Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
File: h2JAwXQl4PPi4Vds30t527-rVe4.mft (raw, json)
Hash identifier: gFbYPoXU2yKt3li3a2lJg7BKMX5czy+0i8dkLqoiygk=
Subject key identifier: C5:2D:A1:62:AF:D8:22:B0:F4:D9:5D:E1:CE:29:D4:C7:47:9C:2A:45
Authority key identifier: 87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE
Certificate issuer: /CN=A918FE4B/serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
Manifest number: 01B1
Signing time: Mon 21 Apr 2025 22:27:45 +0000
Manifest this update: Mon 21 Apr 2025 22:27:45 +0000
Manifest next update: Mon 28 Apr 2025 22:27:45 +0000
Files and hashes: 1: h2JAwXQl4PPi4Vds30t527-rVe4.crl (hash: vjlO32ibJo2vNClBHshCooYxiHJZ1irupf911qs9ME0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE4B, serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE
Validity
Not Before: Apr 21 22:27:45 2025 GMT
Not After : Apr 28 22:27:45 2025 GMT
Subject: CN=6806c661-3a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:36:9c:8c:6c:db:de:10:98:c0:c8:77:e2:
7a:1c:41:a2:4f:d1:89:c4:02:50:7e:4b:18:39:e2:
7e:26:f5:bd:0a:18:b9:8e:13:15:a0:1d:48:f5:75:
65:60:99:d9:0a:b7:7f:03:0b:c2:f5:1a:c9:02:5e:
fa:b4:8b:48:cd:15:41:e4:8b:d5:73:0b:da:0d:a7:
64:dd:55:0e:84:ac:06:b2:46:e2:3f:89:e7:65:97:
6b:96:bf:e1:8f:e8:4b:8c:a5:ed:19:77:3d:70:0e:
6c:06:a5:7b:4b:3d:e1:2b:25:2f:9c:17:fe:a8:c8:
c5:66:17:f9:af:ec:f6:52:e2:32:44:e4:84:eb:1c:
c9:0a:c5:ce:ce:1e:a1:aa:24:42:8b:b8:8e:84:65:
e2:69:b6:03:18:e7:a8:07:a0:1a:e8:fa:8b:c0:8b:
a1:75:44:8c:f5:68:84:47:22:8d:5f:83:95:8c:a0:
22:06:67:1e:97:a6:f9:d8:d6:0a:ae:b1:ea:87:20:
0b:34:0b:56:06:d0:ee:bd:1f:1c:cb:ac:a6:ce:1f:
7c:fb:8a:29:12:ab:63:1a:b8:4a:40:0f:23:8c:6e:
a4:9f:72:a4:0e:93:3c:18:83:c7:23:4e:27:99:d1:
ff:b9:78:85:d7:c0:d3:61:56:bb:60:3b:4a:31:85:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2D:A1:62:AF:D8:22:B0:F4:D9:5D:E1:CE:29:D4:C7:47:9C:2A:45
X509v3 Authority Key Identifier:
keyid:87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:85:4a:5c:54:fd:9e:66:19:e1:3a:19:f8:92:83:ac:8b:f6:
ef:bd:5e:57:0b:df:d1:5d:76:8a:46:32:fa:72:75:1f:0d:ae:
97:e4:70:cd:8e:c1:25:8e:8e:3e:23:8a:01:61:10:fb:a3:a1:
d7:fc:6e:05:de:47:70:1d:7d:0a:bc:7f:b8:6e:81:5d:c9:71:
c4:7a:db:40:f9:e1:f4:fe:2f:ed:4a:12:79:7b:60:3d:c6:43:
e8:35:69:6a:fd:e1:c6:5b:a6:8b:ff:b6:62:ec:c5:52:cf:d8:
f9:d4:af:12:ad:6c:6a:e4:cb:c6:7d:ae:1f:33:5e:f0:77:86:
99:73:11:27:1d:46:58:9e:ca:58:b9:0b:2c:aa:6b:1a:97:d4:
69:68:ff:f5:2c:52:a0:83:37:67:8f:1b:38:00:d3:4c:01:a9:
b4:f8:bd:cb:c5:44:37:aa:34:72:90:c4:31:e1:a4:9a:62:5d:
f5:cf:5a:7e:27:89:61:85:02:97:1c:84:87:4c:88:48:e8:04:
ae:54:3c:ca:05:1f:bb:62:63:39:77:0c:23:7b:66:33:34:b5:
51:52:87:30:57:f7:a8:57:8c:cc:58:3e:a6:21:bc:e0:41:50:
b9:52:10:f7:e5:e9:31:ff:aa:76:2e:da:65:a1:76:09:ec:28:
00:6c:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:26:51 2025 by rpki-client