Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json)
Hash identifier: Ef0etpWQecgUa1485apUPwCdZTRhXR2GArzS57YePoM=
Subject key identifier: F2:BB:90:10:20:FA:5D:59:06:53:CC:37:83:50:01:EE:EA:AF:F5:D2
Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Certificate serial: 3463
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
Manifest number: 345C
Signing time: Fri 31 Jan 2025 14:26:54 +0000
Manifest this update: Fri 31 Jan 2025 14:26:53 +0000
Manifest next update: Fri 07 Feb 2025 14:26:53 +0000
Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: AFxqFvNHFV+G31b1RmPoYiVTUSHmkritqFNWCEL757M=)
2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: 3o2hy0qLO+z1FC2owvMkW8Mf5B3y4yK7LA6PPJMaRDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13411 (0x3463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Validity
Not Before: Jan 31 14:26:53 2025 GMT
Not After : Feb 7 14:26:53 2025 GMT
Subject: CN=679cddad-11db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:09:d9:37:00:72:fc:7a:41:b5:41:42:7b:
dd:44:f0:79:dc:99:8f:85:5b:99:70:f0:6d:97:8c:
57:c5:f4:fd:bf:3b:23:6f:46:f7:ed:ff:23:8d:9c:
ed:29:ba:6f:57:a0:c8:1f:c0:0c:1b:c5:15:4e:b8:
00:2c:e6:7a:eb:39:23:96:c6:d7:23:0b:1a:0a:08:
5e:98:59:07:b6:0a:f2:c8:a2:a2:93:e2:53:b7:b6:
9a:66:7b:7b:c0:98:c4:f8:7b:9f:3c:c6:fc:5c:2c:
99:b1:15:14:2d:95:11:4d:8e:11:84:08:7f:da:1a:
58:98:01:b7:71:1c:e2:6c:f8:8a:36:f3:36:4b:81:
99:c8:04:6d:3a:90:fb:58:69:a1:e9:0e:22:27:57:
88:cc:f7:44:96:6f:aa:83:c3:54:5d:61:34:47:5c:
85:a4:5a:29:e4:6d:6f:0d:22:bd:54:a3:b4:77:0e:
ca:c4:3b:fc:8f:55:dd:1b:1c:65:c9:0e:6c:d6:98:
b0:cf:08:ec:4a:26:a1:02:25:01:5f:ad:e7:22:59:
44:38:f6:50:bb:f9:68:1c:75:5c:d4:30:cf:6c:fe:
b8:59:35:4f:52:5c:e2:9b:db:8d:48:23:f6:c2:23:
5b:5f:46:ec:01:0b:7d:07:85:1f:98:46:e6:e9:73:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BB:90:10:20:FA:5D:59:06:53:CC:37:83:50:01:EE:EA:AF:F5:D2
X509v3 Authority Key Identifier:
keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:06:6a:1e:30:54:d0:67:bd:96:77:66:d7:85:3d:23:75:6a:
d4:54:4b:56:ec:48:3e:8c:c1:3d:10:aa:7d:0c:c8:4b:e9:aa:
9f:31:57:c8:cf:b2:dc:8c:0e:24:73:2d:bd:3a:e4:39:02:a7:
b3:cf:13:29:1a:f8:fe:ec:76:9b:c0:77:9e:b7:d4:1a:1b:62:
14:48:ca:aa:0b:05:70:89:c2:52:3d:ac:a4:35:7c:fa:e5:9c:
5e:9f:11:7e:4e:cd:f8:f9:0f:81:01:b0:b2:0e:82:f8:93:34:
27:d8:fb:9a:f1:9e:55:be:7b:78:7f:ab:cd:5f:39:53:87:c4:
c4:0c:4e:36:86:5b:01:3c:ba:bb:f0:45:d7:8e:b5:34:67:1e:
5c:ab:82:ab:6e:41:32:5d:8f:64:38:e9:b2:3e:06:bc:27:42:
7f:16:09:e4:c5:9e:42:d4:0d:a7:3a:89:a0:27:f8:1e:fe:ef:
d3:98:cf:93:cc:15:ca:4b:bc:09:2c:5d:00:6d:94:1d:09:cd:
8e:21:14:67:3c:67:85:d8:82:0f:a2:8b:72:42:a6:51:91:67:
d9:a0:e1:df:fe:7e:2e:7f:e4:21:de:e0:f3:cf:5d:60:1d:1e:
da:0b:a8:81:7e:37:20:9c:90:ca:10:8a:f4:0c:e9:e9:c7:43:
fd:32:71:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE
MDdEOUZDNUYwHhcNMjUwMTMxMTQyNjUzWhcNMjUwMjA3MTQyNjUzWjAYMRYwFAYD
VQQDEw02NzljZGRhZC0xMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnk4J2TcAcvx6QbVBQnvdRPB53JmPhVuZcPBtl4xXxfT9vzsjb0b37f8jjZzt
KbpvV6DIH8AMG8UVTrgALOZ66zkjlsbXIwsaCghemFkHtgryyKKik+JTt7aaZnt7
wJjE+HufPMb8XCyZsRUULZURTY4RhAh/2hpYmAG3cRzibPiKNvM2S4GZyARtOpD7
WGmh6Q4iJ1eIzPdElm+qg8NUXWE0R1yFpFop5G1vDSK9VKO0dw7KxDv8j1XdGxxl
yQ5s1piwzwjsSiahAiUBX63nIllEOPZQu/loHHVc1DDPbP64WTVPUlzim9uNSCP2
wiNbX0bsAQt9B4UfmEbm6XMdAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK7kBAg
+l1ZBlPMN4NQAe7qr/XSMB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE
ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
N0U0RC9FQTFCMUQ2QTFEODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NY
b2MwMWNkR0RkSV9RZlpfRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJBmoeMFTQZ72Wd2bXhT0jdWrUVEtW7Eg+jME9EKp9DMhL6aqfMVfI
z7LcjA4kcy29OuQ5AqezzxMpGvj+7HabwHeet9QaG2IUSMqqCwVwicJSPaykNXz6
5ZxenxF+Ts34+Q+BAbCyDoL4kzQn2Pua8Z5Vvnt4f6vNXzlTh8TEDE42hlsBPLq7
8EXXjrU0Zx5cq4KrbkEyXY9kOOmyPga8J0J/FgnkxZ5C1A2nOomgJ/ge/u/TmM+T
zBXKS7wJLF0AbZQdCc2OIRRnPGeF2IIPootyQqZRkWfZoOHf/n4uf+Qh3uDzz11g
HR7aC6iBfjcgnJDKEIr0DOnpx0P9MnHD
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:44:14 2025 by rpki-client