Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json)
Hash identifier: VzmglKNmFxYeVwVUTsHM85gvFpeItRRHMbEN8dPe57M=
Subject key identifier: 43:C8:C7:3B:B7:EE:BB:E8:D1:A3:26:CA:6C:BC:EA:10:CE:77:83:68
Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F
Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
Manifest number: 015A
Signing time: Fri 31 Jan 2025 03:23:58 +0000
Manifest this update: Fri 31 Jan 2025 03:23:57 +0000
Manifest next update: Fri 07 Feb 2025 03:23:57 +0000
Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: YBemwTsBYGTYL7+u3uq4yCMEOc/XSuJBk5OO3+bPdQ4=)
2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: k8fn8kaAVqX+FyPeWprQ1+C6X5Mp6iWOh3NubB8x45A=)
3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: 63Cg8UWmGVPjQtQwAhVDY7/yUPc1L0LYA1nO69mjsoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
Validity
Not Before: Jan 31 03:23:57 2025 GMT
Not After : Feb 7 03:23:57 2025 GMT
Subject: CN=679c424d-0b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e0:19:6a:e3:80:cf:85:c3:42:98:60:74:83:
7a:7f:63:48:ba:e5:90:c9:d4:51:6e:79:2d:27:1b:
25:59:01:96:7b:10:d3:ca:97:74:51:e1:97:73:6d:
d1:06:b9:02:bc:07:a0:9c:b2:1f:27:0c:a0:b7:9b:
66:21:be:99:5b:de:fa:80:a5:0e:36:eb:ca:5f:2f:
e9:a1:bf:b7:8b:cd:f1:d3:2d:ac:6b:69:db:e4:06:
99:5a:2a:f4:84:c7:e7:cb:13:39:de:17:c4:20:2f:
67:2a:5c:28:bc:83:2e:10:98:6e:64:fd:6c:1f:91:
cd:d2:f7:97:c0:31:f4:a5:cd:7c:19:c5:d3:81:b8:
0b:04:57:f3:74:0e:ee:ca:2a:7c:73:ca:0e:30:f9:
7d:37:1f:12:38:c1:c7:b8:34:da:2a:24:cc:2f:e9:
a7:0e:bc:ac:f3:0c:25:73:f3:03:43:48:85:c2:47:
52:06:96:68:5d:e8:fb:60:be:e0:eb:83:12:b0:a7:
a6:a6:c3:b5:21:f2:04:7d:05:29:e9:d5:5e:c3:f4:
29:c8:43:e9:30:c7:43:55:ab:9b:7d:1b:66:d4:2e:
dd:c6:c8:6b:61:c9:4b:9e:1a:55:c7:61:01:51:70:
d1:a9:ba:f6:7f:98:33:61:ca:7e:6b:a2:4d:7d:b2:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:C7:3B:B7:EE:BB:E8:D1:A3:26:CA:6C:BC:EA:10:CE:77:83:68
X509v3 Authority Key Identifier:
keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:f8:f0:a8:9c:d7:fb:33:49:28:a1:d7:83:f2:26:74:9a:01:
a1:42:70:43:0a:7f:d5:45:2f:36:30:e9:50:35:19:dd:d3:d8:
93:f1:3a:92:61:6c:21:76:69:bd:2b:6c:bb:d7:64:6a:c9:b0:
7f:b7:33:00:5e:1b:ec:16:d6:ed:e6:39:1a:9c:25:21:24:4c:
bc:8d:a2:0a:4c:e7:c7:eb:d1:f9:0b:37:99:3b:48:e2:4c:65:
0d:63:5b:fa:f9:0e:a6:e1:1f:4b:07:63:a4:ac:2b:34:14:19:
87:e9:95:f5:9b:46:67:71:7f:48:7a:cc:28:b2:65:1e:10:c3:
a6:a9:90:4c:34:1e:5f:c6:1b:61:c0:07:ef:45:65:0c:ab:aa:
2d:4a:b9:1d:ed:5e:02:94:f5:45:74:c4:f8:bd:ab:2b:f7:2a:
b0:cf:28:70:21:7e:42:40:73:37:78:ba:38:47:f1:d2:d9:be:
07:c4:d5:d6:12:d6:0a:7e:b5:38:36:1e:db:bb:45:b5:bd:23:
91:6c:b9:0a:d5:5f:33:c9:55:b9:05:aa:c3:8e:90:39:d0:d6:
6e:ff:13:d3:6b:b6:00:07:b5:47:77:9c:26:51:56:7b:a5:c5:
09:f1:cc:c0:6a:d7:44:96:3a:f2:c1:82:fa:06:cf:56:aa:f8:
c8:da:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:29 2025 by rpki-client