Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
File: hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json)
Hash identifier: 31OYBN9rfiERM+ArOddyGFOO8qAMo/zIVWTA2IMnJkU=
Subject key identifier: EB:CC:8F:5C:BA:DC:75:71:FB:E4:C0:56:78:06:C8:44:C8:AA:EE:7C
Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34
Certificate issuer: /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
Manifest number: 66
Signing time: Fri 31 Jan 2025 06:02:22 +0000
Manifest this update: Fri 31 Jan 2025 06:02:22 +0000
Manifest next update: Fri 07 Feb 2025 06:02:22 +0000
Files and hashes: 1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: 8Mz4wdo7VbbAYNP+aHhYfdwLHkN2MTGKcq7FLun2pwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
Validity
Not Before: Jan 31 06:02:22 2025 GMT
Not After : Feb 7 06:02:22 2025 GMT
Subject: CN=679c676e-a123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:92:08:72:0a:71:5e:0b:be:fb:87:03:3b:
5d:3e:c8:4f:6a:7f:c8:1d:f7:3c:c3:5c:c4:18:aa:
28:05:f4:8c:fc:99:e4:b9:b7:9b:54:12:76:9d:63:
5d:68:de:a5:d7:76:be:60:ff:9f:80:a8:d9:21:63:
71:bb:57:19:9e:bf:1f:f4:ca:d1:63:06:6d:75:e7:
49:08:d7:de:dd:2a:51:6a:84:40:11:c3:3a:1e:ff:
3d:cd:fb:02:9f:55:6c:bc:e9:a6:9e:d2:d5:96:4d:
8e:10:9f:d0:af:24:d9:b2:c2:61:ec:cb:9e:27:99:
70:20:77:9a:9e:10:17:f5:13:63:70:19:3f:ae:a8:
2f:e7:8b:8d:74:47:ed:48:21:cf:53:21:2e:e8:ee:
67:44:21:4b:00:41:75:04:c5:47:3c:58:39:18:b4:
a7:ce:a6:ed:b1:43:85:56:98:3c:27:ce:d3:47:b1:
e9:7e:26:12:3e:03:86:22:7b:78:c6:19:c1:29:04:
fa:e1:eb:dd:dc:b8:b1:89:18:b0:1d:69:db:86:51:
a3:dd:f3:52:ff:ea:fb:e9:53:c4:8c:59:be:16:a0:
d2:dd:40:44:d2:52:c0:b5:02:dd:5f:43:5e:c0:56:
eb:47:c7:72:a7:40:d8:ce:5e:02:dd:98:01:37:33:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CC:8F:5C:BA:DC:75:71:FB:E4:C0:56:78:06:C8:44:C8:AA:EE:7C
X509v3 Authority Key Identifier:
keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f3:2c:08:73:37:95:2c:2c:87:83:4a:de:29:c0:7c:a6:0e:
bb:e5:99:57:a6:b9:f9:e8:79:34:25:cd:a4:85:f2:45:8f:21:
85:a6:91:cb:e5:4f:a6:02:46:a2:f2:25:ac:8a:c8:48:e4:10:
3d:d8:5a:0f:9c:c5:d0:bd:2d:9c:02:52:a2:da:c2:74:cd:02:
82:a8:dc:ad:42:b8:18:b3:93:1b:09:ba:9e:ca:37:8f:4e:df:
74:f4:26:01:26:b8:64:df:06:b3:c8:b9:ca:8e:99:40:c2:08:
c9:4b:d4:46:b2:15:ce:81:32:c3:60:9c:ee:d7:43:0e:ba:9b:
36:c5:20:79:6c:09:06:32:9c:54:41:2e:50:da:f0:9d:d1:84:
15:58:8e:50:49:7f:f5:ca:f2:86:f6:1b:90:83:d5:4b:15:ad:
2d:aa:c2:7d:59:1d:45:e9:23:99:26:c8:a0:de:52:27:c9:68:
a5:3a:bc:6f:15:2c:13:ad:7f:af:70:8d:20:25:ee:73:d7:c4:
d6:a3:0b:66:38:5f:6b:df:6e:be:72:7e:c0:f0:8d:ac:3e:5f:
91:c4:80:d8:d7:7a:e6:d6:4b:63:85:64:50:c5:54:a0:da:35:
50:30:1f:f1:6e:1a:d2:b8:b0:a1:54:3d:1b:34:f2:7b:61:c2:
12:17:79:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:14 2025 by rpki-client