68:21:C7:A2:7F
X509v3 Authority Key Identifier:
keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:41:b7:b1:f3:73:58:82:c3:ea:b6:1e:55:24:17:7b:6a:b7:
4b:86:90:4c:29:c3:53:62:5d:e7:9e:45:48:3d:19:56:cb:15:
dc:55:28:ce:b2:a5:51:da:ca:7d:67:21:f5:80:aa:2f:5e:28:
df:4e:24:1f:e5:bc:9e:11:7f:fe:48:9d:2a:08:96:06:57:e5:
b2:7a:22:57:8a:62:11:1b:93:7a:9e:6a:7a:de:3b:bc:a8:81:
f5:76:88:61:85:b3:31:d3:a1:b4:2c:c3:b4:d7:a6:46:7f:d4:
ad:e3:73:cb:e6:65:ed:ff:1b:da:8e:b4:83:5e:e9:56:03:58:
4e:cc:f7:a9:26:c6:96:38:26:e7:6b:17:5d:cb:27:24:d6:89:
35:c1:f3:a4:d5:a3:5d:6d:4e:2b:f2:cc:fa:73:3d:d2:dc:04:
1d:0b:57:74:e7:54:9f:47:23:37:7d:1c:3a:d9:1b:fe:3a:ac:
96:f7:96:57:9b:44:57:5a:fb:c4:97:ce:c5:f4:41:62:a9:08:
b4:c6:2a:cc:ff:60:72:a1:de:23:7a:70:7b:91:8d:2b:44:b9:
6f:da:0b:2e:4b:67:69:98:65:13:d3:23:25:cc:83:75:91:22:
b6:65:55:30:8b:6f:76:2a:7c:a5:02:73:9d:09:9d:f9:0e:90:
57:a4:d1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:01 2025 by rpki-client