Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
File: h7HuPp7irRoRPyeipU4sC41a-zQ.mft (raw, json)
Hash identifier: 9NxdOaUrlIT/7g0GwVQxUt9IQwL7DCZti0TGicZWfjg=
Subject key identifier: B4:96:9C:40:F2:15:51:13:D4:FB:CF:A8:68:D1:14:3E:F2:FA:BA:D7
Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
Manifest number: 58
Signing time: Fri 31 Jan 2025 06:11:55 +0000
Manifest this update: Fri 31 Jan 2025 06:11:54 +0000
Manifest next update: Fri 07 Feb 2025 06:11:54 +0000
Files and hashes: 1: h7HuPp7irRoRPyeipU4sC41a-zQ.crl (hash: iMBc8uSzhnfeCgm0YwYQziOCLdoZbP2WlixFGlPu2z4=)
2: D4FC5DAE5B9E11EF9205B45BC4F9AE02.roa (hash: CgPRx4xYkJ9MsNRxqHiEwCH23g8u+Rv2yHcGrJnrP8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34
Validity
Not Before: Jan 31 06:11:54 2025 GMT
Not After : Feb 7 06:11:54 2025 GMT
Subject: CN=679c69aa-d08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:17:53:47:d9:f3:10:5e:33:db:7d:e2:bf:
42:d2:b9:e8:25:a6:0e:a6:8e:7e:3e:df:87:3a:9a:
10:c3:68:3f:82:0f:5c:23:24:83:20:d1:99:54:d9:
2b:f5:80:e7:48:f0:4a:97:94:c8:7f:a5:56:03:a7:
c5:9d:90:0c:7a:3c:23:78:79:53:9e:1d:ac:9b:70:
ae:2d:88:b7:ff:d5:e0:29:c5:3b:8c:9c:17:8d:eb:
8b:f5:02:b9:ed:c2:f8:9d:3c:b4:f3:72:5f:eb:39:
9a:20:c6:28:83:85:65:ff:49:3f:d3:d4:26:74:1c:
a9:04:ba:04:c9:3b:ab:c2:20:75:c4:18:ce:c8:94:
f0:04:31:d0:93:f3:90:92:6a:24:18:f1:f5:4f:d0:
b4:97:70:40:ce:66:dc:da:c6:1f:8e:71:af:7e:90:
d0:b1:38:6a:47:c8:f3:c4:f2:75:64:8d:57:6a:e7:
4d:0c:c9:b3:f2:1e:46:78:48:71:a1:95:89:dc:70:
d0:c0:57:ba:9d:cc:5c:6b:5b:99:5e:64:89:9d:25:
c4:ea:ee:f4:45:0b:95:91:33:a2:1f:03:bb:22:a4:
66:9d:b8:0a:02:3c:bb:e6:76:dc:3c:e5:08:45:0d:
ce:75:1c:d2:90:f9:83:5a:9f:9a:08:1b:57:d8:c3:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:9C:40:F2:15:51:13:D4:FB:CF:A8:68:D1:14:3E:F2:FA:BA:D7
X509v3 Authority Key Identifier:
keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:8c:d0:41:77:71:97:ee:03:49:4f:40:3c:10:f7:4a:5c:9f:
36:2d:91:d8:e2:b5:02:c0:25:aa:c7:8d:db:6a:22:b0:5d:2e:
af:5c:d8:d8:ad:34:f8:83:bf:97:5f:65:e5:c9:89:e1:55:aa:
66:98:e8:0b:ed:56:f7:3b:5e:e5:0e:f9:7b:a9:7d:5f:d2:26:
ac:cf:59:a1:eb:d6:01:23:b0:eb:65:11:b7:5d:0c:64:53:c2:
68:ff:2d:04:7f:90:59:32:69:c2:07:fa:28:f9:6b:8d:19:27:
ac:42:3d:7b:4a:9b:97:82:0c:8b:5a:f8:03:a1:52:37:c7:05:
60:6e:a8:f3:c0:58:4c:f9:46:f1:c3:71:8a:cb:11:cc:96:c0:
70:0c:a1:6f:f9:ac:52:5f:2c:62:d8:e7:73:e1:b6:d9:ba:34:
ff:da:8d:87:aa:9c:3b:e5:de:1b:9e:56:a0:c8:ba:78:5e:48:
ea:f7:2d:ac:97:7b:2a:04:85:62:80:cb:11:42:aa:d6:f3:ea:
2f:b8:2f:d2:bd:67:b2:c5:63:3b:20:27:ba:11:6c:6f:13:e4:
74:60:27:dd:99:ff:01:e5:36:08:93:69:0c:0c:db:bf:98:46:
79:d9:5e:ec:2e:eb:64:64:92:87:c8:35:32:0f:dd:a3:91:30:
f3:1a:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:57:03 2025 by rpki-client