Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json)
Hash identifier: qL1Rl6O+g95Wjrt0trsPWMBgvYY3v8gQ4GGsGwmJF30=
Subject key identifier: 31:50:C7:68:82:99:25:5B:B0:A6:1A:91:09:C8:9F:08:C4:32:F7:89
Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
Certificate serial: 1651
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
Manifest number: 1648
Signing time: Fri 31 Jan 2025 16:42:56 +0000
Manifest this update: Fri 31 Jan 2025 16:42:55 +0000
Manifest next update: Fri 07 Feb 2025 16:42:55 +0000
Files and hashes: 1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: jHnvB0IWe9amYHOOBDDwBpZOYz2GVZQdDfLK22Kr3BI=)
2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: DwaSXkwadhXmFgNGjila+YsFoYHDPOwpBM4h3mtwuos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5713 (0x1651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
Validity
Not Before: Jan 31 16:42:55 2025 GMT
Not After : Feb 7 16:42:55 2025 GMT
Subject: CN=679cfd8f-ead0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:21:f0:66:20:9d:a9:eb:ad:c2:00:32:9d:
d5:8c:2e:47:52:8a:06:f5:51:aa:9f:b5:08:5a:cb:
11:51:dc:ea:d9:d3:96:cf:d3:d7:d2:98:86:e6:92:
5a:76:1a:01:18:78:dc:9f:c3:79:a0:8a:e3:6a:9e:
f2:c5:a4:fb:bd:07:bf:86:e5:00:b1:72:7c:23:4a:
38:c4:43:ef:77:d5:f0:0e:c6:ef:66:65:2e:de:40:
70:cb:d0:b9:e0:44:e5:20:01:90:da:06:33:27:91:
c3:77:30:7e:5a:13:39:7a:38:5d:36:98:d3:64:8b:
aa:d9:61:51:09:99:01:16:0d:31:9f:49:a5:fa:a8:
2a:bf:9f:e9:44:17:fa:ae:c5:3b:85:be:7e:21:61:
8b:09:94:15:05:49:47:e2:20:64:ed:f9:c4:ca:11:
36:77:31:0d:05:8b:45:21:fc:b1:49:a0:a6:ff:c4:
08:ed:d0:28:bf:ff:a0:5e:e3:62:7d:e2:56:98:8a:
86:06:dc:80:45:ca:26:e4:4d:07:cf:df:f5:d6:3a:
d1:17:09:c1:23:04:b6:92:32:da:aa:74:4a:4b:8e:
ed:86:d7:d2:3f:64:a1:35:3f:f3:23:82:5c:a9:4d:
28:71:70:36:ad:81:1e:e8:77:84:44:4c:1a:08:22:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:50:C7:68:82:99:25:5B:B0:A6:1A:91:09:C8:9F:08:C4:32:F7:89
X509v3 Authority Key Identifier:
keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:66:be:ec:cb:77:e3:ef:7c:8e:47:c3:00:33:e3:26:9a:35:
20:3d:41:7f:17:c6:30:15:80:0f:db:19:d4:2d:ce:0f:45:ab:
bb:37:b5:8e:7f:54:0e:f0:42:0e:7a:a6:03:46:50:36:30:b5:
0d:8b:b0:bc:e2:fe:86:ef:18:11:b6:78:03:f0:44:13:47:d0:
e0:03:df:ce:d5:6f:b8:c8:66:ef:5e:25:c4:eb:1f:cd:a4:64:
3d:32:2a:0b:83:d8:e4:4a:9b:07:cf:ea:39:97:90:43:de:fa:
ec:38:f2:ba:ae:ab:98:df:60:15:98:f3:e7:d7:d3:94:27:bc:
24:6c:88:b9:5e:a9:c3:78:de:a5:de:4c:1e:55:b4:80:3e:d3:
90:db:38:95:39:07:ea:d4:80:ee:a7:f0:8b:6f:5a:97:90:54:
60:50:bc:c7:9d:0f:98:08:d1:11:bb:b4:57:fc:f8:3f:95:3e:
67:85:d5:46:72:fb:4d:0c:6c:ab:32:81:46:dd:69:f7:9e:e6:
f2:8f:7c:60:87:b0:ca:b3:b6:b7:a6:7a:6f:d6:49:b6:55:74:
f0:b4:fb:a2:8d:c9:e5:a9:2d:53:56:56:4b:fe:8c:9e:82:96:
57:d7:d7:49:1b:00:66:02:56:32:5c:77:e0:26:98:10:3d:df:
e8:ba:21:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:59:06 2025 by rpki-client