Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
File: HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json)
Hash identifier: xRXhuoRisqEyujkUiAtbZt8wVnkeyFXxjZXhvIgm1ic=
Subject key identifier: E1:2E:52:53:05:DA:B1:5C:DB:F1:24:68:24:89:73:7C:A8:12:58:16
Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
Certificate issuer: /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
Manifest number: 06D9
Signing time: Thu 30 Jan 2025 22:55:45 +0000
Manifest this update: Thu 30 Jan 2025 22:55:44 +0000
Manifest next update: Thu 06 Feb 2025 22:55:44 +0000
Files and hashes: 1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: 4sEwDdCliriB2a/yx70X1JK04lgMiZOKdmx2wg7Ed3k=)
2: D4163D4A884211EEB8B05013C4F9AE02.roa (hash: ZOu32o6P9r0jbCvbJk7rc+xFvyLi86thbWiSe0JW1Io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Validity
Not Before: Jan 30 22:55:44 2025 GMT
Not After : Feb 6 22:55:44 2025 GMT
Subject: CN=679c0370-e185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:31:5b:82:66:61:ea:a2:a0:c2:c2:82:a5:
52:e7:8d:e3:a7:80:0b:d0:73:f6:4a:67:86:16:b6:
60:4f:70:98:70:b4:21:cf:f4:8c:76:17:6f:3b:cd:
15:5c:af:74:3f:93:42:a9:46:af:b2:04:ad:8a:36:
28:90:e7:4e:1d:e8:05:ab:0d:83:0e:c5:2d:75:09:
52:2c:6d:79:2d:66:d5:fc:db:dc:6e:bb:6b:3f:0c:
43:3f:f9:58:8c:7e:3e:23:ab:82:62:e2:38:51:35:
09:a3:3c:86:e3:47:6d:2d:67:d6:20:32:77:01:73:
9e:6d:ba:c3:fe:a7:f5:fb:1c:2b:ed:f2:07:0c:8a:
d4:e3:3d:df:db:55:2b:17:96:18:0a:f1:54:95:1c:
38:ed:fd:d8:d5:70:fd:f3:07:9e:d4:ea:32:8e:75:
84:c8:79:35:a0:52:9c:cb:a1:02:6d:41:2a:0a:21:
00:d4:e2:1d:2e:e6:53:b8:56:5f:40:84:14:1b:38:
93:34:14:1c:22:4f:8b:29:80:06:e5:47:19:ed:ef:
0a:15:a4:e5:94:d2:8f:3a:51:9c:6b:d6:4e:3e:48:
f4:6b:b0:ae:bd:af:14:45:ad:db:46:8f:64:52:2a:
8f:e3:c5:67:e4:d4:50:86:0f:0c:34:90:98:b8:37:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2E:52:53:05:DA:B1:5C:DB:F1:24:68:24:89:73:7C:A8:12:58:16
X509v3 Authority Key Identifier:
keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:a0:02:7d:8b:57:0b:bc:1d:3c:ba:68:f4:9e:a1:5f:89:38:
e4:3d:1c:74:7b:62:eb:11:72:dd:2e:19:b3:88:89:8f:5f:c9:
70:bd:37:31:a2:5f:df:a3:d0:65:19:b2:67:ae:80:b4:86:ff:
19:ac:9d:f2:47:9e:8f:a8:2e:4f:ab:4a:b7:0f:f1:d4:3d:d8:
bd:b3:82:2c:c3:99:e4:48:de:66:c8:a7:f4:b3:d9:d1:42:43:
66:40:30:ba:e2:6b:0a:d0:4b:64:a9:05:20:50:61:0a:ec:bf:
ce:d5:9a:ea:a2:f3:1d:8b:76:41:24:ab:01:70:fb:d2:b2:53:
b7:34:a7:d3:e5:18:55:7a:7b:e2:28:08:02:27:e7:af:c7:a5:
9a:be:e1:7e:aa:9b:00:95:a6:b2:54:e9:71:61:01:a6:e2:9f:
c0:bf:50:ab:7e:0a:9f:a5:3e:3a:d5:e2:a6:ec:76:e7:5b:a5:
9a:c5:20:7d:dc:11:a8:b7:d3:76:fd:d0:96:1f:11:69:d1:e9:
d5:b4:14:04:3c:e4:8a:60:cf:81:16:21:74:e2:a9:a9:3e:8c:
cd:47:34:0f:bc:f4:f7:4d:34:c9:b7:ee:bb:1c:be:02:21:84:
36:a3:21:dc:ee:c1:f5:b2:d0:71:91:ee:e0:16:6f:57:fd:ea:
0d:7b:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:47:54 2025 by rpki-client