Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
File: HAF157M3En5uwlH0Og0qxhMRv04.mft (raw, json)
Hash identifier: zF70LeWgasp1wffyZpHoPhCuLlmUM9+YLVtzn+5Wm08=
Subject key identifier: EC:BC:DF:2D:97:9D:8B:2F:F5:BB:12:E9:4B:2A:7F:FD:4D:1E:8B:32
Authority key identifier: 1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E
Certificate issuer: /CN=A91E3584/serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
Certificate serial: 3449
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
Manifest number: 3446
Signing time: Fri 31 Jan 2025 14:26:45 +0000
Manifest this update: Fri 31 Jan 2025 14:26:45 +0000
Manifest next update: Fri 07 Feb 2025 14:26:45 +0000
Files and hashes: 1: HAF157M3En5uwlH0Og0qxhMRv04.crl (hash: UZMojUXbLQah189WAKGXB+AH+3qAuih3MOKSpZo8Xhc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13385 (0x3449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3584/serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
Validity
Not Before: Jan 31 14:26:45 2025 GMT
Not After : Feb 7 14:26:45 2025 GMT
Subject: CN=679cdda5-2ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:1d:b0:83:c0:2a:83:7b:07:e6:f8:2f:e4:
ec:0e:69:b7:64:a6:89:b0:a6:5f:9c:df:15:af:94:
6b:9f:ad:8a:cb:aa:19:80:0b:4d:e3:33:ab:68:44:
33:e7:71:6e:90:93:3c:47:d6:72:d2:64:66:07:60:
ce:bc:18:4f:de:59:fa:b0:e8:1d:57:ac:24:49:dc:
68:86:75:85:04:53:41:06:a8:60:1a:f4:bb:9f:82:
1a:87:81:b2:79:8d:d9:ed:dd:e9:93:d9:a0:8b:14:
f9:6c:ab:18:f3:68:d1:1c:3d:e2:3b:3d:2e:bf:aa:
48:88:b7:88:6d:be:4d:0f:ec:3a:e1:18:d4:d0:62:
8a:8f:b6:6a:cf:9e:02:5e:2f:a0:27:bf:a0:6e:53:
dd:f6:58:43:44:6f:83:2a:40:a6:8a:03:47:5e:77:
e4:33:5f:81:58:d6:01:71:11:29:33:9d:b3:b7:03:
4a:e4:5a:20:e1:e7:81:12:5f:f9:a4:35:1e:da:33:
a8:13:80:df:c7:36:87:63:c9:cf:7c:f7:61:0e:a3:
55:d8:38:5e:35:2f:2c:a5:ba:8b:96:fe:0a:27:fb:
cb:d8:aa:b7:b5:04:02:fb:cc:91:a5:6c:b1:87:1e:
3a:62:d0:97:78:1b:9c:69:62:4e:65:19:9e:46:77:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:DF:2D:97:9D:8B:2F:F5:BB:12:E9:4B:2A:7F:FD:4D:1E:8B:32
X509v3 Authority Key Identifier:
keyid:1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:94:e8:8a:aa:91:a3:b9:6d:2a:c0:7d:73:6c:6e:81:b2:6b:
26:ce:9a:5b:2b:b9:2e:12:63:46:f6:92:40:1f:04:76:8b:31:
32:28:14:c1:2f:5a:ba:59:70:ca:a5:bb:73:84:32:ab:0e:03:
48:87:41:46:b1:98:7f:89:76:ac:00:f7:5a:ff:4a:64:fc:24:
51:a6:f0:31:71:3a:95:a8:10:65:8e:4d:b9:ed:f0:98:04:22:
4a:65:2d:7e:93:e2:90:d0:07:ad:8a:d3:1c:f8:3d:cf:55:17:
3c:cd:49:06:43:f1:30:bf:2d:f5:37:2b:3a:3b:b5:eb:80:9f:
49:6d:25:41:e7:7a:99:ba:dc:44:5a:d3:28:c1:7a:11:65:41:
1e:ca:16:51:9c:4f:c9:87:f4:2d:67:94:74:a5:91:f7:7c:b5:
da:39:2b:f7:20:c6:7b:86:e0:14:aa:f3:99:22:bf:25:26:c1:
77:aa:77:7f:84:2a:52:ad:5c:45:a3:0f:b2:ea:53:16:93:09:
8f:0d:35:15:72:28:38:92:dd:f8:ff:ee:65:7a:b5:c1:f2:85:
cc:b7:73:4f:9c:2f:10:52:ee:c6:85:7c:d2:d4:16:e8:ac:55:
45:d3:34:8d:69:8a:39:a1:cd:3d:c3:fd:c9:0b:a9:07:ca:b2:
13:79:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:56 2025 by rpki-client