Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
File: h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json)
Hash identifier: HwEma5nbFzZVPG30zg6BHDfgVhajpDgRuai9Clj8txM=
Subject key identifier: B4:4C:DA:FE:E3:F6:AF:DD:0A:76:69:19:B1:58:4B:39:E5:8A:89:8B
Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Certificate serial: 14D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
Manifest number: 14C7
Signing time: Fri 31 Jan 2025 16:50:46 +0000
Manifest this update: Fri 31 Jan 2025 16:50:45 +0000
Manifest next update: Fri 07 Feb 2025 16:50:45 +0000
Files and hashes: 1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: RDPGzugX5kl/5wAof1BiHYSxMNf0q8OXhuOddPmkOgg=)
2: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: tzptSWrCu7leujBpAxl0r7s1OXoHlY5rMMlXgr5Raxw=)
3: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: CYK+uI2bxtOr291BnZawHgoP/6miR+B6epnu6Vsoz0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5334 (0x14d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Validity
Not Before: Jan 31 16:50:45 2025 GMT
Not After : Feb 7 16:50:45 2025 GMT
Subject: CN=679cff66-67a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:d2:3d:8c:99:cc:a3:bf:42:27:0d:fc:79:
f8:0f:b3:59:0a:ad:72:de:00:fc:cd:b6:16:d5:55:
b1:1a:0d:e3:6c:51:38:5d:ee:90:4b:2d:82:8e:43:
12:b1:e4:96:50:22:20:3e:f4:f1:3f:ea:be:67:3e:
57:d5:62:6c:df:61:dc:16:ea:be:26:74:e0:67:a8:
84:62:76:2f:4d:e9:ab:c5:9f:56:aa:2d:84:c6:a0:
bc:03:85:90:36:ff:ef:0c:a6:f8:a9:7e:e6:63:c7:
ca:0e:10:38:54:c2:52:45:e4:85:2f:2f:1b:ca:ed:
ad:54:23:d3:6f:f4:dc:c5:9c:79:18:ef:c7:78:b1:
b4:da:8a:7b:7f:58:7a:79:e9:78:79:fc:4e:4a:2d:
09:ec:6a:ad:03:45:84:d7:2f:5a:a9:98:8f:86:35:
2a:d7:2a:76:2f:9f:43:44:5a:1c:a6:7d:e5:bb:19:
80:e1:0c:bc:be:ea:87:52:eb:a0:b7:ea:79:85:9b:
4b:a8:40:f3:67:c2:e3:55:4c:01:34:51:f1:f6:e9:
31:51:62:1a:79:a3:72:86:4a:80:43:c8:b9:d1:f5:
fd:65:8b:da:f7:d2:cd:23:20:1d:dd:e1:23:66:8d:
8a:e7:29:3b:0a:cf:19:28:a5:9a:c0:d5:51:0f:6f:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4C:DA:FE:E3:F6:AF:DD:0A:76:69:19:B1:58:4B:39:E5:8A:89:8B
X509v3 Authority Key Identifier:
keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:fe:42:29:60:7f:94:f8:23:40:cf:5d:69:c8:ae:f8:18:55:
31:c3:e0:7f:a3:ad:61:10:67:cb:a0:92:68:54:86:68:56:71:
ed:00:87:6e:d0:34:90:ef:52:86:2e:0a:69:39:26:ad:58:b7:
78:f0:c5:2a:8a:e0:48:84:8f:78:41:a4:a8:a4:8b:22:65:34:
d5:c0:38:d4:b5:c9:2a:84:77:06:51:bc:da:25:dd:bf:9e:11:
3b:26:8c:ed:40:92:14:53:fa:0c:e8:d3:5a:19:a0:8b:d0:4a:
6e:4e:9d:c6:4e:6d:e8:1d:7c:5c:82:8c:d0:bb:16:8b:71:a5:
9d:33:45:75:14:e5:a9:fe:92:f3:77:8e:a8:cf:2d:74:67:28:
11:41:d2:dc:68:00:79:b3:9e:32:31:f2:03:cc:3e:03:11:81:
33:a1:56:ad:d7:85:ef:0d:c7:9e:f7:ed:1a:30:1b:f7:90:9e:
3c:eb:3e:84:e2:9e:8a:4a:5f:75:8c:4d:1c:a9:bd:56:ff:5b:
ea:3b:f9:77:31:9d:28:d5:5e:54:b3:1d:6a:12:e1:e5:a1:48:
a3:32:15:ab:7c:68:86:d7:21:61:6c:09:0d:d0:a3:db:35:7b:
9a:e7:fb:a6:f2:46:2f:f8:f9:82:8d:a8:54:fe:f0:ca:dd:59:
b9:88:ed:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:45 2025 by rpki-client