Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft
File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json)
Hash identifier: zeHUuPCIHaOvPHFG1qMZPoOyaIP6alECF6GnfAobdAg=
Subject key identifier: 30:7A:AC:C4:7C:B9:AE:E0:DA:57:AF:78:9F:F9:3E:77:25:4E:FC:A9
Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052
Certificate serial: 0A45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft
Manifest number: 0A3A
Signing time: Thu 30 Jan 2025 19:51:14 +0000
Manifest this update: Thu 30 Jan 2025 19:51:13 +0000
Manifest next update: Thu 06 Feb 2025 19:51:13 +0000
Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: d+uTZ3UgBOtogEUTsms1tXigIagN4pbFgoQMv/T1nqs=)
2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: 0cvbxP20kbDfmHfHGVhiDmzqDHp8ThkRVUA3Ma5jp/o=)
3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: VQgzjbt+yUKlk0a3cKkNbYjoYrGC1Q3yZRt8dWoxZtQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2629 (0xa45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052
Validity
Not Before: Jan 30 19:51:13 2025 GMT
Not After : Feb 6 19:51:13 2025 GMT
Subject: CN=679bd831-a00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:ab:da:49:34:b5:2f:b5:a0:5e:4c:01:ca:
d5:76:ff:cf:98:a4:56:61:4c:fe:cc:a1:37:85:56:
47:8c:ff:40:7a:de:53:96:db:a4:ca:6f:51:b1:a8:
cf:52:8b:fc:a0:6e:0e:a6:92:e4:8e:a6:c6:05:71:
ee:4f:0d:43:7a:06:59:55:8e:8a:36:87:bb:39:33:
a4:4b:38:46:28:8e:9e:0c:f5:1b:5f:66:01:a0:d4:
22:dc:58:21:b5:02:45:f7:17:53:bf:f5:6b:30:d7:
5b:0c:d8:5f:5e:1b:89:16:a0:6a:28:ab:7e:ce:60:
a5:9f:02:98:6d:2a:9f:e5:77:a7:a8:59:3a:33:02:
9c:dd:04:6a:79:8b:f3:49:92:d3:73:36:11:bf:64:
69:80:06:1e:a9:33:6d:47:4d:d2:7c:c2:ae:ae:3e:
61:ea:2e:e8:6d:0f:98:5e:9e:ee:c8:02:35:f0:bb:
78:a0:7c:93:af:ed:13:d6:43:be:63:78:e8:5f:0e:
01:14:0e:a3:c7:7d:4a:62:c3:55:2d:7a:4d:2d:07:
fb:64:b6:25:b0:96:6b:37:4d:3a:d3:a3:ea:98:df:
50:84:de:83:d3:c5:bc:6f:b6:5e:fe:e8:2d:9c:e0:
1a:5e:d3:a7:04:08:55:85:43:a2:82:d3:1c:53:e8:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7A:AC:C4:7C:B9:AE:E0:DA:57:AF:78:9F:F9:3E:77:25:4E:FC:A9
X509v3 Authority Key Identifier:
keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a1:df:75:ab:06:2a:48:32:be:1c:47:ee:69:9d:e9:64:30:
11:5b:e3:c2:50:be:f5:12:fc:c6:b9:2e:e5:06:2a:95:be:a2:
cb:ef:78:e8:0d:2b:81:df:62:94:a0:5f:6c:b5:d7:7f:a3:44:
8a:53:84:0d:5c:02:38:a4:6b:27:df:97:b6:92:fb:30:b3:43:
97:1c:4f:04:cd:e5:66:42:06:4f:f2:f9:64:57:64:8e:be:01:
81:2f:86:ac:8f:0c:10:62:f9:4f:d8:b5:61:81:b8:67:e0:4e:
ed:99:57:3f:36:0d:77:70:ab:06:fc:08:8b:17:96:d4:01:36:
fe:e4:13:a1:95:e6:24:1a:f4:b2:85:64:33:4c:65:2a:39:a1:
ec:d3:68:24:53:72:80:84:a3:49:24:c8:68:d6:31:76:f4:00:
f6:89:64:35:0d:03:cc:03:5b:a2:f9:4c:80:d3:45:11:88:f4:
f8:88:34:2a:fb:95:9e:ab:c6:d5:e3:c3:79:88:e3:d7:71:1c:
7a:39:89:28:1b:b9:8b:61:c4:a4:1e:d3:82:89:f5:48:28:c1:
6b:a9:30:8e:bf:3a:cd:20:9f:64:4b:67:c0:1a:55:f9:92:52:
8c:de:b7:5b:a9:b9:5c:8e:00:c5:47:e6:54:d8:38:6c:af:3c:
29:0f:f1:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB
MTY1MjIwNTIwHhcNMjUwMTMwMTk1MTEzWhcNMjUwMjA2MTk1MTEzWjAYMRYwFAYD
VQQDEw02NzliZDgzMS1hMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApD6r2kk0tS+1oF5MAcrVdv/PmKRWYUz+zKE3hVZHjP9Aet5Tltukym9RsajP
Uov8oG4OppLkjqbGBXHuTw1DegZZVY6KNoe7OTOkSzhGKI6eDPUbX2YBoNQi3Fgh
tQJF9xdTv/VrMNdbDNhfXhuJFqBqKKt+zmClnwKYbSqf5XenqFk6MwKc3QRqeYvz
SZLTczYRv2RpgAYeqTNtR03SfMKurj5h6i7obQ+YXp7uyAI18Lt4oHyTr+0T1kO+
Y3joXw4BFA6jx31KYsNVLXpNLQf7ZLYlsJZrN00606PqmN9QhN6D08W8b7Ze/ugt
nOAaXtOnBAhVhUOigtMcU+hzqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDB6rMR8
ua7g2leveJ/5PnclTvypMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG
NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF
SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNod91qwYqSDK+HEfuaZ3pZDARW+PCUL71EvzGuS7lBiqVvqLL73jo
DSuB32KUoF9stdd/o0SKU4QNXAI4pGsn35e2kvsws0OXHE8EzeVmQgZP8vlkV2SO
vgGBL4asjwwQYvlP2LVhgbhn4E7tmVc/Ng13cKsG/AiLF5bUATb+5BOhleYkGvSy
hWQzTGUqOaHs02gkU3KAhKNJJMho1jF29AD2iWQ1DQPMA1ui+UyA00URiPT4iDQq
+5Weq8bV48N5iOPXcRx6OYkoG7mLYcSkHtOCifVIKMFrqTCOvzrNIJ9kS2fAGlX5
klKM3rdbqblcjgDFR+ZU2DhsrzwpD/HM
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:08:02 2025 by rpki-client