Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft
File: HWQu0o7OpfKqzzR7Fgl_nZJB120.mft (raw, json)
Hash identifier: QQjXBS54S0lz2sskLj3Yb9KV2qFSnbVAfP87Av2s1sc=
Subject key identifier: 1F:20:83:8F:01:D5:CC:8D:FE:51:5B:BE:37:51:4C:6A:17:AB:CB:20
Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D
Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
Certificate serial: 0315
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft
Manifest number: 0312
Signing time: Fri 31 Jan 2025 01:17:12 +0000
Manifest this update: Fri 31 Jan 2025 01:17:12 +0000
Manifest next update: Fri 07 Feb 2025 01:17:12 +0000
Files and hashes: 1: HWQu0o7OpfKqzzR7Fgl_nZJB120.crl (hash: v9Yz2L2KIPiNyHuYqnwrnybSy5DYIxFSDAE7btOIE+w=)
2: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (hash: BArGwM1bK+rweYsGVKqgC9JYCGyliz8oP72ndcEJbbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
Validity
Not Before: Jan 31 01:17:12 2025 GMT
Not After : Feb 7 01:17:12 2025 GMT
Subject: CN=679c2498-251e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:d2:de:7c:92:95:74:0c:85:a2:5d:2d:c1:
8e:ec:e6:62:76:27:6c:6a:60:de:b6:6f:74:74:f5:
cd:2b:3c:b7:a7:80:c6:29:f7:cc:2a:a2:49:20:d0:
1d:74:3f:a2:75:5b:86:ac:19:52:5a:17:3c:92:00:
47:f1:3c:89:34:b5:30:8b:fa:b3:4c:b7:ce:fa:f5:
9e:5e:86:b3:71:51:1e:56:33:d0:75:63:0e:50:39:
98:86:d5:7d:d5:0f:b4:5d:ba:e3:95:8d:fb:22:6c:
57:c4:8e:b3:b1:68:ef:1b:27:36:e7:da:60:4d:54:
51:3c:fc:80:f7:58:b8:05:6b:93:ec:1d:10:23:a6:
b7:28:55:e8:7b:db:90:0b:af:86:9a:ca:b8:a2:c6:
c3:86:d2:da:5b:5e:63:c3:be:06:53:5b:4d:e4:2a:
07:17:46:2c:74:3c:9e:49:7a:ac:54:68:0b:aa:b5:
94:d1:a6:2b:a4:86:b2:d4:97:fe:f8:5c:f1:48:01:
c0:b4:b3:bf:71:81:8d:7d:97:c5:f0:e0:d2:be:ed:
f9:16:c3:bd:a0:2d:bb:c2:94:cf:82:e7:c0:65:1b:
a0:16:09:cb:57:6c:51:e7:fd:8a:56:86:b2:8d:9c:
29:52:c5:78:63:37:d2:a3:f4:82:19:2b:f9:47:c0:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:83:8F:01:D5:CC:8D:FE:51:5B:BE:37:51:4C:6A:17:AB:CB:20
X509v3 Authority Key Identifier:
keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:c5:06:d2:0f:7a:9e:ae:6d:a2:00:3b:40:73:e7:32:51:68:
54:1a:10:a7:e9:26:dc:06:78:fb:cc:95:0c:12:d0:9d:ee:83:
b3:64:d1:08:34:41:e5:bc:48:1e:2c:43:e6:bc:09:54:e9:d6:
be:65:91:93:49:9c:6c:a4:65:7f:67:1a:51:e6:40:f4:41:a7:
97:be:b9:20:a6:27:6a:73:4c:68:77:1c:02:99:a4:05:e0:bf:
4f:72:10:aa:e5:96:bd:b0:d3:a3:a4:a4:79:f2:45:c8:84:8e:
da:1f:76:ef:2f:4d:ef:f2:d2:3f:3b:ad:e1:29:5a:d1:ec:d5:
75:0f:c8:d1:bd:89:c2:72:52:b8:b7:ab:55:63:81:d3:c3:85:
dd:6b:04:4a:b8:8f:f2:0a:f5:d9:59:76:49:f2:5d:0c:c0:a2:
1f:c8:e9:64:d1:33:de:ff:b2:0a:20:da:71:fa:93:17:0a:dd:
8b:fe:8a:00:d9:64:66:ce:aa:ba:98:49:d7:b6:0d:e2:98:73:
6a:9e:3e:2e:9f:dc:77:86:8a:ec:62:c2:ef:fd:96:d9:25:de:
a5:85:7f:33:80:60:ee:de:d2:9f:a1:ec:9c:fd:21:70:4c:03:
74:c3:e5:27:7d:6c:ac:04:41:a1:42:a0:83:a3:43:36:07:2f:
d8:7a:66:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThFM0ExMTAvBgNVBAUTKDFENjQyRUQyOEVDRUE1RjJBQUNGMzQ3QjE2MDk3RjlE
OTI0MUQ3NkQwHhcNMjUwMTMxMDExNzEyWhcNMjUwMjA3MDExNzEyWjAYMRYwFAYD
VQQDEw02NzljMjQ5OC0yNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxObS3nySlXQMhaJdLcGO7OZididsamDetm90dPXNKzy3p4DGKffMKqJJINAd
dD+idVuGrBlSWhc8kgBH8TyJNLUwi/qzTLfO+vWeXoazcVEeVjPQdWMOUDmYhtV9
1Q+0XbrjlY37ImxXxI6zsWjvGyc259pgTVRRPPyA91i4BWuT7B0QI6a3KFXoe9uQ
C6+Gmsq4osbDhtLaW15jw74GU1tN5CoHF0YsdDyeSXqsVGgLqrWU0aYrpIay1Jf+
+FzxSAHAtLO/cYGNfZfF8ODSvu35FsO9oC27wpTPgufAZRugFgnLV2xR5/2KVoay
jZwpUsV4YzfSo/SCGSv5R8DmjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8gg48B
1cyN/lFbvjdRTGoXq8sgMB8GA1UdIwQYMBaAFB1kLtKOzqXyqs80exYJf52SQddt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEUzQS9BN0FCMEE4QUI5
OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3BmS3F6elI3RmdsX25aSkIx
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hXUXUwbzdPcGZLcXp6UjdGZ2xfblpKQjEyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEUzQS9BN0FCMEE4QUI5OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3Bm
S3F6elI3RmdsX25aSkIxMjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCExQbSD3qerm2iADtAc+cyUWhUGhCn6SbcBnj7zJUMEtCd7oOzZNEI
NEHlvEgeLEPmvAlU6da+ZZGTSZxspGV/ZxpR5kD0QaeXvrkgpidqc0xodxwCmaQF
4L9PchCq5Za9sNOjpKR58kXIhI7aH3bvL03v8tI/O63hKVrR7NV1D8jRvYnCclK4
t6tVY4HTw4XdawRKuI/yCvXZWXZJ8l0MwKIfyOlk0TPe/7IKINpx+pMXCt2L/ooA
2WRmzqq6mEnXtg3imHNqnj4un9x3horsYsLv/ZbZJd6lhX8zgGDu3tKfoeyc/SFw
TAN0w+UnfWysBEGhQqCDo0M2By/YemZ4
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:39 2025 by rpki-client