Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
File: HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft (raw, json)
Hash identifier: G4sh1DDEvCFyjbFNFghBEuRrZbCck/u4XKncXEK+KXs=
Subject key identifier: E5:97:54:3F:6D:66:EA:F0:7B:5E:7F:4D:BB:84:A9:89:D9:D1:1B:1A
Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
Certificate issuer: /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
Manifest number: 34
Signing time: Fri 31 Jan 2025 06:43:39 +0000
Manifest this update: Fri 31 Jan 2025 06:43:38 +0000
Manifest next update: Fri 07 Feb 2025 06:43:38 +0000
Files and hashes: 1: HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl (hash: 4ywE3aEZCtBbQHxtOC1d7ixx6HeWSP2vWAECJcHXvF8=)
2: F0C8DB1CA54E11EF8592FD66C4F9AE02.roa (hash: kWJ+IsPwJ/Oow1IdFhgFWCC31M0VCoce/yV/fhdSoaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Validity
Not Before: Jan 31 06:43:38 2025 GMT
Not After : Feb 7 06:43:38 2025 GMT
Subject: CN=679c711a-703b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:11:fe:2e:ee:ae:08:cf:61:6c:db:2e:ee:
b8:e2:67:73:4d:f6:d3:0e:f4:a1:f6:6d:5d:c9:f3:
c9:83:fa:44:2f:11:91:97:2b:b9:0a:78:fa:1b:5e:
e3:db:4d:6a:9f:fa:4d:d3:b4:46:b5:49:51:d0:50:
ef:06:09:53:ce:b4:26:67:7e:cb:11:f6:72:a3:81:
c2:db:94:0a:30:2e:42:7d:11:cb:f7:e5:dd:d5:af:
d5:af:26:60:8c:52:29:fa:a6:b0:e2:58:b5:ce:de:
1b:3c:c5:f9:46:b8:26:83:93:7c:41:e0:43:14:d3:
9d:37:f8:1b:b7:04:65:b3:3f:df:b8:df:f7:d0:90:
40:e6:81:0a:5d:33:48:95:f3:9f:ba:d9:28:d4:4f:
f2:e6:b2:3f:09:19:4e:80:f5:6d:47:c0:18:7e:42:
25:32:a2:c6:fb:fa:e0:18:4b:0c:46:7c:a8:59:1e:
89:fd:96:a5:aa:ca:bf:00:e8:d5:24:38:e9:b7:d2:
72:da:d7:e9:aa:7c:d7:9d:f1:c2:08:fc:eb:47:4e:
4c:68:d7:1a:06:82:96:3f:91:fd:bb:1d:2e:15:b4:
4f:64:72:63:8b:91:ba:c4:b6:7f:14:9a:ef:fb:7e:
04:5f:33:7a:69:c4:f5:15:63:3e:a1:af:59:e1:04:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:97:54:3F:6D:66:EA:F0:7B:5E:7F:4D:BB:84:A9:89:D9:D1:1B:1A
X509v3 Authority Key Identifier:
keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:12:cf:4a:58:a0:bf:73:57:93:2e:72:6c:39:09:c1:b8:b9:
18:8f:7e:a7:ac:2c:2f:1d:0c:97:86:69:e1:63:a4:5d:89:5d:
34:8b:bb:4f:ef:28:e4:4c:fc:b1:25:6b:be:a4:66:6a:1f:ed:
73:ee:95:d1:7e:66:df:e7:d0:e3:ba:b0:c3:cb:c2:bb:3e:60:
3f:01:46:aa:9d:15:05:63:cd:de:a2:07:da:2a:50:a3:8f:b2:
4d:1f:09:9b:70:47:e0:e9:52:ce:a8:94:81:34:94:a4:c4:70:
a4:ab:22:c3:c5:f1:10:d9:bb:0c:1c:2d:47:87:b3:02:a4:9b:
53:b7:35:14:16:dc:f0:e2:77:4b:e5:21:f4:f6:6c:18:7a:1a:
63:c4:82:15:ff:63:2c:e7:e0:16:e9:fc:37:2c:50:76:47:3d:
a2:e9:27:45:03:59:eb:72:d3:f8:ac:fb:7c:74:7a:9a:7d:c6:
7b:55:6c:db:56:e8:e0:ad:b8:fe:25:23:c4:5a:6f:c8:22:c1:
63:d5:0b:63:9f:f6:8a:30:54:83:62:d4:da:67:30:97:07:6f:
27:89:8f:d2:b6:06:f4:3a:4f:6f:0f:30:14:68:af:0d:1f:f5:
d1:48:9e:aa:bd:87:c4:bc:fb:a6:06:c4:f0:ed:42:16:65:ca:
63:97:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:40 2025 by rpki-client