Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json)
Hash identifier: 9sZMUkuARPBsb1SdNRaF8FfSMoo6ljGkFBeayaFrEsE=
Subject key identifier: E4:86:5B:D9:4A:B1:84:69:C2:F1:7D:A7:81:02:81:8C:E7:3F:D0:E2
Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2
Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2
Certificate serial: 3445
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
Manifest number: 3443
Signing time: Fri 31 Jan 2025 15:12:18 +0000
Manifest this update: Fri 31 Jan 2025 15:12:17 +0000
Manifest next update: Fri 07 Feb 2025 15:12:17 +0000
Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: M69OPMTXFSSTolHytCJ3FM5Psp5ZogR67z3UFZ24a/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13381 (0x3445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2
Validity
Not Before: Jan 31 15:12:17 2025 GMT
Not After : Feb 7 15:12:17 2025 GMT
Subject: CN=679ce851-2cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:93:f1:bb:3a:54:68:46:01:a7:25:fa:9f:
da:a7:8a:6e:7d:75:4e:e2:45:7c:85:cd:80:e3:e2:
ef:a9:05:11:42:57:bd:24:11:35:01:3f:bf:6e:7b:
f3:c5:60:da:5a:26:56:3d:ce:46:5b:fb:03:35:06:
04:6f:f1:f5:7b:93:06:b0:b3:f2:57:55:97:69:3c:
df:13:79:14:f2:83:3c:8b:8d:0e:8f:e4:a2:60:4b:
9b:6f:c6:e4:12:4a:38:af:b5:87:01:a2:50:3c:db:
c6:c4:9f:b6:51:41:28:65:dc:31:99:fd:8c:2f:fe:
a6:69:81:31:00:17:51:d6:7c:7d:75:c8:7a:64:b5:
33:96:83:43:05:71:dd:12:26:71:c3:30:0c:81:51:
a3:38:53:3d:8b:16:70:e6:c8:3a:53:11:60:c5:53:
d2:d1:66:fd:57:55:f3:61:e6:98:40:2a:3a:03:84:
f3:06:35:37:0d:f9:52:e1:ae:e8:3a:c0:83:8d:11:
d8:36:44:f2:ed:7b:8c:4e:af:20:54:66:12:59:ca:
a1:bf:9f:2f:1a:58:78:38:47:67:26:72:97:fb:9b:
8e:62:d7:da:e6:23:8a:26:bf:01:bc:a2:fa:aa:82:
6d:d1:dd:cb:ab:a3:7e:d8:45:41:72:4a:09:c7:a1:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:86:5B:D9:4A:B1:84:69:C2:F1:7D:A7:81:02:81:8C:E7:3F:D0:E2
X509v3 Authority Key Identifier:
keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:99:1c:7b:71:f8:d3:50:ad:86:ff:a0:0e:d6:46:7b:2a:07:
c5:26:ab:e0:26:7c:6e:47:f4:11:34:94:4f:7b:ea:00:65:9f:
23:1b:24:4f:45:1a:93:cf:2b:ad:56:80:a5:af:a6:73:2c:e3:
3b:04:c5:ee:a8:63:a2:c8:20:e7:cf:28:73:2c:f5:83:59:2d:
8f:96:49:d5:8d:61:7d:03:89:88:15:4b:84:f7:cc:2c:df:c6:
3f:52:d5:ee:27:22:18:74:a4:bb:5c:c2:59:d5:03:07:78:bb:
6b:21:8f:39:80:4e:2c:47:79:a1:c0:b6:f7:bc:a0:99:64:fd:
85:a6:cc:1b:85:49:7f:e0:cc:28:10:43:01:bc:ee:60:6f:bf:
93:a3:6f:30:0e:a7:b3:78:5e:1b:fe:18:58:52:d5:44:46:6d:
6f:b7:b1:3b:82:c9:d0:d6:0b:b4:c6:37:e7:75:e2:e9:a2:75:
42:36:40:4f:14:15:33:e6:60:4b:63:42:b9:be:ef:36:78:05:
b4:ec:53:3c:8e:ad:31:01:d9:4b:5f:7d:56:23:cb:24:d3:a6:
75:22:e5:f5:53:75:73:4a:88:97:c9:99:8d:88:22:ae:f2:c2:
d0:95:39:73:8d:04:68:e6:da:76:dc:fb:cb:ea:e8:7e:25:4f:
05:aa:e0:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0
RjE5QzQ3QjIwHhcNMjUwMTMxMTUxMjE3WhcNMjUwMjA3MTUxMjE3WjAYMRYwFAYD
VQQDEw02NzljZTg1MS0yY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArsOT8bs6VGhGAacl+p/ap4pufXVO4kV8hc2A4+LvqQURQle9JBE1AT+/bnvz
xWDaWiZWPc5GW/sDNQYEb/H1e5MGsLPyV1WXaTzfE3kU8oM8i40Oj+SiYEubb8bk
Eko4r7WHAaJQPNvGxJ+2UUEoZdwxmf2ML/6maYExABdR1nx9dch6ZLUzloNDBXHd
EiZxwzAMgVGjOFM9ixZw5sg6UxFgxVPS0Wb9V1XzYeaYQCo6A4TzBjU3DflS4a7o
OsCDjRHYNkTy7XuMTq8gVGYSWcqhv58vGlh4OEdnJnKX+5uOYtfa5iOKJr8BvKL6
qoJt0d3Lq6N+2EVBckoJx6HfWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSGW9lK
sYRpwvF9p4ECgYznP9DiMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE
QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt
WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDFmRx7cfjTUK2G/6AO1kZ7KgfFJqvgJnxuR/QRNJRPe+oAZZ8jGyRP
RRqTzyutVoClr6ZzLOM7BMXuqGOiyCDnzyhzLPWDWS2PlknVjWF9A4mIFUuE98ws
38Y/UtXuJyIYdKS7XMJZ1QMHeLtrIY85gE4sR3mhwLb3vKCZZP2FpswbhUl/4Mwo
EEMBvO5gb7+To28wDqezeF4b/hhYUtVERm1vt7E7gsnQ1gu0xjfndeLponVCNkBP
FBUz5mBLY0K5vu82eAW07FM8jq0xAdlLX31WI8sk06Z1IuX1U3VzSoiXyZmNiCKu
8sLQlTlzjQRo5tp23PvL6uh+JU8FquDM
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:34:19 2025 by rpki-client