Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json)
Hash identifier: HZNwcNlIGw8dwj9dK6V+WCvR32vaf6edINIWEzCjQLs=
Subject key identifier: 3B:26:E7:16:62:C7:22:AC:37:44:F7:6B:7C:1D:50:FD:DC:B1:C3:0A
Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
Manifest number: DF
Signing time: Fri 31 Jan 2025 04:41:56 +0000
Manifest this update: Fri 31 Jan 2025 04:41:55 +0000
Manifest next update: Fri 07 Feb 2025 04:41:55 +0000
Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: mVsuvGbvU4s3gSuJm+W5xrsBrS2l1M/FWezWti83Yyw=)
2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: XRSbm92iiBJ9xxjhhCi5I/tUaB0t9fuY2aP6/h6Ck2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Validity
Not Before: Jan 31 04:41:55 2025 GMT
Not After : Feb 7 04:41:55 2025 GMT
Subject: CN=679c5493-b436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:4d:e0:dc:ca:55:40:83:7c:5b:00:e5:a9:
4b:a9:ed:47:e0:a1:5e:a5:5b:c6:dc:06:55:1f:14:
4b:2a:06:85:f3:07:8f:1d:0a:22:d1:76:58:3b:b6:
1b:6e:ff:3a:07:cf:91:2b:2e:a7:d2:34:47:f7:48:
16:c3:09:c1:a9:03:30:e4:2e:f0:ed:1a:42:8d:c3:
69:a5:d4:5d:e1:f5:e4:fd:3e:03:d8:06:3d:47:aa:
c5:14:ce:57:c8:35:0b:e9:6b:b2:4c:e2:6c:9d:9e:
f4:10:42:12:db:f2:b8:8f:52:2a:3d:fe:82:a5:25:
34:77:44:37:63:d0:bb:c1:37:0a:f6:ef:25:5d:7f:
ef:1c:f7:e8:9a:8b:31:27:ab:49:83:a0:48:b1:cb:
d9:ee:b6:9c:89:29:d8:18:53:fa:b2:39:93:2a:f7:
ea:23:b8:be:ca:e3:16:97:0a:4c:a9:43:40:b4:e9:
b3:89:8e:06:78:c2:b8:02:5b:60:a8:7b:e7:5b:fe:
9c:6d:c3:18:4d:e0:10:a3:b8:f7:3c:27:37:c0:34:
8d:a9:44:76:fb:b2:1d:01:28:fb:16:5b:5b:3a:18:
b7:5b:ec:d8:8d:e6:23:3e:17:ad:ca:5e:8c:c7:e6:
ee:39:e6:72:83:fb:8f:8a:78:a4:54:e4:22:59:ef:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:26:E7:16:62:C7:22:AC:37:44:F7:6B:7C:1D:50:FD:DC:B1:C3:0A
X509v3 Authority Key Identifier:
keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:b8:ea:94:45:6e:51:58:54:27:2d:7a:75:33:e3:09:77:7d:
db:0b:08:8c:8c:2a:a6:b2:81:2a:79:f1:8e:07:7f:3c:16:9c:
1a:0e:d1:ba:79:d6:9e:fc:d7:35:9e:7a:05:d8:59:07:3d:56:
aa:79:72:25:c3:64:dc:f6:84:70:d1:fd:85:8e:5d:a9:8e:8e:
ef:03:07:c6:e6:9d:87:b9:40:52:e4:bd:83:5e:27:da:b1:94:
51:10:1d:c2:b5:95:41:bc:7b:37:00:9e:47:0a:9a:fd:a4:66:
ad:74:02:b1:84:73:4d:8e:87:a8:14:26:f9:67:9d:2c:35:0b:
da:46:c4:cf:03:41:64:be:6a:14:db:28:96:bb:98:43:b8:42:
d5:bb:12:47:43:7a:8f:b6:18:2c:9f:bd:92:28:19:7f:dc:ee:
81:54:37:d9:a3:c2:fe:ae:3f:a5:48:a6:da:06:99:0e:13:e2:
01:30:4d:f1:ff:8b:28:2e:89:ef:eb:7a:3c:e3:e4:40:aa:cc:
07:b5:f6:1e:ff:9e:5e:ca:40:c9:8f:27:b8:dd:72:63:05:80:
d3:6b:d2:6c:12:5c:b5:fb:bb:bc:88:ee:d3:e1:42:e8:1f:15:
a9:a1:eb:fe:a0:89:96:47:ef:3e:f1:94:ed:7d:71:d0:10:64:
0b:b3:1f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:22 2025 by rpki-client