Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
File: hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json)
Hash identifier: Jc59WCdUgVPqkKXPCseFF9km/Qiz+eGjeNg3Iqdz9vA=
Subject key identifier: 74:92:8C:00:A1:96:18:F3:5E:18:87:D5:4D:C3:16:BA:C1:D1:88:EA
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 34B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
Manifest number: 3494
Signing time: Fri 31 Jan 2025 14:22:49 +0000
Manifest this update: Fri 31 Jan 2025 14:22:48 +0000
Manifest next update: Fri 07 Feb 2025 14:22:48 +0000
Files and hashes: 1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: ssqDiEl03jElbgJYVynTuC8g1kyO8yVBuMkIV+8T158=)
2: 28C6CC78C9A211EF80529168C4F9AE02.roa (hash: JU+9r/BR6enDzpMO0NXDd4C16/4XfFl9aRRHlEnxHMw=)
3: AF6AA9ECFF6011ED90C62C26C4F9AE02.roa (hash: WN63r0LYc8OT8onwa3D/94S7/WYcequXWARWDYr4XRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13492 (0x34b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Validity
Not Before: Jan 31 14:22:48 2025 GMT
Not After : Feb 7 14:22:48 2025 GMT
Subject: CN=679cdcb8-1311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:ca:96:ba:77:a6:f1:6e:ea:e8:d7:97:ea:
cd:95:1f:33:cf:91:61:09:e4:78:82:f6:b0:ad:79:
c1:da:65:cc:bc:c3:f7:ab:c3:10:34:f6:eb:f9:33:
29:14:c8:0a:10:9c:7b:28:ff:09:67:3b:b2:8f:a9:
95:18:9c:60:ba:cf:52:b7:eb:94:fc:0e:e3:f9:fc:
91:65:67:63:26:ff:95:c2:34:12:80:5f:f7:44:0a:
03:92:2a:e1:fe:0f:4e:9e:6a:b7:67:51:47:46:1a:
c2:54:8e:d4:82:5e:2d:d4:08:0b:71:e4:c9:ed:a0:
c6:dc:a8:c9:80:af:87:da:15:61:3c:55:91:9d:67:
3d:16:d3:19:a2:0a:97:3b:fe:e6:20:ee:30:2f:76:
35:ce:68:aa:ab:24:60:bf:e1:4b:76:94:c6:e1:f5:
5e:8b:86:81:3c:fc:64:f8:87:d9:af:16:ec:f6:18:
9a:5e:c1:24:ba:d0:a1:dd:1b:9c:bc:38:f4:7f:b4:
ca:8d:96:5e:32:8c:6f:0d:f5:99:77:6c:28:a6:1f:
15:51:ff:c7:d1:e4:b4:89:86:59:d5:32:5d:89:f5:
76:36:ae:49:4b:51:9d:4f:1e:d1:a6:49:4e:83:bc:
9d:7b:b9:a7:ed:6a:ea:04:2d:3e:72:93:57:bc:d1:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:92:8C:00:A1:96:18:F3:5E:18:87:D5:4D:C3:16:BA:C1:D1:88:EA
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:aa:f0:52:08:eb:f6:04:45:bc:15:88:5a:a2:bf:c9:92:61:
75:78:9d:45:0f:17:3d:13:b4:c5:b3:73:04:90:02:6a:f9:51:
7b:21:6b:c6:b3:2b:ef:40:62:56:c7:f1:69:f7:cf:1c:08:33:
7b:32:0e:ef:7f:51:88:e5:a3:2c:37:4c:73:30:8d:06:c6:40:
9d:39:3d:96:d2:22:60:43:8b:32:be:54:cd:70:58:51:ef:e3:
23:17:76:cb:e7:10:3c:82:57:56:f6:7e:b8:99:58:60:b2:01:
d6:a8:7d:85:a9:96:2f:31:51:7d:d1:4f:8c:36:20:07:f9:7f:
98:10:d3:9f:22:4c:5d:90:b6:d0:87:4a:df:ea:41:6c:8f:2f:
38:41:96:65:60:2a:86:56:d1:95:7a:7e:8c:3b:2f:7c:cf:00:
9c:8b:58:65:fa:0c:93:aa:2f:5d:a7:80:dd:ea:67:48:f2:f6:
b3:5d:08:f8:7b:e3:ec:b9:15:03:38:23:17:95:21:04:98:91:
c4:ec:4d:41:fa:2a:f9:89:01:30:f5:4a:96:a1:69:80:b0:63:
23:6d:a5:8c:22:5b:40:58:e6:f9:14:27:18:90:89:a9:4f:0a:
ba:8b:fd:ee:06:1a:28:36:7a:23:f4:4e:c5:bf:0f:8e:01:3e:
7a:38:52:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw
QzJDRTQ5QjQwHhcNMjUwMTMxMTQyMjQ4WhcNMjUwMjA3MTQyMjQ4WjAYMRYwFAYD
VQQDEw02NzljZGNiOC0xMzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnA/Klrp3pvFu6ujXl+rNlR8zz5FhCeR4gvawrXnB2mXMvMP3q8MQNPbr+TMp
FMgKEJx7KP8JZzuyj6mVGJxgus9St+uU/A7j+fyRZWdjJv+VwjQSgF/3RAoDkirh
/g9Onmq3Z1FHRhrCVI7Ugl4t1AgLceTJ7aDG3KjJgK+H2hVhPFWRnWc9FtMZogqX
O/7mIO4wL3Y1zmiqqyRgv+FLdpTG4fVei4aBPPxk+IfZrxbs9hiaXsEkutCh3Ruc
vDj0f7TKjZZeMoxvDfWZd2woph8VUf/H0eS0iYZZ1TJdifV2Nq5JS1GdTx7RpklO
g7yde7mn7WrqBC0+cpNXvNEfEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSSjACh
lhjzXhiH1U3DFrrB0YjqMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE
ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEI5OS9EM0Y5MDUxQzFEODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBY
c0Zid0t5ZVRRTk1NTE9TYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfqvBSCOv2BEW8FYhaor/JkmF1eJ1FDxc9E7TFs3MEkAJq+VF7IWvG
syvvQGJWx/Fp988cCDN7Mg7vf1GI5aMsN0xzMI0GxkCdOT2W0iJgQ4syvlTNcFhR
7+MjF3bL5xA8gldW9n64mVhgsgHWqH2FqZYvMVF90U+MNiAH+X+YENOfIkxdkLbQ
h0rf6kFsjy84QZZlYCqGVtGVen6MOy98zwCci1hl+gyTqi9dp4Dd6mdI8vazXQj4
e+PsuRUDOCMXlSEEmJHE7E1B+ir5iQEw9UqWoWmAsGMjbaWMIltAWOb5FCcYkImp
Twq6i/3uBhooNnoj9E7Fvw+OAT56OFKa
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:27 2025 by rpki-client