Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier: qTUI4sNC9G4Hf+VDfhUDVXYT5UZAT0CMEMdZP55c3SU=
Subject key identifier: F9:DA:D9:EF:E4:76:93:14:77:96:2F:23:A0:3D:05:41:0B:00:4F:4A
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number: 12
Signing time: Fri 31 Jan 2025 07:05:48 +0000
Manifest this update: Fri 31 Jan 2025 07:05:48 +0000
Manifest next update: Fri 07 Feb 2025 07:05:48 +0000
Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: aUvrm3cR9gqtrFziR1AywyiAlrF2wki9EPJhc2xjPrY=)
2: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: HtGb7wA81OQvA6ze/dzBfj0aE8cw4FCoibExVZ81CDM=)
3: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: 9Q/tteud3DuvscEvzqYV7r9RWkqNNKKaoADiMf9YW7M=)
4: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: thPY8I6rg3ajft74b6fKFrTIf+bwe+rluLyw0+xxZxY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: Jan 31 07:05:48 2025 GMT
Not After : Feb 7 07:05:48 2025 GMT
Subject: CN=679c764c-fb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:c3:95:bc:9f:a4:da:27:b0:d6:26:36:e9:
c3:a0:51:da:82:33:b0:72:9f:02:bf:dd:33:2c:25:
29:88:e4:9d:54:80:2d:cd:de:0e:61:6b:9c:2e:79:
34:52:6c:cd:65:35:23:2b:8c:ca:28:af:51:bc:a5:
29:e6:1e:0e:62:35:84:db:a7:32:f2:f1:9b:c8:90:
6a:78:9a:4c:2b:70:20:08:a2:03:d8:b8:c0:de:f3:
07:c0:de:7e:65:d5:89:b5:be:fb:ba:0d:1a:6c:d4:
e4:f6:42:a5:d8:4f:ef:58:fa:1a:75:1b:b5:9b:73:
68:ac:00:6b:2d:62:03:c3:c8:4c:d5:91:9c:fe:55:
81:45:19:ff:b7:6d:34:7d:3c:aa:29:38:2b:a3:26:
06:61:a8:74:75:68:0f:9f:ee:26:3c:f2:bc:89:5a:
71:18:4d:ea:d8:6a:fe:33:e8:8e:81:07:a4:f7:44:
1f:17:58:8f:9c:71:db:6a:07:60:83:ef:c7:44:5e:
e8:d7:4e:c8:bf:f7:52:5c:00:42:81:4d:66:0e:6f:
05:96:72:f8:36:3a:f6:b0:ec:a6:0a:35:c6:cb:b3:
2a:c4:3d:e9:0c:0e:bf:ba:8f:15:29:3a:f4:75:d3:
b0:c0:2a:ba:b2:a2:0f:c2:8e:30:6c:5c:25:4e:de:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DA:D9:EF:E4:76:93:14:77:96:2F:23:A0:3D:05:41:0B:00:4F:4A
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:60:3e:47:8d:f5:a7:e6:15:ac:16:73:5c:4e:c9:12:41:35:
02:aa:64:7a:00:40:72:cf:fd:94:03:39:41:e6:21:91:1e:a2:
9c:a6:47:d4:94:65:d9:cf:ab:85:7d:90:46:7a:b7:c1:23:93:
06:1a:dd:30:6f:97:97:c8:14:8c:cb:0e:ca:99:89:5a:9b:d0:
1c:d8:04:80:d4:6c:f1:38:5a:f4:db:eb:54:cb:0b:8b:1e:af:
a0:19:45:88:df:e8:d8:08:51:0d:ed:90:a2:52:9c:ff:54:b6:
fe:be:5d:82:4a:5d:8c:ce:9a:d6:cd:fc:cc:ad:36:ea:1c:53:
42:cb:58:6d:e2:2d:99:b7:ff:83:b4:d2:f5:36:51:f7:6d:26:
b2:c3:88:bb:af:ed:c4:50:31:3f:65:16:5a:ba:b9:a1:86:8e:
5a:b7:1d:52:39:39:8f:7d:6f:4d:82:32:66:ac:a7:bb:37:93:
35:71:a2:07:b0:90:dc:85:e8:ea:2b:f9:e4:ae:c7:8f:49:ec:
1c:a7:91:9a:c0:ca:da:92:eb:9b:3d:a8:e4:85:95:16:f0:51:
66:7f:08:01:5c:22:cc:64:55:de:35:ba:74:a8:99:91:86:3b:
30:2d:aa:3b:cf:0e:fa:37:7a:da:4e:d6:82:c6:29:67:03:b0:
76:e1:83:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:45:52 2025 by rpki-client