Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json)
Hash identifier: d8ohn4ri+l/9GMWIOhtwmiDz9TftvmV/Vni9+gAJkaY=
Subject key identifier: 85:88:5E:BC:5A:FA:A9:8E:BA:71:70:8D:77:83:BC:69:B7:F9:A8:EE
Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE
Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
Certificate serial: 0243
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
Manifest number: 023F
Signing time: Fri 31 Jan 2025 01:58:32 +0000
Manifest this update: Fri 31 Jan 2025 01:58:32 +0000
Manifest next update: Fri 07 Feb 2025 01:58:32 +0000
Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: B2U868L6YSq9q26naOPVjNnGApbcPQKylW032e+rUPY=)
2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: c9QYAMegO3Li21SZh3wi64elC555+G1LwZ2LzSZCZTU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
Validity
Not Before: Jan 31 01:58:32 2025 GMT
Not After : Feb 7 01:58:32 2025 GMT
Subject: CN=679c2e48-20c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:b5:dd:d6:74:ac:3e:90:1d:04:5d:07:b5:
0e:7a:5f:e6:7c:bd:3f:45:b4:0f:ce:b2:70:b2:55:
bf:42:04:53:c7:d0:7f:41:8a:e3:df:28:b1:43:92:
a2:e3:8d:f7:32:1f:ba:69:48:28:54:d3:61:14:e5:
ce:d8:90:60:ef:cb:16:81:7f:47:0c:1b:15:30:f3:
11:4d:bb:55:9b:9a:33:d1:4c:26:9a:5d:2b:9b:ed:
eb:d1:1b:2e:43:97:cc:36:f2:19:a4:d1:23:2b:fe:
81:33:bc:9d:ac:97:5c:b4:a4:9e:6d:e4:a1:83:8a:
62:5d:56:a9:0a:b7:52:95:53:07:82:9b:9e:a4:05:
a3:89:4f:4c:35:2d:a0:33:ac:90:47:e4:84:51:9e:
49:4b:76:18:34:9e:43:3e:f4:4a:9a:34:ff:5b:48:
d8:a9:2c:43:85:9d:ee:b0:3e:9f:37:8a:0d:3c:89:
9b:df:98:c8:6f:86:83:f0:d0:1e:3f:8d:4a:0d:44:
4c:df:9d:5b:b5:88:a4:f7:70:02:eb:e9:0d:d8:bf:
f2:b2:9c:9d:27:c9:8a:1b:48:a7:39:2f:9f:7e:f9:
ac:7e:d7:fa:56:47:84:c4:b4:82:94:dd:f4:41:8f:
33:3d:1d:6b:07:94:51:86:b2:72:c2:54:b5:3d:a4:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:88:5E:BC:5A:FA:A9:8E:BA:71:70:8D:77:83:BC:69:B7:F9:A8:EE
X509v3 Authority Key Identifier:
keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1b:4c:47:e8:a4:ff:e8:e6:e0:ef:35:4b:77:7d:96:b7:8e:
b2:be:e3:74:b1:57:c7:32:ce:d9:d2:69:15:b5:2f:de:b4:49:
75:ff:55:b7:4f:89:ad:50:cf:ec:f6:8e:99:6c:b7:7d:4d:65:
76:9a:29:e2:b6:03:52:21:1a:c8:b9:69:5e:0e:ae:7e:61:f6:
7c:14:e2:e9:ec:3a:23:15:3a:ab:84:2b:bd:20:36:60:8a:79:
bf:95:fc:84:f0:63:30:ce:28:b8:16:c0:e1:3a:db:7a:fa:a2:
58:2e:a6:36:6f:f9:79:40:f4:e0:e7:5a:6c:9d:0c:fc:1c:91:
e8:3e:57:c7:74:79:ca:c4:1b:66:5e:31:1d:fd:7e:5a:e2:1a:
13:87:16:5b:d8:28:e2:c2:d3:17:ec:ca:08:01:01:99:9b:40:
46:2c:39:da:48:23:d1:4e:e8:87:be:7a:10:bc:d3:cc:d4:e0:
d9:96:7f:84:4c:88:80:3b:94:e3:05:64:69:70:e4:3f:8b:9f:
c8:82:07:92:2b:64:ae:e0:2c:09:10:e0:4c:85:be:7d:4e:db:
06:3d:a2:b8:06:ea:35:3b:67:2c:71:01:15:67:9a:4a:5e:b9:
e8:f1:2b:59:4d:fb:57:86:b8:2e:7e:f9:04:ea:e0:fa:ee:72:
4d:00:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:25 2025 by rpki-client