Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier: hJ0nfMf+vDTc6o6C/R8f7UVCg3vwEaJcRSHwjTkIPuI=
Subject key identifier: 4C:5E:95:CB:14:C2:80:30:C8:AD:64:6D:9E:BB:E0:48:72:85:05:3C
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial: 0BF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number: 0BE8
Signing time: Fri 31 Jan 2025 18:37:23 +0000
Manifest this update: Fri 31 Jan 2025 18:37:23 +0000
Manifest next update: Fri 07 Feb 2025 18:37:23 +0000
Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: zaj+RnZd5l8LVlvZGbyoxI1O+KkCvhuqMuFpfF/fkm8=)
2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: tMpcaYfBD1iobeLdQwhWt6/SJfz2AnFABrMU1WC/vqA=)
3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: kiKJ+nah+NBAeLG9hlQHszkTVk53ALCt/csxQaC27/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Validity
Not Before: Jan 31 18:37:23 2025 GMT
Not After : Feb 7 18:37:23 2025 GMT
Subject: CN=679d1863-8c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:32:f5:c4:73:19:ed:06:a9:42:2a:59:1b:
d9:b7:cf:9a:1a:55:86:7f:5e:85:93:9e:11:72:70:
32:fb:5c:bc:9c:e6:d9:6e:83:c3:21:c9:e7:ee:ae:
ab:07:0a:20:b1:3a:6c:37:2a:60:87:23:32:e9:38:
fc:01:85:d0:ed:71:73:e7:5e:3a:9e:42:5c:49:f2:
40:78:b4:af:b2:0b:03:01:dc:c0:dc:af:22:00:1c:
63:d9:b8:a5:ee:82:f5:d8:4f:d7:db:92:af:bf:ab:
35:0e:f3:2e:43:c8:c6:46:f1:11:34:2a:79:6d:15:
ed:95:5d:a8:18:de:33:d8:0c:3b:e7:d8:57:b4:00:
12:fa:4b:1e:9b:7a:07:c0:d0:9e:1b:af:30:c4:9c:
19:4d:2f:6a:c0:fe:03:91:7c:6d:62:40:68:0d:7e:
53:2b:79:1e:72:60:b3:17:24:92:a5:8a:73:aa:08:
a4:d6:a3:11:29:6b:8b:87:4c:2b:7f:a2:e4:99:77:
fc:e7:e7:a9:87:8a:3d:9f:da:37:d5:a6:64:e7:9c:
10:35:9f:af:00:f0:a6:4b:aa:58:37:0e:9d:ec:f9:
21:ba:5f:5e:ba:ee:31:da:13:e3:e8:80:a4:b3:32:
01:10:bf:fe:60:38:88:99:4b:80:39:48:41:25:61:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:95:CB:14:C2:80:30:C8:AD:64:6D:9E:BB:E0:48:72:85:05:3C
X509v3 Authority Key Identifier:
keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:71:62:d5:e9:97:23:69:d8:77:ba:46:e5:ee:63:f7:02:80:
b3:78:76:c3:90:1b:06:e0:48:5d:04:30:87:42:d5:fb:1e:de:
2c:44:96:89:bf:16:46:d1:7d:a1:6b:21:16:6b:8b:cf:5f:29:
39:68:b4:c0:01:5d:5b:65:5e:85:17:4a:21:31:19:b8:4e:11:
85:dd:89:a0:90:23:ed:54:f0:98:58:53:5e:5c:04:6a:79:a9:
8d:91:c2:df:d8:b9:74:1b:9f:7b:84:66:a5:b5:aa:64:8f:2a:
fc:76:0a:ee:aa:89:60:f6:59:73:f3:4f:ed:5d:50:49:05:30:
44:6f:58:a8:cd:b8:1a:93:32:27:22:9c:4c:8e:94:80:3e:8c:
e2:b0:de:68:d2:30:2f:00:b1:c0:b4:64:8f:13:3d:f9:a7:6e:
71:88:d1:56:53:4b:85:87:25:db:21:46:39:a0:b5:64:e5:80:
00:c9:31:3d:71:20:5e:89:e7:9c:cd:f0:64:94:eb:ff:e8:aa:
33:a4:12:19:21:c3:57:0a:29:40:f2:28:04:0b:e6:32:9c:81:
87:69:14:06:38:b2:c0:b7:00:cf:e9:23:5b:c3:7d:fd:0b:ac:
2e:f0:c6:e2:35:0b:a7:3f:16:92:d8:df:38:69:d6:c2:c0:70:
5e:94:3f:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJGMzMxMTAvBgNVBAUTKDFGOUEyMDI4OUNFOTMxNkU2NUIzREI3MjRFOEM3MzYw
NkM4Rjg2NEIwHhcNMjUwMTMxMTgzNzIzWhcNMjUwMjA3MTgzNzIzWjAYMRYwFAYD
VQQDEw02NzlkMTg2My04YzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxPYy9cRzGe0GqUIqWRvZt8+aGlWGf16Fk54RcnAy+1y8nObZboPDIcnn7q6r
BwogsTpsNypghyMy6Tj8AYXQ7XFz5146nkJcSfJAeLSvsgsDAdzA3K8iABxj2bil
7oL12E/X25Kvv6s1DvMuQ8jGRvERNCp5bRXtlV2oGN4z2Aw759hXtAAS+ksem3oH
wNCeG68wxJwZTS9qwP4DkXxtYkBoDX5TK3kecmCzFySSpYpzqgik1qMRKWuLh0wr
f6LkmXf85+eph4o9n9o31aZk55wQNZ+vAPCmS6pYNw6d7Pkhul9euu4x2hPj6ICk
szIBEL/+YDiImUuAOUhBJWGZzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExelcsU
woAwyK1kbZ674EhyhQU8MB8GA1UdIwQYMBaAFB+aICic6TFuZbPbck6Mc2Bsj4ZL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYzMy80NjA2NjFEQzBC
ODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1XNWxzOXR5VG94ellHeVBo
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g1b2dLSnpwTVc1bHM5dHlUb3h6WUd5UGhrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkYzMy80NjA2NjFEQzBCODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1X
NWxzOXR5VG94ellHeVBoa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4cWLV6Zcjadh3ukbl7mP3AoCzeHbDkBsG4EhdBDCHQtX7Ht4sRJaJ
vxZG0X2hayEWa4vPXyk5aLTAAV1bZV6FF0ohMRm4ThGF3YmgkCPtVPCYWFNeXARq
eamNkcLf2Ll0G597hGaltapkjyr8dgruqolg9llz80/tXVBJBTBEb1iozbgakzIn
IpxMjpSAPozisN5o0jAvALHAtGSPEz35p25xiNFWU0uFhyXbIUY5oLVk5YAAyTE9
cSBeieeczfBklOv/6KozpBIZIcNXCilA8igEC+YynIGHaRQGOLLAtwDP6SNbw339
C6wu8MbiNQunPxaS2N84adbCwHBelD9O
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:26:22 2025 by rpki-client