Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json)
Hash identifier: Ia5G54z8Q8By4/yMXAQi2zYTffhe/Wd4qLECStZwsVo=
Subject key identifier: 6F:3D:B7:32:E8:72:9A:07:0A:67:72:E4:45:55:FA:25:65:6F:72:0A
Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51
Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
Manifest number: 32
Signing time: Fri 31 Jan 2025 06:42:23 +0000
Manifest this update: Fri 31 Jan 2025 06:42:22 +0000
Manifest next update: Fri 07 Feb 2025 06:42:22 +0000
Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: K3p6jH18PlIEbaJhdVCPVzyDf+6ceSr8oTQAIfTphIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251
Validity
Not Before: Jan 31 06:42:22 2025 GMT
Not After : Feb 7 06:42:22 2025 GMT
Subject: CN=679c70ce-8a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:d4:ab:cc:0e:71:81:0e:d8:b1:c2:3e:98:
5f:af:a4:ea:ae:45:64:2c:14:bf:85:1f:9a:f4:13:
af:ec:31:6e:a9:0c:08:ac:8e:e5:d4:b9:97:89:47:
f6:86:ce:e7:7a:1c:1f:f4:44:2c:ae:ac:f8:7a:26:
a6:74:b6:79:11:7b:6c:a2:9e:93:1a:d4:63:15:04:
7b:cd:97:48:32:6f:d0:07:d0:ef:3f:36:27:b4:64:
ad:c7:7a:cd:8e:b4:5f:60:6e:06:d9:ca:da:63:55:
b0:05:d3:68:46:a9:06:a4:8d:1a:f8:c5:5e:e7:59:
f0:3f:d1:11:18:ee:21:95:33:d1:b8:33:5f:38:a2:
a2:db:ca:5f:0b:f3:94:0d:47:6c:0d:24:d5:ed:c2:
aa:09:61:f4:38:51:5a:5e:87:d1:cc:d7:b9:1d:34:
5d:c5:ce:ff:73:c1:32:70:bb:ee:37:37:57:a6:4f:
61:8b:85:06:94:ab:86:31:b8:63:08:bb:f3:f6:9d:
df:bb:57:cd:71:76:2a:7c:4a:a2:8a:5d:99:76:14:
2d:d7:07:ec:d7:80:d4:d8:cc:4b:72:e7:8d:f9:50:
1f:3e:ef:64:c4:b1:e9:e8:03:10:88:cf:01:8c:38:
50:45:17:64:c4:06:8b:92:e4:c8:37:83:43:38:3d:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3D:B7:32:E8:72:9A:07:0A:67:72:E4:45:55:FA:25:65:6F:72:0A
X509v3 Authority Key Identifier:
keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e0:ff:60:a9:0c:cf:5c:de:36:3d:3f:3f:59:4e:a5:df:c7:
b3:be:fb:8f:3f:34:0f:f9:01:a6:d0:1c:c0:7c:f6:54:94:d1:
30:f6:ce:62:c5:61:52:6d:84:21:82:d0:35:a3:70:e4:2b:57:
1e:ec:b3:cd:7c:34:71:d9:a5:22:51:7d:21:f0:46:d4:86:39:
c0:46:c6:45:36:52:3d:56:a3:f7:e9:53:9f:69:b1:3d:87:61:
d0:80:ca:33:f0:37:e5:ef:79:0d:5b:1f:eb:ca:2f:eb:16:21:
aa:11:07:45:0a:6f:37:2a:34:ca:80:4f:89:aa:f1:15:05:c7:
51:a3:9b:64:09:7c:91:a4:11:9d:bf:bc:63:c8:77:dc:5c:6d:
1c:c5:5a:62:69:f2:ff:66:9f:68:46:98:c0:30:7d:fd:67:89:
cc:19:e1:50:5e:a9:6b:e2:cf:54:5a:ab:3b:67:9f:9d:4c:06:
a8:70:af:d1:a0:a1:0d:d9:7d:c8:17:13:80:b5:f3:df:d9:fd:
8c:fe:b5:0a:b3:50:4e:bf:d4:c2:42:73:ed:14:4f:a0:36:98:
aa:63:af:84:91:2f:b9:db:e3:e1:e0:a4:c1:a7:8f:ea:e1:4b:
83:1a:48:1c:22:be:0a:e6:14:ad:48:a6:55:d8:7e:e4:5e:59:
c1:ff:48:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:22 2025 by rpki-client