Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
File: hctAGQp33J5olNhX9zu3qQ4JdOQ.mft (raw, json)
Hash identifier: mGEE+Q7rMGvdTdH1hqPk106Qz8AYkJfYKLCUoz/6Aps=
Subject key identifier: 7C:1C:3D:B3:5C:55:60:A0:61:E2:33:EB:25:5B:C3:8E:9E:9D:3B:CA
Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Certificate serial: 0534
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
Manifest number: 052A
Signing time: Thu 30 Jan 2025 23:34:14 +0000
Manifest this update: Thu 30 Jan 2025 23:34:13 +0000
Manifest next update: Thu 06 Feb 2025 23:34:13 +0000
Files and hashes: 1: hctAGQp33J5olNhX9zu3qQ4JdOQ.crl (hash: +igV6vWyjTF1+RNxkcUrmJ6mJ4NfhOpjBXz9QOq6xYs=)
2: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (hash: uFNNtsVKGrVOfxCqtFLk0MfQv5FVtYeu4lj2O4PA2Ig=)
3: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (hash: Dqt0GvAw9X9y8Ef/O7ERED07Rd+HbqI7uD9ujxO75Dg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Validity
Not Before: Jan 30 23:34:13 2025 GMT
Not After : Feb 6 23:34:13 2025 GMT
Subject: CN=679c0c76-92c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0f:aa:6c:56:09:9a:15:d6:84:dd:24:c4:2d:
42:e9:d1:b0:08:f0:3c:ff:d6:95:e1:79:6b:00:6d:
cc:f9:fa:87:57:28:f6:87:22:95:25:f2:01:30:8e:
2b:8b:c6:6b:84:ae:9b:1b:27:db:cc:e2:6e:fe:0c:
42:ae:00:08:e3:fa:ba:4b:0c:7f:0b:4e:3a:92:42:
31:3e:d0:1e:3c:da:86:4d:c3:c2:e7:7e:63:25:7d:
c5:77:b4:63:ad:42:61:53:1f:d6:53:a0:18:0d:1c:
5f:35:cb:ba:cd:9d:6f:19:52:06:01:93:9b:d6:37:
84:a8:1c:4e:5d:d9:94:9f:78:b7:a9:d7:fe:da:2c:
80:b0:6f:05:5d:8b:49:ef:dd:f2:7e:b5:4d:e5:d0:
28:ba:d2:41:ae:9e:1c:8e:8a:82:b7:fb:15:37:4c:
85:b9:99:fa:4a:6d:13:d5:34:49:b8:45:11:b9:52:
ac:46:94:36:1b:b8:f6:3e:7f:41:3c:34:14:ad:9a:
08:62:3c:70:1e:39:ad:bb:b0:7b:14:d3:18:d4:f1:
1f:dd:98:6f:bd:8a:73:9b:d3:60:47:3f:5f:cd:ce:
7c:69:87:09:5c:9b:97:33:51:90:df:ba:88:58:4b:
f2:d9:01:dc:00:e0:50:5f:ca:97:36:12:5c:04:68:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:3D:B3:5C:55:60:A0:61:E2:33:EB:25:5B:C3:8E:9E:9D:3B:CA
X509v3 Authority Key Identifier:
keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:75:dc:cf:01:a3:0c:00:87:02:7f:71:cc:bb:a2:19:e0:a2:
10:aa:65:d0:36:f8:ca:13:4b:05:48:c9:08:12:b1:ad:c2:50:
e4:e3:5a:8c:49:0c:42:5c:6d:bf:0a:60:d8:9a:e5:58:d0:dc:
27:3a:a0:ff:ce:91:6d:75:f8:10:fe:a4:75:7b:f5:1f:37:9a:
88:47:31:b7:ce:3b:f6:e7:9a:5a:1e:2f:23:e9:61:fc:d9:92:
9f:64:fb:68:e7:d9:7f:a9:6f:72:84:f9:62:e9:03:b7:87:b8:
ac:99:9e:99:33:f7:7d:9c:83:03:ce:6f:d6:d8:6d:06:2d:0d:
6c:de:b2:ef:64:7f:fa:33:ba:4f:c4:df:82:e3:7d:0d:96:a9:
03:8a:7f:90:b2:97:07:ff:20:92:18:eb:36:7e:f2:b3:0e:68:
95:bd:28:c7:db:cb:7c:83:a4:19:cb:b7:53:5a:66:71:76:00:
ba:7d:16:76:d1:2b:b7:bb:27:cb:3c:eb:47:d4:36:51:7f:ef:
a5:07:56:09:35:4f:d9:b4:63:a3:a8:a7:bc:28:ca:41:19:6f:
cf:1e:5c:bd:36:91:b2:be:66:1e:41:e0:08:e5:da:c6:ee:6c:
ee:d0:56:10:9b:73:8e:cd:28:98:b1:b4:1a:34:1e:6b:b6:64:
69:39:72:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:42 2025 by rpki-client