Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier: Oy+Quxfhd53BcxgT57RMgSpXYJRpQ8kY0U4DgnuVxQU=
Subject key identifier: B7:D6:93:8B:4B:03:BD:87:25:F6:ED:80:8F:83:8D:F0:52:21:89:6C
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number: 7A
Signing time: Fri 31 Jan 2025 06:06:27 +0000
Manifest this update: Fri 31 Jan 2025 06:06:26 +0000
Manifest next update: Fri 07 Feb 2025 06:06:26 +0000
Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: pD8Wmj3jlPlBP6M6Qodg6Qg5mi1vOeB9bfKELGc9Ph4=)
2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: jlXohEw0btRgU9kVspXT8+fcohZF13SEjwBaXsRZEVQ=)
3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: XyZFxo5dk/YKYCu8Vu1hnlg71wL2V/Va24kQXoHz5hE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Validity
Not Before: Jan 31 06:06:26 2025 GMT
Not After : Feb 7 06:06:26 2025 GMT
Subject: CN=679c6862-88e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:60:f2:0b:57:39:fb:8f:6b:7f:7e:a4:56:
b7:df:5c:c8:1e:d9:82:f0:f3:74:18:b2:5e:2f:6d:
7d:50:f6:7e:ec:8a:26:e2:51:e0:8b:a4:df:ec:d5:
07:00:5e:2d:ef:c7:24:eb:ae:57:99:29:e6:81:0b:
6c:97:0d:a3:6a:14:32:47:3a:af:6f:07:44:70:ff:
a9:9b:7d:5d:e9:72:64:33:db:3a:ea:76:c6:62:da:
00:c2:b2:44:1c:66:8f:e3:78:d9:8c:a0:a8:a3:68:
cd:f5:8f:68:05:10:9a:5f:96:a3:9e:0e:2f:e4:7e:
db:fc:5b:34:cf:27:8c:9e:95:e0:4c:58:30:e0:32:
54:f0:d2:93:38:3c:9f:f0:ca:07:a1:78:62:ad:4c:
85:67:2d:1c:b4:c0:fa:fa:b2:9b:2b:b9:43:22:23:
fc:ab:b1:cd:a6:50:94:34:c2:6b:36:95:37:74:44:
ab:bb:f8:49:70:2c:34:88:d5:34:74:b6:c6:5b:b2:
53:4f:70:45:85:de:72:ba:6e:98:6d:2c:11:aa:5e:
49:aa:8c:f8:1c:76:c3:80:11:d6:2c:6a:f1:55:e0:
eb:5a:57:c5:1f:b1:b8:11:4c:5f:e2:e7:57:db:7e:
2e:12:b0:4f:76:7f:50:ef:4d:8b:ca:a8:b7:b3:0d:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D6:93:8B:4B:03:BD:87:25:F6:ED:80:8F:83:8D:F0:52:21:89:6C
X509v3 Authority Key Identifier:
keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:01:35:b8:86:74:f8:86:a8:92:d7:4b:6d:a3:0f:82:13:3a:
2a:b7:97:aa:24:6a:63:d7:96:b6:b3:ec:77:00:8c:85:c4:1d:
9f:a2:2f:a0:88:59:c6:70:3b:12:fb:aa:83:df:f0:34:19:70:
42:d3:b7:74:ce:7c:bd:78:e6:3e:62:f1:13:36:d6:76:79:cf:
b9:05:66:9b:e5:fd:92:d9:96:e7:fa:e4:03:62:1c:2f:9a:81:
02:23:63:5e:7c:84:6f:3f:2b:cf:a0:6d:72:2f:50:17:ca:99:
f9:46:09:30:3c:1c:26:33:6c:09:07:c7:d6:33:d1:78:3a:f2:
58:1e:85:bc:b5:e7:a3:17:f2:98:a5:2f:1c:e7:61:ce:fb:04:
7f:07:82:7d:43:02:18:b2:8f:54:47:f7:41:8d:55:63:98:c9:
4c:01:1c:46:d0:d1:7f:03:15:4a:87:92:df:83:21:95:55:e7:
68:56:92:01:05:8c:16:5e:4d:a9:12:48:6b:3f:3f:2f:13:22:
45:e4:31:ef:0f:71:2f:cf:42:b4:e3:e3:9e:a6:b2:4a:45:53:
99:90:bc:19:a0:9b:c0:e4:fb:dc:01:37:10:de:8f:77:e2:a5:
5d:03:38:05:f4:56:d0:fc:95:e9:e6:b4:34:7d:c6:37:26:76:
9f:43:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:37 2025 by rpki-client