Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
File: H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json)
Hash identifier: 6SngRoNLD57VvZdQktH5202qTZ8ZURN6R0sVNDiM6Ao=
Subject key identifier: 62:E4:DA:3F:A0:80:52:58:6E:16:53:7F:32:91:15:AF:07:C6:3C:E9
Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
Certificate issuer: /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Certificate serial: 05DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
Manifest number: 05D6
Signing time: Fri 28 Mar 2025 23:16:41 +0000
Manifest this update: Fri 28 Mar 2025 23:16:40 +0000
Manifest next update: Fri 04 Apr 2025 23:16:40 +0000
Files and hashes: 1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: 2JAnL4p4SQM07GmZQKLeLmDhgsc9vzrx7Ym6dKlQKMo=)
2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: qXECf2jd3YFbV0dkm4BI5o/k7Qx5MHMWmZ0P/f7Exss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B4DF
Validity
Not Before: Mar 28 23:16:40 2025 GMT
Not After : Apr 4 23:16:40 2025 GMT
Subject: CN=67e72dd8-c30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:72:0e:e5:b6:36:1d:b4:ef:d8:29:5a:a4:
76:d9:ab:28:70:1f:05:fc:96:95:22:ac:53:b1:84:
e0:05:b3:2a:d5:cb:c9:94:52:31:c0:8a:e8:aa:59:
e7:58:ec:3c:8f:c1:46:1d:87:ab:84:bf:14:da:25:
7d:47:4d:b1:2c:be:0b:7c:c2:50:f2:a4:a4:90:bb:
7e:04:02:56:92:24:aa:ce:66:51:8e:cf:6a:91:14:
4b:8e:c4:03:75:0f:2a:15:81:c0:d6:fd:b0:f8:24:
5f:3c:92:5b:9d:89:84:c0:e0:1d:11:96:84:ed:0e:
a5:46:57:d7:f4:05:b0:82:2f:78:1c:85:f2:f2:7e:
03:34:6d:47:d3:30:89:44:67:d6:79:90:1a:00:e1:
40:e0:fa:c5:ab:e5:1b:ec:e0:00:55:f2:28:a2:6d:
4d:c3:3f:63:3c:89:61:87:81:36:e6:73:a7:c7:50:
e1:14:d3:a7:c6:48:a1:9d:51:aa:f3:22:10:b5:17:
fa:f9:20:2c:7b:77:5e:21:6f:70:9e:b7:f5:d1:b5:
95:da:93:f0:64:4c:f3:c7:9b:64:56:58:e8:24:8c:
d8:45:3f:7f:9c:eb:80:d7:9e:cb:c8:06:b1:4d:f4:
fa:81:a0:12:8d:e5:44:fc:de:d6:c8:34:a0:4f:bf:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E4:DA:3F:A0:80:52:58:6E:16:53:7F:32:91:15:AF:07:C6:3C:E9
X509v3 Authority Key Identifier:
keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:47:ac:3d:70:83:70:04:5d:b5:6d:8d:38:2f:be:46:1a:f2:
12:de:39:1d:94:ff:a9:19:b6:be:42:88:df:58:f1:61:1a:9d:
e0:ef:68:ac:8b:d7:38:63:b7:cc:65:29:c9:9b:e8:ca:ec:24:
1c:d5:87:d6:ee:5a:05:89:dc:4b:22:39:eb:73:63:d6:d7:41:
92:25:cb:0b:21:09:c6:6a:08:9c:1c:cd:d8:28:3b:d9:7c:f4:
67:3e:cc:65:c2:ee:52:6e:e8:ec:65:77:e7:f5:76:a9:c4:45:
1a:47:7a:fa:40:2e:c0:4f:49:3b:ba:3b:6d:20:7c:cc:25:cb:
0e:2a:ad:63:61:21:fa:01:6c:25:d1:97:db:9d:f8:73:cc:02:
d8:4e:95:e5:4b:76:fb:12:b6:53:22:67:bd:b6:34:7f:7d:2a:
ae:be:fd:70:cf:5a:e2:96:31:a1:53:91:bb:2a:91:de:4b:5f:
87:52:03:fd:c0:d6:9c:ce:5e:38:c1:1a:58:8f:4a:84:11:53:
40:77:88:ef:e4:ec:9f:d0:5a:aa:e9:fc:4f:45:ae:5e:3b:60:
28:bc:6f:78:9a:bf:9f:9b:2a:7c:8c:06:b5:b7:0c:17:11:45:
64:21:e3:74:8e:15:4b:62:0a:62:02:db:e2:9c:8a:33:e9:11:
9f:1d:d5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:49:59 2025 by rpki-client