Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier: 3rutw6RhH1Y4YCrX26eFH3DP1Z1bxn8q2uVbIGL3Crc=
Subject key identifier: BF:19:F1:02:04:32:CF:0C:C7:AE:BE:78:E7:85:F6:8D:8A:E4:10:E5
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number: 0110
Signing time: Fri 31 Jan 2025 04:07:48 +0000
Manifest this update: Fri 31 Jan 2025 04:07:48 +0000
Manifest next update: Fri 07 Feb 2025 04:07:48 +0000
Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: y1mGR8iOzOzCQ/U+RJ+25KpRIiaUN0MoYRTumNcuUoA=)
2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: ZdXXk2QhrqkUIf+QRKJgnlgGO0IbkAJmbzjOlXTQvus=)
3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: cx7TKtd7HmL3zJOKMMAUN+RPjHatKrphbZ1mWSuR5eI=)
4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: jLjyxuzoihO6U4uZj4lE+4ZXFm13Tj1cLNw88yjt4fk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Validity
Not Before: Jan 31 04:07:48 2025 GMT
Not After : Feb 7 04:07:48 2025 GMT
Subject: CN=679c4c94-7417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:72:e8:f1:34:cc:01:07:52:8f:35:37:06:
68:d0:98:8d:38:d4:44:36:58:a0:a9:2c:e7:c6:36:
bf:4a:69:e6:c7:90:d4:3e:68:da:94:27:2d:23:27:
24:b7:91:8d:06:c9:1a:87:c0:38:01:69:7b:08:90:
39:fd:fc:c7:bd:fd:d6:33:04:10:b1:90:e9:6d:5e:
4b:3a:b1:d2:8a:63:cb:91:a6:24:bf:44:56:c8:07:
8f:3d:b3:9a:12:bf:de:a9:0b:c1:22:84:eb:b6:1a:
38:ea:e4:78:46:24:1c:c9:50:d1:63:c6:c7:37:13:
b7:1f:b8:dd:27:14:75:f7:0e:67:f4:52:8c:88:b0:
f0:f0:01:c7:1b:10:0a:2f:c9:2b:21:86:26:a1:66:
fc:34:9b:c9:57:a3:e7:90:21:41:89:16:06:7b:53:
d5:4a:4e:c3:4e:b8:46:97:63:88:c5:25:18:0d:10:
fd:60:0d:26:0c:dd:db:3f:98:c6:b8:51:fc:ea:38:
74:54:93:b2:c1:86:2d:9d:d1:ab:d5:7b:8a:ed:9f:
d5:54:3a:35:c4:cc:0d:d0:08:a5:1c:87:95:97:38:
bb:35:c4:00:16:a7:c9:6d:cd:8e:74:70:99:d8:2a:
b8:cc:db:f6:ec:26:6b:8d:4e:8b:b9:08:3b:40:08:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:19:F1:02:04:32:CF:0C:C7:AE:BE:78:E7:85:F6:8D:8A:E4:10:E5
X509v3 Authority Key Identifier:
keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:48:5b:e3:19:60:48:df:49:b7:7f:73:78:20:a8:b0:a0:83:
5e:43:91:d2:92:f6:b9:a8:f4:f8:8c:13:0a:df:3b:43:f0:d0:
8a:d5:54:61:20:33:ce:a1:f4:6b:ff:91:7e:73:15:ca:f0:52:
0a:5c:ab:a5:22:08:71:e2:f9:9c:81:b7:ad:75:bd:67:3a:78:
fb:e9:67:e3:32:aa:c0:f6:90:2b:dc:8e:5d:c5:aa:e8:eb:25:
b2:44:a0:54:fd:2a:40:7b:4c:e6:05:ca:db:af:2e:3e:6c:e0:
5b:7a:ff:5c:05:8b:73:71:a6:90:d5:b3:81:12:73:59:f4:54:
2e:a0:cc:3f:82:d2:9c:6d:b0:48:34:34:9b:2b:42:c2:b2:4c:
67:f0:5b:9d:ea:95:d9:ac:85:50:4b:b0:a0:d8:f5:4f:7b:5e:
e0:6f:ba:03:ed:d8:ea:8a:69:3b:e9:90:7d:2e:53:6b:d7:d9:
cb:b3:66:78:7d:e0:bc:ba:bc:76:51:56:32:3c:37:55:a0:bd:
32:cc:a6:e8:88:37:a4:5d:7b:44:c7:46:3b:cb:95:92:f3:66:
2b:54:3e:0a:ae:62:77:9a:f4:81:50:57:5f:6c:f9:0b:94:99:
15:ba:12:f3:a3:ea:ff:fc:a6:fb:4f:1f:f8:f4:8b:24:cb:35:
2f:9d:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:18 2025 by rpki-client