Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
File: hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json)
Hash identifier: bpEP/uqMWlSfV5Yb/9EHih2+uj20IqXI1+sPnNi9e14=
Subject key identifier: ED:F7:D9:04:84:89:7A:56:84:05:10:6C:9F:C0:5A:43:04:80:2F:D7
Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
Manifest number: 95
Signing time: Fri 31 Jan 2025 05:32:09 +0000
Manifest this update: Fri 31 Jan 2025 05:32:08 +0000
Manifest next update: Fri 07 Feb 2025 05:32:08 +0000
Files and hashes: 1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: d1vszPwFmuFaXws4ghRLHPp0rwP8v25ykgcxIamZ2dQ=)
2: 894D6CDE1C3511EFA78E995CC4F9AE02.roa (hash: uii8sBoCCA9oMiaCp6gGjIs44iklY2+Z8HWMoERYSKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Validity
Not Before: Jan 31 05:32:08 2025 GMT
Not After : Feb 7 05:32:08 2025 GMT
Subject: CN=679c6059-958e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:9f:dd:0c:eb:4f:e4:ab:a9:9d:9f:bd:6d:
15:4d:66:f3:dc:c8:1e:62:c8:c6:d0:68:e2:6e:08:
7d:76:ce:bf:70:0d:9e:e3:23:d1:85:48:cb:34:f5:
cb:8f:a1:e6:bb:34:9e:6a:56:ec:9f:08:38:78:37:
e5:ed:6e:f5:7a:2b:79:25:f5:70:5f:2f:27:7f:f9:
65:bb:98:1f:c3:99:1f:85:9e:0e:c5:33:22:80:c6:
89:c6:be:20:92:99:72:e2:07:09:d8:42:8d:9c:52:
a9:ec:f8:8e:91:9f:d1:f0:a3:2d:48:2d:1e:ca:2b:
39:93:3a:26:70:e7:99:33:c4:95:ef:04:3b:55:ed:
2b:db:90:fe:fc:96:83:39:9a:9d:75:75:fa:57:ff:
38:a5:6e:bc:6f:a6:d6:b7:b0:2d:8e:e2:5b:d5:c6:
78:6a:b4:b8:1f:b0:9d:ab:0c:a8:7c:bb:d7:ae:e0:
dc:0e:9d:b1:e0:e6:2b:11:dd:6a:9e:41:bf:2e:b5:
5b:2c:73:a7:5f:61:80:80:89:63:43:45:9d:43:6b:
1d:1d:55:ed:3b:5d:05:73:79:29:2d:cc:4c:f9:06:
b0:b3:b1:67:b4:08:a3:ba:dc:69:28:d2:3d:ae:2a:
19:2a:ce:db:6c:b2:ee:b3:55:ec:bf:59:25:82:7b:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F7:D9:04:84:89:7A:56:84:05:10:6C:9F:C0:5A:43:04:80:2F:D7
X509v3 Authority Key Identifier:
keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:e4:42:ca:f2:15:95:74:dc:00:d1:40:08:59:56:3d:e6:70:
2f:a1:da:40:0d:e0:b3:23:4a:ae:b9:2b:1b:31:62:eb:a8:ca:
b8:d4:fd:7a:06:02:dc:df:c3:bb:93:4a:d6:f1:0d:cb:6e:8f:
d9:71:a5:7b:d3:e4:6c:7e:c4:e9:30:f1:2b:ed:e2:70:d5:43:
90:37:08:22:91:64:23:c7:1c:4a:54:ca:e2:61:7a:14:9e:0a:
f4:96:8a:6a:da:c4:b5:89:17:eb:4b:47:a0:f3:bb:de:24:fd:
4a:af:93:25:a7:b4:c9:64:a8:fa:48:a1:48:1c:6c:a5:d2:a4:
e9:e3:94:f6:f7:74:c8:9c:ee:f7:27:e7:87:ea:bb:7e:89:04:
d2:8d:22:d3:8d:75:4d:1e:7d:da:55:83:b1:e5:aa:74:f2:f8:
9c:d1:f9:8b:0d:e5:f0:3f:28:95:d9:9e:27:4d:af:86:b4:c6:
8c:3a:fc:3e:eb:2b:5a:85:28:5e:69:f7:c2:ad:43:f7:1c:8d:
56:29:65:cc:94:32:5d:1d:07:76:2a:79:3f:6b:28:dd:c6:ab:
a3:b6:1f:97:d2:dc:2d:79:5e:6f:b9:08:95:5f:f8:8d:9c:24:
45:67:73:09:ec:ba:fc:79:c3:cb:5c:f6:ac:83:2f:09:33:79:
f2:2b:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:46:28 2025 by rpki-client