Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json)
Hash identifier: WZlvKe7sy7vklxA4sUYkZwgXcMV4kD71Y801Fhp9Dn0=
Subject key identifier: F9:8E:B8:E5:C1:A9:3C:71:3B:7A:22:85:3A:B3:8D:27:29:1F:7D:4A
Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Certificate serial: 043E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
Manifest number: 0439
Signing time: Fri 31 Jan 2025 00:20:36 +0000
Manifest this update: Fri 31 Jan 2025 00:20:35 +0000
Manifest next update: Fri 07 Feb 2025 00:20:35 +0000
Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: RzokwGiHFhx2hn4aGctVvFhUjhCY8nsVG7s7WeiXZf4=)
2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: TOciMmg+YXh13dYfOrB14chWnhLKZ+JRHOQLiS8Jf5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1086 (0x43e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Validity
Not Before: Jan 31 00:20:35 2025 GMT
Not After : Feb 7 00:20:35 2025 GMT
Subject: CN=679c1753-212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:4a:dd:ef:8b:d3:71:0f:6e:5a:d5:45:f9:
db:27:4f:a1:55:33:7e:3e:46:06:02:ce:6d:aa:e1:
f6:6c:6d:ce:f6:db:f9:ce:c7:41:ef:8e:0d:70:f9:
74:34:cf:98:d2:ea:37:33:30:f6:bd:d6:18:74:03:
6e:04:00:c0:35:25:1c:85:a2:78:09:88:a7:9c:2a:
1a:38:91:f8:4e:27:75:42:65:25:01:eb:0f:85:b3:
04:28:f2:19:78:6f:c9:e3:c0:06:9e:d1:ae:91:18:
8f:53:6b:9f:5b:69:26:87:d9:1e:78:8a:8b:8b:9a:
af:f5:8a:ec:06:34:28:50:84:07:ab:18:88:57:9f:
ed:95:c5:f7:7a:ce:ed:73:b5:a4:0c:93:27:12:2b:
94:07:da:c1:79:bc:cb:85:55:5f:d2:49:22:a7:14:
b7:33:a5:ef:8a:c1:5a:fe:a1:ce:0d:a7:aa:1d:bf:
03:ba:09:5d:d6:f6:e0:f6:9e:e0:28:1e:af:02:3d:
6c:ea:f1:21:22:8d:29:92:5b:d4:6f:cb:15:33:81:
79:8d:30:f2:f4:2d:e7:ca:d2:61:9c:12:dd:0c:88:
f6:d9:80:40:8b:5b:3e:f3:7d:21:84:f2:4c:8d:f3:
c0:65:ca:c6:f3:2f:1e:47:5d:4c:70:d1:fb:f1:39:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:B8:E5:C1:A9:3C:71:3B:7A:22:85:3A:B3:8D:27:29:1F:7D:4A
X509v3 Authority Key Identifier:
keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:82:b2:53:18:d3:cb:f5:9f:a8:81:0e:2d:01:55:92:c7:4b:
21:18:31:8c:c1:97:63:7c:d9:ac:2a:4a:ea:63:e4:1b:3b:fe:
5e:fd:e9:cb:81:1a:fe:24:e0:a7:dc:1f:ad:6c:63:41:2b:34:
8f:2c:a9:e0:27:a7:3f:20:d0:3c:33:71:49:8d:f4:24:e5:04:
e5:95:67:f8:f7:8e:e4:bd:cf:55:c0:23:4a:81:56:ee:29:86:
e6:05:ea:1b:7c:4f:40:6a:5b:48:c9:89:cd:ac:67:e4:13:11:
7d:80:37:b7:02:cd:03:d1:1d:30:1a:27:f3:5b:a5:88:26:3c:
f5:00:e0:73:96:30:10:fb:51:0d:f4:98:fb:bd:dd:34:05:3e:
0b:c9:9c:c4:e5:ed:64:fa:ca:ba:5f:dd:da:2e:32:c1:a0:81:
97:04:c2:a3:eb:b1:b2:53:85:72:44:9e:cc:39:62:7e:c0:4b:
e3:8a:d0:c7:ad:30:49:bf:44:b8:6b:cd:3f:63:2b:de:db:97:
7c:e6:7a:56:4c:f3:ff:50:d8:35:7f:68:5a:9f:d8:85:fc:e8:
c0:20:02:d5:d3:cc:fe:c1:75:1f:16:72:df:35:f6:0a:d0:ff:
34:26:18:09:27:ee:ce:8a:91:23:3c:59:99:9f:9c:2d:e6:77:
0a:ee:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:58 2025 by rpki-client