Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
File: hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json)
Hash identifier: AjGruMV0G/KndypQktg7aZObh3aVp+7qo+IO41gu6e0=
Subject key identifier: 27:58:71:AB:00:2C:14:AB:C3:73:77:F1:16:DC:F9:55:F8:B7:CA:AA
Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
Certificate issuer: /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
Manifest number: 48
Signing time: Sat 29 Mar 2025 06:41:49 +0000
Manifest this update: Sat 29 Mar 2025 06:41:49 +0000
Manifest next update: Sat 05 Apr 2025 06:41:49 +0000
Files and hashes: 1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: 2RcHo3kn5pzPk9oDVinItfHi6i6OKrv77FW0eRbvCII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A3F
Validity
Not Before: Mar 29 06:41:49 2025 GMT
Not After : Apr 5 06:41:49 2025 GMT
Subject: CN=67e7962d-b49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:42:9f:1a:df:fe:3d:d3:37:2f:9a:a0:7c:
95:ce:e0:46:16:c1:93:63:d4:7f:7d:3a:45:51:61:
92:31:27:5d:da:b4:86:9e:cc:92:17:cf:81:88:80:
73:a8:34:c7:3a:7a:eb:a1:1c:3b:e5:af:80:ea:f3:
a2:ee:98:90:b6:cb:f4:36:77:8c:41:94:3b:9c:59:
f5:11:a4:ba:f3:cb:81:e2:cf:62:f1:47:54:2b:84:
b4:82:81:8e:c5:b0:7c:c1:75:55:a6:9c:44:ab:e2:
03:e9:2a:84:5c:39:c0:26:8f:9e:26:4d:93:b0:24:
f2:4b:91:07:bf:08:8e:d6:97:f6:e8:0f:27:ed:20:
7f:67:e6:f6:a8:d7:47:13:62:d0:7c:52:bc:bb:ec:
f6:72:d6:d7:fd:aa:0f:bf:22:79:79:b5:bc:24:50:
cb:bc:8f:b4:03:99:62:04:99:62:03:e2:01:82:c9:
ea:af:c1:e0:29:9d:d4:a7:56:be:92:d3:cb:d7:0c:
70:97:0d:bd:b1:10:cc:f6:f7:e4:4e:4f:77:af:83:
0d:4c:a2:fc:bf:20:c2:ab:c0:f9:98:3d:b7:1d:53:
7b:7d:e2:d8:3e:fd:77:c4:de:e6:87:9f:0b:e7:24:
8f:76:69:62:a9:64:d5:d8:2d:cc:77:98:55:03:6e:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:58:71:AB:00:2C:14:AB:C3:73:77:F1:16:DC:F9:55:F8:B7:CA:AA
X509v3 Authority Key Identifier:
keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e7:9e:a2:5d:54:e9:8e:13:2f:ad:b9:22:bb:5b:f4:ab:1a:
b0:84:ad:ff:29:af:2c:3a:a4:67:83:5b:7f:89:88:8e:0b:51:
86:03:03:78:1e:15:b5:57:67:be:a8:d2:8b:90:fc:e9:a3:e9:
ba:f1:56:80:6d:3b:ee:8d:e1:b8:00:ae:a5:b5:31:bb:20:a2:
22:09:ed:56:a2:e7:f7:9e:52:87:5a:8c:d9:04:c6:2a:bb:85:
09:b8:3c:f8:95:8c:42:6c:97:d5:fd:e0:85:51:b0:9b:8b:a6:
2e:3a:b9:ec:ad:5e:9e:2f:8a:c4:b7:a7:49:c2:d6:39:1e:4b:
81:da:03:bd:f0:e0:d8:e2:10:b8:57:98:9b:0f:49:1f:68:7e:
3d:1b:80:f1:a0:4e:a7:46:8e:87:87:51:16:fe:7f:b5:d9:8e:
bf:69:aa:32:1c:8f:87:b9:0f:5e:8b:12:08:03:46:57:6c:da:
51:a6:38:78:c8:67:2f:7f:3a:d9:2e:1b:e5:e0:cc:76:20:3d:
a0:19:fa:b3:cf:c9:1e:16:30:fe:e8:e9:8c:45:74:39:d2:5b:
ef:84:e1:6e:51:2d:f2:e3:33:b5:4f:47:bb:79:bc:3f:3b:0e:
6d:82:ce:16:c4:3b:8d:e5:9c:94:6b:61:47:48:66:2a:e4:e5:
27:74:cf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:57:48 2025 by rpki-client