Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json)
Hash identifier: MgHffGo/ezB1TkRarC5S5ETN53KX41nzhIK4xgIQp3s=
Subject key identifier: 01:49:28:44:E0:43:8D:95:7D:DC:C4:5B:1B:75:5A:C1:A8:FF:4D:3F
Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Certificate serial: 02E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
Manifest number: 02DB
Signing time: Fri 31 Jan 2025 01:28:48 +0000
Manifest this update: Fri 31 Jan 2025 01:28:48 +0000
Manifest next update: Fri 07 Feb 2025 01:28:48 +0000
Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: xu23NCwLIZCyo6Qd2bkmc28wCt7PcLYhYn3ld8IEfSU=)
2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 3vg65+dFIA+BeOKO6jxWCKMxKp60+BuPw8DF4AA/5hM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Validity
Not Before: Jan 31 01:28:48 2025 GMT
Not After : Feb 7 01:28:48 2025 GMT
Subject: CN=679c2750-ee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:a4:6a:ce:07:82:ca:52:73:0e:e6:7d:06:
d3:fe:27:1d:a0:4a:b6:92:34:98:66:60:75:57:ce:
b6:b9:98:27:77:89:11:59:90:39:f3:25:c5:bd:58:
c8:6c:df:43:48:0f:de:1d:cd:4b:5e:76:c4:d5:47:
84:63:1b:09:ac:79:73:c2:da:53:d6:fd:70:5f:ac:
57:6a:c2:d0:6a:42:08:ba:fd:a6:64:17:dc:b8:bb:
f9:d4:a2:dd:94:e4:91:89:c8:1a:f9:c2:13:56:44:
fe:ea:9d:61:eb:30:49:bf:53:66:8a:9f:49:e4:c5:
90:82:1f:46:69:fe:f8:b1:8c:3a:5e:42:4a:58:64:
90:50:f4:d2:75:29:34:20:77:28:33:03:85:53:1a:
a2:ff:fa:c2:95:ad:d5:51:e0:16:a0:bd:34:f3:6d:
c3:dd:f2:ee:da:bd:9a:a0:e8:ac:03:b2:fe:0c:0f:
b4:2a:4c:14:54:0a:ec:32:43:f6:6f:36:e3:38:0a:
a0:96:f5:26:fe:98:29:0c:d0:20:9d:b3:19:12:23:
2a:eb:90:53:59:da:85:ad:aa:db:98:a9:09:3e:2b:
e4:f7:06:0b:eb:7a:1f:55:cf:ef:53:24:c9:22:7b:
ef:15:0e:2b:13:88:0e:7c:d3:45:6f:bf:19:1b:5c:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:49:28:44:E0:43:8D:95:7D:DC:C4:5B:1B:75:5A:C1:A8:FF:4D:3F
X509v3 Authority Key Identifier:
keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:6e:e7:02:33:fa:9a:e2:70:f3:8e:6b:87:0b:b2:e1:66:14:
b6:c3:be:13:21:fd:f3:9f:35:d3:78:48:e6:5f:8f:45:b7:62:
18:02:1b:3b:2e:11:93:c8:34:eb:96:0a:fd:3a:44:37:19:43:
b4:13:b4:63:2d:d3:bf:8a:0d:a3:13:b9:7f:21:c0:e1:4c:5b:
ad:81:53:28:18:85:59:5f:99:98:02:3f:6e:a5:b9:bd:55:ea:
e4:ca:25:0c:07:cf:95:2f:73:1d:c6:ce:a7:1c:d3:e2:dd:fd:
f5:a5:c4:71:47:39:17:11:2e:0d:9d:38:0f:3f:f5:7b:58:b2:
59:86:a9:6f:a4:78:6b:6d:61:2c:9f:14:a3:d2:51:e5:4b:a1:
8a:19:c6:36:5c:2d:cd:42:1d:f2:b6:fd:29:87:39:8b:e8:1f:
34:47:9a:c0:75:06:6e:92:48:36:85:e6:ec:f0:0a:66:ec:ab:
ba:63:09:b6:c0:ab:d7:4f:d3:8a:4b:f9:d8:32:9e:79:cb:9e:
23:42:6e:44:c7:0c:a5:a3:7a:0c:98:4d:12:10:e5:f9:1d:c6:
46:28:76:55:47:f8:ec:bd:de:19:83:23:23:2b:52:c5:fd:aa:
c5:84:3d:6b:ec:be:84:f9:c4:90:27:62:97:ee:72:34:8c:ad:
63:a1:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:37 2025 by rpki-client