Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
File: HSpVFaipmzCyHRhxvPr9J-saEyo.mft (raw, json)
Hash identifier: zMyAyvfNj94QFktXREG+DdpPfDPbmHHDYUkzpVEI8QM=
Subject key identifier: 27:A9:B9:D9:C2:0B:B7:42:49:39:4D:2D:24:E7:D2:3E:87:46:2D:EE
Authority key identifier: 1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
Certificate issuer: /CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
Manifest number: 023A
Signing time: Sat 29 Mar 2025 02:09:21 +0000
Manifest this update: Sat 29 Mar 2025 02:09:20 +0000
Manifest next update: Sat 05 Apr 2025 02:09:20 +0000
Files and hashes: 1: HSpVFaipmzCyHRhxvPr9J-saEyo.crl (hash: VcdHdxSCyH3l1KPpkm8Y0/UnBwEydahvPXlACmrFFhY=)
2: D6E7D65C192E11ED927BF512C4F9AE02.roa (hash: /55pyDRuC0ryewlHl9M4i4PAiQ+McbMrbeJDHVMTz04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B30
Validity
Not Before: Mar 29 02:09:20 2025 GMT
Not After : Apr 5 02:09:20 2025 GMT
Subject: CN=67e75650-04f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bf:c6:fa:ad:55:3f:6e:72:c3:05:d0:ec:0c:
f1:c9:87:c3:23:2e:71:4d:28:8f:2c:16:80:fe:ca:
0c:16:05:35:8c:28:39:85:23:6f:c9:43:3a:8a:a6:
b6:9d:4c:68:d4:00:95:5f:b9:cf:94:35:ac:86:b4:
75:09:9e:b5:a8:55:84:f3:22:02:5d:b4:15:5b:06:
94:49:08:ba:a4:07:ec:20:58:22:fa:59:f1:bf:30:
b1:59:92:76:83:3f:60:ea:a3:0c:8c:40:89:4f:d6:
fa:8a:ce:f1:69:dc:f4:95:12:52:25:6d:03:46:ab:
f5:a7:ad:c6:fe:4d:5c:4e:c9:19:54:ed:09:a4:7f:
36:7f:08:9c:c5:9c:ac:88:7d:27:dd:8c:53:77:12:
a7:97:e5:84:32:e5:0c:95:97:95:26:15:67:86:87:
ea:18:e1:e5:74:ad:51:5f:73:46:d8:6a:44:42:49:
2a:14:92:6a:21:23:b7:e2:03:3c:90:7d:8e:19:fa:
a1:5e:52:29:f0:a7:ca:89:ed:fc:5d:f4:01:de:9e:
33:8a:ee:2e:e9:06:a1:3e:b9:7b:95:0c:4d:20:4a:
a3:14:0f:7b:ee:a4:38:bb:c6:04:8e:80:3b:65:76:
8a:53:f1:4c:1d:64:94:0f:3a:f5:31:5e:bb:f6:fc:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A9:B9:D9:C2:0B:B7:42:49:39:4D:2D:24:E7:D2:3E:87:46:2D:EE
X509v3 Authority Key Identifier:
keyid:1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a7:2b:59:e7:d3:ec:a6:99:b0:d0:ed:f1:18:25:5d:fd:f7:
6f:00:c8:27:af:8e:6d:e3:2e:19:4e:52:ed:0f:e1:d9:33:10:
29:44:e4:16:17:c7:84:85:70:15:8e:20:cc:2d:d8:f1:17:f5:
c7:ae:c5:e9:d2:12:08:40:a1:8a:98:5f:fa:5c:2f:a2:b0:a2:
73:c3:7c:61:5e:8c:df:a5:41:cf:6d:44:b8:63:b6:84:77:f0:
bf:9a:28:70:b8:4f:f2:8e:a1:21:c5:65:63:47:ba:60:46:12:
a5:eb:85:24:e2:67:eb:b0:f0:20:36:6a:5c:70:34:df:a5:38:
d5:4f:86:79:cf:6f:aa:a9:f7:63:d9:5d:66:11:f3:6d:7d:e7:
aa:dd:90:18:f0:50:62:d9:b2:69:59:6c:8b:44:7c:27:52:ec:
ba:1c:62:b8:63:4c:44:ff:75:8d:17:8c:69:cd:7e:57:ec:b4:
8d:aa:57:cb:ac:e8:c7:70:31:88:82:c7:78:32:68:33:f0:eb:
89:27:25:91:3e:64:6a:0c:31:43:09:35:83:dc:55:0d:5d:b3:
fb:c5:d0:5f:7b:7a:8d:aa:0b:16:9f:2e:c4:a2:fb:c4:c5:5b:
54:a5:10:bc:65:7f:14:33:bd:46:f2:00:bd:c9:6e:48:d3:aa:
5f:e2:60:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:43:48 2025 by rpki-client