Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D0E/8E714984A35E11E8B41A5878C4F9AE02/hnHJZ--Azj0S3OowSRuUb9cGh8A.mft
File: hnHJZ--Azj0S3OowSRuUb9cGh8A.mft (raw, json)
Hash identifier: ngUUSLGj1bMRyPcBk3mh58ET0gJ7qAPBRToUIzd1/Ec=
Subject key identifier: B5:91:42:16:CD:41:C9:B4:58:EA:1B:4E:43:24:29:DD:0C:3A:13:A3
Authority key identifier: 86:71:C9:67:EF:80:CE:3D:12:DC:EA:30:49:1B:94:6F:D7:06:87:C0
Certificate issuer: /CN=A9138D0E/serialNumber=8671C967EF80CE3D12DCEA30491B946FD70687C0
Certificate serial: 1373
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnHJZ--Azj0S3OowSRuUb9cGh8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138D0E/8E714984A35E11E8B41A5878C4F9AE02/hnHJZ--Azj0S3OowSRuUb9cGh8A.mft
Manifest number: 1344
Signing time: Fri 31 Jan 2025 17:01:29 +0000
Manifest this update: Fri 31 Jan 2025 17:01:28 +0000
Manifest next update: Fri 07 Feb 2025 17:01:28 +0000
Files and hashes: 1: hnHJZ--Azj0S3OowSRuUb9cGh8A.crl (hash: Fhyn70sHGRkCflXXDNKr6nv4QO17US7n16VN2RO4kvs=)
2: 29FA7FEE4DA711EF87510A26C4F9AE02.roa (hash: vR+jwlNwQhK5PgtcQNrB4z7ddP0crooveNJwbQmAU1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4979 (0x1373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138D0E/serialNumber=8671C967EF80CE3D12DCEA30491B946FD70687C0
Validity
Not Before: Jan 31 17:01:28 2025 GMT
Not After : Feb 7 17:01:28 2025 GMT
Subject: CN=679d01e8-6fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:75:5e:7f:1f:5e:40:8e:39:6d:0f:86:f3:
fb:7c:96:99:0e:49:ac:41:b1:a5:1a:2c:67:39:a6:
d1:da:1f:80:7b:57:c3:13:04:69:1d:bd:b4:4b:ec:
ca:b9:ba:cc:08:53:3a:f2:9a:a1:60:94:4e:04:09:
77:12:d9:6d:68:d3:5c:42:5a:cd:cf:b4:21:e2:cf:
a7:12:32:8a:cc:73:fe:93:ab:cf:88:5e:d8:84:1f:
f7:62:ab:b1:40:d9:4e:83:70:f3:9b:df:29:c0:3d:
7e:de:ab:03:05:b8:71:25:0d:15:68:fe:65:52:9d:
3e:00:4a:7f:dc:31:3f:8e:bd:bd:b7:f4:a3:1d:54:
66:cf:5f:2b:df:77:23:b9:40:e6:79:d6:2c:4a:32:
10:ee:69:cd:39:fb:fc:93:e8:96:68:fe:46:fa:14:
9a:bb:1d:70:89:fd:97:85:7f:61:67:e7:e4:76:1c:
4d:bb:69:7d:c8:18:5e:f2:87:33:72:9d:29:1f:1b:
05:14:d0:56:79:65:3b:09:01:57:8f:32:0a:ec:8a:
b8:63:32:f9:22:b8:53:78:c5:10:b0:3d:b1:37:1e:
d9:c9:62:10:60:bc:a9:a1:e2:2a:79:53:d7:97:a2:
4b:e1:e9:8b:84:ba:90:5e:70:21:cd:46:7b:8e:33:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:91:42:16:CD:41:C9:B4:58:EA:1B:4E:43:24:29:DD:0C:3A:13:A3
X509v3 Authority Key Identifier:
keyid:86:71:C9:67:EF:80:CE:3D:12:DC:EA:30:49:1B:94:6F:D7:06:87:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138D0E/8E714984A35E11E8B41A5878C4F9AE02/hnHJZ--Azj0S3OowSRuUb9cGh8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnHJZ--Azj0S3OowSRuUb9cGh8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D0E/8E714984A35E11E8B41A5878C4F9AE02/hnHJZ--Azj0S3OowSRuUb9cGh8A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:20:a8:3c:b2:1f:27:80:0d:41:70:85:e4:02:09:78:87:57:
54:f6:c8:4a:77:fc:07:7d:3a:04:38:2c:8c:11:70:37:50:cf:
0f:7f:c8:6f:d3:e6:5d:e9:dc:37:42:50:51:c4:de:04:cd:6a:
d1:45:82:e7:3c:22:2b:c2:d9:03:34:51:45:12:2f:90:6c:50:
dc:3b:ce:1b:03:ad:1f:df:fb:13:17:f8:89:51:04:41:fd:aa:
fa:45:57:25:c9:a9:c0:c9:ca:30:60:7e:6e:73:8e:31:91:af:
f9:d5:ec:46:58:10:47:30:5e:bd:e2:62:a9:91:b2:47:e5:07:
b9:45:46:2e:e2:ba:99:0e:35:61:47:7d:56:13:08:28:64:89:
f6:28:d2:27:33:37:45:49:d6:25:30:4d:4e:f5:8c:76:79:e1:
e3:cf:de:77:52:90:06:60:f4:51:8a:b0:bc:a9:f3:ab:a9:a6:
0a:04:ac:83:74:46:c2:eb:92:a7:92:83:ed:4d:db:e6:bb:23:
bb:29:fe:a1:06:cc:c7:b6:ee:df:8f:5c:2c:86:2a:fc:f3:59:
22:34:91:45:3e:9a:bf:ef:a7:b3:07:77:1a:a3:1d:2e:4c:c3:
f2:db:75:04:b3:ab:71:3a:51:88:88:bb:a2:dd:ca:69:d5:9b:
61:a3:21:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:08 2025 by rpki-client