Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
File: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft (raw, json)
Hash identifier: vNwnnO9qF2APT89ypTpsvWogq1D+BS9BJaHcwaRbdQQ=
Subject key identifier: 8F:A0:70:CE:10:4A:4F:31:BD:96:D7:95:49:19:C1:19:0F:F4:87:62
Authority key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
Certificate issuer: /CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
Certificate serial: 0E0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
Manifest number: 0E02
Signing time: Fri 31 Jan 2025 17:48:36 +0000
Manifest this update: Fri 31 Jan 2025 17:48:35 +0000
Manifest next update: Fri 07 Feb 2025 17:48:35 +0000
Files and hashes: 1: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl (hash: Ix1504q0J7C7G2JFQKDQ0VC4jxSn2AZMOUx2Qm16hLc=)
2: 2B21EC2EE4E111E981365C17C4F9AE02.roa (hash: jnR4T4XlGdfZ2gOhYWumXwRlSJ7MxpHX0lAGLhkJjWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3599 (0xe0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
Validity
Not Before: Jan 31 17:48:35 2025 GMT
Not After : Feb 7 17:48:35 2025 GMT
Subject: CN=679d0cf4-247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:af:18:c9:81:26:25:93:b2:a0:c1:f8:d2:
6f:2c:b3:f4:d4:80:27:24:81:99:2d:90:d5:4e:45:
3d:35:cf:87:ab:7f:5e:f2:5d:2a:fb:26:8e:ec:79:
ee:0e:8b:c1:21:8b:18:e3:94:4b:8c:9c:5f:5d:74:
cc:fe:0b:dc:01:5a:1c:d6:25:2d:68:f5:fa:b4:cb:
44:52:fb:ef:d3:1b:5d:e3:0a:ff:6e:a7:85:b0:f8:
b5:89:32:6b:c9:a0:7e:04:59:82:ef:e3:00:83:82:
80:ea:3a:b5:c4:06:dd:13:ac:7b:fc:71:22:46:36:
a7:88:1b:c2:b3:a5:1f:f9:20:ef:b8:c4:70:4b:e8:
85:02:a4:06:f4:e6:66:b9:a7:1e:d6:29:eb:27:a1:
bb:d7:e7:42:02:e6:99:e0:da:f1:56:7b:1e:32:87:
a2:6f:7f:05:d1:59:c0:a2:c5:09:b4:84:b6:9e:35:
d7:e9:0a:2a:21:4b:c4:eb:4d:0d:60:84:e4:fa:30:
f0:99:81:fb:bc:01:3d:91:79:ce:37:20:5a:58:52:
7e:ef:4e:f3:99:ef:27:14:b7:31:41:ff:a8:19:b3:
49:c4:38:f6:f1:3f:26:1a:6e:b0:85:52:a5:74:19:
35:3d:06:05:f3:2a:b0:e2:6b:c2:da:5f:e0:8b:b0:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A0:70:CE:10:4A:4F:31:BD:96:D7:95:49:19:C1:19:0F:F4:87:62
X509v3 Authority Key Identifier:
keyid:84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:96:3c:8f:f0:05:16:83:87:82:2a:74:6b:48:8d:ff:b3:53:
f9:18:a9:57:28:88:10:28:cf:df:33:60:fb:57:e2:b1:ea:be:
81:20:06:36:e3:d2:f8:56:21:f3:d3:61:ea:00:d7:0e:8a:e1:
c9:95:89:2c:8b:e7:f4:00:21:01:a5:81:46:5d:35:48:5c:53:
87:09:71:ee:bc:a3:46:df:23:74:cd:3f:5b:03:6c:74:92:7f:
25:3f:66:43:00:fb:d1:ec:23:08:70:c0:ac:42:99:ff:87:86:
4d:25:a6:88:90:28:98:fe:cd:a9:bb:79:ab:a1:d6:6e:fc:69:
79:2c:b5:cc:1d:9f:0f:e6:54:c4:39:1f:44:3d:d0:cb:4b:11:
2c:bb:4b:00:15:3d:96:94:5c:f9:5e:24:cf:6f:fa:4d:2e:20:
94:4b:75:07:ce:ad:bb:be:a3:8c:8c:a7:38:78:56:4a:00:7d:
8e:41:89:a7:d5:e8:d5:46:51:8c:fb:7f:bd:51:81:ad:fa:29:
e3:81:df:85:27:db:a5:d3:f4:c5:df:e7:92:c2:51:49:eb:b0:
8d:da:95:71:26:45:0a:9b:28:79:3b:bf:d6:61:09:a8:88:7c:
7d:07:ff:c0:7a:a2:e5:83:95:16:4b:5c:38:fa:af:07:60:3e:
9f:98:cb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:32 2025 by rpki-client