Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
File: hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json)
Hash identifier: jaOvlM1FPz6scEHuf7APTgNDaMoJS5NG55wetozyjtQ=
Subject key identifier: 7A:C5:C4:0C:8B:85:91:0C:31:27:E4:7B:71:0F:5A:9A:D2:9A:15:F5
Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
Certificate issuer: /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Certificate serial: 0CD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
Manifest number: 0CD0
Signing time: Fri 31 Jan 2025 18:04:45 +0000
Manifest this update: Fri 31 Jan 2025 18:04:45 +0000
Manifest next update: Fri 07 Feb 2025 18:04:45 +0000
Files and hashes: 1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: shk0CtD1qER5t+AnEyTKl7/LW9I7gn9sE65zMjVC1Ec=)
2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: iNF26PQV2QDxZAqXThwlTn9eA9VPYLTtDdkUTHz7O7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3288 (0xcd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Validity
Not Before: Jan 31 18:04:45 2025 GMT
Not After : Feb 7 18:04:45 2025 GMT
Subject: CN=679d10bd-b2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:d1:88:0f:1a:36:2e:65:f3:99:59:e1:6b:
9d:cd:b4:d6:d7:69:01:49:0e:a4:68:06:a6:7e:32:
e0:55:ab:98:b0:a0:aa:24:f8:fa:57:e3:bf:39:d8:
e5:90:83:de:32:c0:8f:cd:80:76:45:4f:51:3b:bd:
8f:06:40:da:36:44:9c:5e:e8:96:83:5b:fa:cf:2e:
d5:97:13:f5:50:62:26:da:cd:f1:5b:4f:6d:9f:68:
e5:f4:ce:1b:14:69:18:ba:f1:fb:56:9a:87:fa:82:
9b:71:6e:7c:a3:9c:a9:95:75:3c:3d:fa:bb:28:d4:
0c:72:6c:5a:1e:82:f2:3e:f9:8a:40:95:e0:d9:88:
4d:ab:1c:68:c6:c8:a8:20:fe:81:3f:d8:f4:05:3a:
8b:49:7c:27:7f:16:da:eb:22:62:8a:c4:0b:68:f6:
f2:0e:63:9d:12:c2:46:02:21:69:24:e1:89:ac:ea:
f7:a7:de:a4:25:47:3e:a1:df:03:e2:fa:b4:23:89:
68:5d:60:e9:a4:67:f7:36:a8:bb:42:46:dd:43:86:
0c:e3:95:63:94:52:c5:e1:e3:95:85:c5:70:db:5b:
41:b4:f5:34:d8:35:25:3d:61:c0:11:92:29:dc:03:
2c:0e:ab:d4:4f:26:fb:62:98:73:53:f3:95:51:06:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C5:C4:0C:8B:85:91:0C:31:27:E4:7B:71:0F:5A:9A:D2:9A:15:F5
X509v3 Authority Key Identifier:
keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0b:6d:6c:e5:04:8e:34:8a:c1:a6:00:8f:b4:1a:8e:b5:3e:
84:5d:b4:e1:b5:16:02:f4:fe:b7:46:19:76:77:29:1b:6c:72:
99:0f:26:4f:e7:3b:7e:97:2a:8a:b6:2e:66:16:63:01:57:74:
b1:dc:d5:7b:6d:39:b0:8b:58:dd:10:1f:bb:58:58:0d:61:b3:
8a:b0:b4:7f:06:0c:49:33:46:32:21:70:92:2e:a3:41:80:9c:
2f:6d:44:e2:b3:65:b2:03:a7:b0:9d:9a:5f:f7:fb:43:51:53:
d7:37:c0:a7:ea:bf:ce:1b:f4:d5:50:7b:d0:f8:41:90:75:d0:
f0:59:35:62:0b:db:10:1c:92:6b:4e:64:58:cd:06:de:eb:7f:
c1:6f:4e:ec:1c:f6:71:7a:b6:06:81:b0:ee:4c:b4:45:6d:da:
8b:b8:6c:c4:50:f5:2b:b4:9c:43:25:90:b2:b2:52:b5:4d:a8:
2c:b5:bb:f9:a1:aa:b0:cf:45:ec:76:4a:e4:92:3c:c2:ae:ca:
48:66:2a:48:91:4f:50:9e:19:cd:ad:1c:c8:a7:c2:f5:60:2c:
12:a1:dc:89:c6:3b:45:e7:42:7c:41:27:f9:2e:50:03:ae:db:
80:c3:a8:65:3a:d4:12:83:17:98:5a:d5:d9:2b:e9:4d:ec:da:
51:43:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:11 2025 by rpki-client