Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json)
Hash identifier: 0b8cZ7FG9P97AToK/905JIvnuSQQ53hY4rV49ZXAG+M=
Subject key identifier: 26:36:0B:E7:8B:02:DC:39:00:CE:32:80:F2:86:D4:13:D5:15:55:44
Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
Manifest number: CD
Signing time: Fri 31 Jan 2025 04:59:43 +0000
Manifest this update: Fri 31 Jan 2025 04:59:42 +0000
Manifest next update: Fri 07 Feb 2025 04:59:42 +0000
Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: lBu/rAAboHrWro55q/TNGVJaUi9Dr+3BWHOrP9SF2cQ=)
2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: Xkd+Op7ObANSl7hSEgXBDp6fu8FLqlrIdcxaq4iFP2k=)
3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: opgCLiPvltRVZTimE7GHd6S5jzb7OIm+U5D/6sM4IWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Validity
Not Before: Jan 31 04:59:42 2025 GMT
Not After : Feb 7 04:59:42 2025 GMT
Subject: CN=679c58be-733f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:c0:40:20:fe:d7:31:f3:c3:25:67:ba:cb:
47:b0:81:3c:29:1a:d7:70:a0:56:d6:5a:fc:ef:52:
99:43:3c:7a:da:7e:66:c0:c2:95:6e:69:a9:95:74:
12:d2:03:e3:0d:15:8a:46:87:91:d0:64:45:33:60:
32:29:aa:c6:dc:0e:df:e2:69:12:f8:77:aa:2f:26:
04:a7:ab:2a:f6:04:3d:4a:b6:74:69:dd:11:7d:da:
55:5b:39:91:fc:39:24:75:8a:6e:f5:bf:f1:1a:f9:
cf:61:3f:a8:00:33:31:88:9b:b6:cb:c2:21:f7:84:
b6:2f:9b:16:77:b5:5e:b2:05:ca:34:8a:98:f6:3e:
43:1d:83:62:a7:94:2e:de:38:cd:46:c6:a7:81:52:
2a:cf:8e:36:77:df:75:82:dc:35:ca:95:66:12:99:
1a:91:94:c0:49:e0:f1:df:3e:8a:34:90:3e:ba:a6:
22:c4:37:dc:c7:0f:8c:a6:7f:6d:a8:76:88:30:79:
67:af:a6:b1:fa:33:bc:71:1c:a3:a3:6c:6e:08:56:
f8:48:ce:de:be:96:ac:5b:bf:59:40:97:2e:f2:7f:
d1:c6:a9:9c:d7:26:4e:4b:e4:05:52:cc:8e:d4:cc:
b0:75:6e:39:77:94:94:ae:a2:72:e0:b7:3e:2c:cd:
ca:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:36:0B:E7:8B:02:DC:39:00:CE:32:80:F2:86:D4:13:D5:15:55:44
X509v3 Authority Key Identifier:
keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:aa:34:88:82:a9:67:76:01:b1:b1:32:3e:f3:79:c1:f5:76:
70:22:42:0b:8b:a3:50:a8:f0:10:6e:9c:02:63:c0:a0:5f:65:
01:97:19:87:18:d9:7e:c2:66:e6:a2:c7:79:98:0e:a9:a6:77:
2e:8d:97:a8:0c:c6:93:63:f8:56:47:a5:27:f0:4e:61:ec:5f:
14:ff:41:c3:04:55:a2:a9:f1:56:42:3e:09:71:e3:db:8a:27:
2e:d7:2b:71:3b:82:63:ab:e1:16:f2:54:b5:28:f9:83:92:ce:
3f:50:a1:23:8c:fa:56:40:cc:00:41:f8:af:52:2b:c6:dc:3c:
56:54:ac:42:00:03:13:98:d7:87:42:12:71:28:4a:d6:11:f1:
ee:2f:5b:8a:9f:7f:46:75:f0:3a:c6:0b:de:ad:b6:89:ed:c4:
03:38:93:08:d9:27:d5:c8:1a:9f:91:d5:9f:f5:5d:a5:16:9c:
97:6a:95:bd:04:e3:d5:25:3f:20:3c:62:bb:16:04:1c:5a:51:
78:20:41:f8:83:0b:ad:ff:97:29:9f:4e:74:9b:10:37:b6:64:
49:da:da:d4:58:07:2e:57:c2:23:0b:25:75:71:a5:57:de:53:
11:a8:4f:e3:9b:a0:a0:dc:14:c3:b0:bd:60:8a:e2:84:d3:cc:
b6:90:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:34:06 2025 by rpki-client