Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
File: HAQwdyQVc864WNlR8CsiBXujluc.mft (raw, json)
Hash identifier: 9IBFeCaFA2OPMZqtO/pKUiFVcfvp4sUJpttSUhZZ6b0=
Subject key identifier: 79:56:E6:9D:5D:21:D9:19:9E:66:2C:CC:63:A1:B3:26:78:5F:97:10
Authority key identifier: 1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7
Certificate issuer: /CN=A91D45A2/serialNumber=1C043077241573CEB858D951F02B22057BA396E7
Certificate serial: 03AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
Manifest number: 03A6
Signing time: Fri 31 Jan 2025 00:47:46 +0000
Manifest this update: Fri 31 Jan 2025 00:47:46 +0000
Manifest next update: Fri 07 Feb 2025 00:47:46 +0000
Files and hashes: 1: HAQwdyQVc864WNlR8CsiBXujluc.crl (hash: XsmZq2/wOlOGEploQX1vzOnzZjeP4Mq23eul6VOBB5A=)
2: 4AB730E0800B11EC84B3FA3BC4F9AE02.roa (hash: FLNuzQsiXD7KkcF5wVKcCpcAVmQ8hS+JXE7aj3S10Xo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D45A2/serialNumber=1C043077241573CEB858D951F02B22057BA396E7
Validity
Not Before: Jan 31 00:47:46 2025 GMT
Not After : Feb 7 00:47:46 2025 GMT
Subject: CN=679c1db2-fbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:dd:42:cf:c7:81:7a:7e:2a:23:75:9c:f8:
f9:69:d6:3c:90:ae:32:ae:d1:42:8a:11:86:24:0d:
c0:d6:30:2d:c8:5f:f9:52:1b:fb:06:28:34:bd:f6:
9f:f7:77:bb:90:19:79:f4:b8:82:0c:26:6b:74:04:
b6:e6:cc:40:b6:13:7f:43:86:73:61:ab:6f:b2:a0:
17:6e:16:cf:67:76:39:4b:cc:e4:a9:6a:f4:33:2e:
4d:b0:e6:e5:f2:37:cd:9b:3f:02:43:a9:bf:f0:b7:
47:5f:c8:9a:08:d7:92:6b:ca:0c:0c:e3:cb:7d:6a:
fe:99:89:b4:58:e6:ba:57:72:88:6d:b9:f6:20:de:
d8:39:0c:b9:55:f4:bf:56:0f:a2:27:43:40:fa:2d:
df:51:94:f7:e6:24:d0:db:ef:72:a2:86:f7:44:b4:
0c:69:d7:76:d6:b7:b4:a7:07:11:d0:0a:1e:5d:2b:
a2:5e:bd:b1:51:d1:a5:79:17:2f:2a:6f:74:c4:b6:
4f:cd:5d:6d:38:1d:65:d1:ac:2a:e2:f9:6e:f4:01:
b1:ed:b3:a9:78:cd:fb:75:0e:df:3c:56:0b:90:6d:
bc:41:3f:ca:1a:cc:46:38:df:83:0c:20:f3:c3:1e:
65:86:e8:3b:b4:22:85:96:02:8b:49:a6:33:51:63:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:56:E6:9D:5D:21:D9:19:9E:66:2C:CC:63:A1:B3:26:78:5F:97:10
X509v3 Authority Key Identifier:
keyid:1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:da:bf:75:ae:de:12:f0:68:b6:61:84:b1:25:77:26:af:bd:
57:fa:5e:ff:ff:18:27:8d:e1:82:b3:c1:6e:2c:98:53:cb:f3:
d5:f4:8d:52:50:12:61:2b:fd:b6:cf:f4:2a:14:f1:2a:53:46:
0c:f0:05:98:97:45:34:03:98:96:86:15:9d:13:87:90:19:9d:
7a:3f:f8:bd:da:b2:42:63:6d:b6:b5:99:29:df:8e:85:36:ca:
cc:eb:6e:16:e8:9b:8f:6b:8f:63:f5:0d:0d:d4:2d:c9:61:a2:
4d:a9:5d:34:32:e2:1e:e4:b5:c8:5e:d6:07:24:50:eb:50:66:
eb:8b:ce:1a:b9:f5:e1:f9:57:09:68:ff:75:d6:78:3f:75:a3:
32:d3:de:93:2a:ca:55:6f:ac:bb:0e:98:d6:b1:3e:48:1e:45:
ee:02:c1:59:6e:1e:1b:2a:79:82:59:97:1a:a6:d7:3a:3c:78:
f7:4f:b4:e8:5a:d9:06:8a:11:61:84:09:31:34:cd:70:c5:7e:
80:d9:cb:a0:73:4e:d1:4f:6e:cd:2b:3f:21:8f:61:b1:e6:c5:
23:2b:21:80:d6:9a:b2:c4:eb:3e:55:87:63:31:f4:81:5e:51:
f5:7b:f9:a6:95:a3:49:63:26:c0:40:21:2d:76:2a:3f:d0:fc:
d8:91:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:34:40 2025 by rpki-client