Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
File: hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json)
Hash identifier: JJfR3mZd91G7iMD9zFOYgB3D7sG5vjuEcUjTomGX60A=
Subject key identifier: E5:C6:B7:B5:3F:07:EB:AC:F7:7D:FF:C8:D2:07:06:DE:48:A7:16:5A
Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
Certificate issuer: /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
Manifest number: 01B2
Signing time: Fri 31 Jan 2025 02:26:19 +0000
Manifest this update: Fri 31 Jan 2025 02:26:18 +0000
Manifest next update: Fri 07 Feb 2025 02:26:18 +0000
Files and hashes: 1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: WMYNV6ZM+R3qAkK7y9FxAJQU/77dDD3UjzNfMt8ad5g=)
2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: f6YvpcInK7aMZI/gTlnIjzNzS2LMqoG/bSzJ7lAf9V4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Validity
Not Before: Jan 31 02:26:18 2025 GMT
Not After : Feb 7 02:26:18 2025 GMT
Subject: CN=679c34ca-661b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:d4:18:fd:e9:3d:a0:d6:01:a1:b2:c7:e8:
bf:da:7d:c6:bf:1e:25:7f:0c:7a:79:c0:35:44:c6:
88:c2:72:29:25:89:82:64:85:51:d0:88:3a:01:2d:
76:ce:c5:25:70:b3:c7:97:41:9c:a9:46:c1:4e:49:
59:45:4b:97:ad:f9:d5:a1:35:ef:33:19:0c:06:c6:
2f:4a:1e:f9:bd:32:e3:ec:fd:ef:f8:78:d7:fa:5b:
f0:b2:75:46:f8:1b:9a:11:22:fd:6c:16:f0:dd:a2:
48:54:12:8a:95:be:8f:21:e9:a3:f8:86:78:45:ee:
fd:79:95:50:6f:cf:1c:22:29:4b:49:09:ac:3d:43:
20:3a:90:2d:16:16:03:b2:83:5f:62:b8:90:c0:44:
4b:f5:26:e9:e0:b8:df:b6:04:65:86:a2:0b:8b:f9:
3e:47:6b:20:45:2a:bc:b2:98:1e:ad:57:5d:8a:38:
44:43:4a:a0:42:55:11:f7:e3:26:4a:c0:89:8d:f8:
4b:39:36:7c:3b:1d:e2:12:56:27:7d:bd:bf:81:93:
e5:2c:f9:6f:60:d0:15:59:6a:24:df:50:5e:3f:24:
95:b2:c7:2b:59:76:7f:7b:de:96:b3:fd:d2:a9:17:
20:2a:6b:55:e7:0a:9b:94:3c:8a:bb:85:97:b3:04:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C6:B7:B5:3F:07:EB:AC:F7:7D:FF:C8:D2:07:06:DE:48:A7:16:5A
X509v3 Authority Key Identifier:
keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:2e:86:ac:92:c0:0d:f7:79:6a:f5:36:d2:1c:8a:d8:c2:98:
5e:5c:a3:6b:87:1c:55:c0:49:65:f5:0c:8d:e8:9c:f9:3d:79:
c6:6a:38:29:6f:97:49:7b:a8:df:a3:4c:bb:1d:33:3a:b9:ca:
ca:fa:95:05:fe:53:82:ed:63:1e:b4:aa:4d:24:70:b0:b8:f4:
7c:d1:e2:96:42:af:e7:01:96:31:88:d2:ae:d7:42:d2:41:4d:
f9:02:c8:21:12:13:cd:e5:ce:1e:fd:95:5e:55:e5:85:07:81:
fc:b1:67:a3:de:a3:71:1b:c8:c7:ca:f9:84:59:e4:e5:62:b4:
19:12:36:6a:f5:61:0f:54:1b:da:5b:cd:6b:c9:37:16:9d:72:
36:6b:7f:aa:c7:48:63:b0:5a:95:0f:99:41:b3:82:b3:9f:b6:
fa:c2:87:e8:37:2b:7d:49:d3:f1:af:2c:fc:2a:5f:97:f8:5e:
73:60:fa:ce:64:1e:89:b2:ba:8f:c4:1b:ba:fd:c1:e2:23:c3:
76:6e:5e:ce:35:b3:28:ea:f6:35:83:d1:dc:71:fd:51:ef:8d:
55:86:25:69:2b:1e:79:43:59:46:a4:1f:51:cf:e8:b2:96:63:
eb:ad:36:c2:ee:e0:11:18:5f:9f:82:f5:43:ce:e3:54:29:a5:
e4:79:7e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:50:43 2025 by rpki-client