Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json)
Hash identifier: urpd3bcLCoIW8lrkuLtEpGDg8ow2hBOJ8BIUR7xKmTg=
Subject key identifier: 54:5A:67:FE:41:8D:37:69:FE:C8:D5:B9:DB:FA:62:39:E0:E8:B2:3B
Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Certificate serial: 032F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
Manifest number: 0323
Signing time: Fri 31 Jan 2025 01:13:29 +0000
Manifest this update: Fri 31 Jan 2025 01:13:28 +0000
Manifest next update: Fri 07 Feb 2025 01:13:28 +0000
Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: DUZJz4Ve9A8vjy5a1p6NAFDNF8ONdjhD6byX4uvKVSI=)
2: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: Y2n2BjZK7YcDbJf+OeJwUoZderld4t4C424W9hVCQCo=)
3: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: gSJIRhvkvsqzVWI/PIM9ZJldSrE3+tHguZhTA6U0IhA=)
4: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: E8TF17FZ+hElw8daIlNLJu6deo+xubevfbPk03QKuzM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Validity
Not Before: Jan 31 01:13:28 2025 GMT
Not After : Feb 7 01:13:28 2025 GMT
Subject: CN=679c23b8-a04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:d1:fa:d4:7a:43:01:3c:00:2a:c0:75:23:
df:83:33:59:36:06:e9:6e:2f:73:47:30:d2:70:92:
f0:21:2e:69:72:48:9f:27:48:33:62:41:af:37:f3:
a4:41:9e:bf:fa:51:37:f9:7b:aa:2d:13:06:50:c6:
10:21:de:ec:6d:81:b3:30:2e:80:d0:b6:85:03:8f:
b0:98:6d:75:e9:71:bd:75:33:d4:b4:fe:11:87:ef:
7c:5d:dc:a3:81:0a:bc:1e:53:c4:db:9d:d7:93:a1:
b9:34:a2:d9:13:61:33:ad:81:89:96:f8:59:50:09:
84:33:5f:76:0e:f7:4b:69:6c:04:8c:68:c5:53:ff:
ca:00:ab:41:ec:ca:0b:03:94:ed:95:3f:33:f1:27:
20:e2:25:9e:87:7d:2e:f0:d8:57:34:16:da:bc:05:
a4:73:cd:73:0b:8b:3a:f7:f4:f8:d2:2a:ec:0b:c6:
4c:43:55:ec:46:83:2a:3d:8f:df:3e:0a:1d:e5:36:
39:29:b0:56:82:fe:60:17:3b:95:3a:65:dd:3e:ee:
70:4e:bd:b8:de:17:96:25:d1:9c:4c:df:d5:02:53:
33:3d:16:04:a5:d5:4e:a9:e8:b9:de:6f:6f:26:de:
00:76:3b:01:81:41:21:c4:25:50:ac:a0:fe:f9:b7:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5A:67:FE:41:8D:37:69:FE:C8:D5:B9:DB:FA:62:39:E0:E8:B2:3B
X509v3 Authority Key Identifier:
keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:a4:4b:8e:33:c8:0a:4a:5f:d2:e9:1d:26:17:95:3f:9f:ea:
d1:ad:e1:1b:b5:62:e5:12:2e:86:c4:be:98:93:81:ac:e4:9c:
a2:e8:71:a7:9c:a8:de:93:ce:f7:86:6c:9c:aa:69:69:2c:70:
cb:06:a8:60:05:70:7d:59:e0:fa:75:ff:aa:d5:4c:23:4f:46:
21:f2:e7:98:b1:27:4f:2a:f9:2c:4e:05:15:e6:de:6e:e6:7c:
77:b4:cd:0e:9b:3b:8a:17:a3:de:ff:fb:82:41:c1:f5:2c:61:
aa:43:d5:be:b2:5e:eb:23:05:84:c1:75:7d:fb:9b:49:6d:ce:
77:3f:d2:3f:48:b4:0c:1e:36:91:99:1e:e4:66:57:cc:6d:17:
9b:60:2b:28:4e:98:48:9f:66:69:6e:f6:90:e2:b0:63:c1:ae:
0a:22:0a:03:de:0b:84:ed:6c:21:d7:f4:10:30:0a:95:ee:60:
11:3f:40:f2:d8:57:7d:a2:a8:3e:c9:f2:27:bf:f2:91:7d:ec:
ac:38:0f:5d:95:c8:8e:ce:63:a6:88:05:08:ad:42:c4:ae:9f:
99:8e:ac:5f:eb:00:a7:a5:9f:0c:8e:2e:2c:7e:a7:fe:44:d4:
fc:ca:8c:fb:67:a8:b5:ba:93:e2:be:3c:fc:bb:5e:69:71:cf:
95:d5:f6:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy
QkIyMDdBNkQwHhcNMjUwMTMxMDExMzI4WhcNMjUwMjA3MDExMzI4WjAYMRYwFAYD
VQQDEw02NzljMjNiOC1hMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA12/R+tR6QwE8ACrAdSPfgzNZNgbpbi9zRzDScJLwIS5pckifJ0gzYkGvN/Ok
QZ6/+lE3+XuqLRMGUMYQId7sbYGzMC6A0LaFA4+wmG116XG9dTPUtP4Rh+98Xdyj
gQq8HlPE253Xk6G5NKLZE2EzrYGJlvhZUAmEM192DvdLaWwEjGjFU//KAKtB7MoL
A5TtlT8z8Scg4iWeh30u8NhXNBbavAWkc81zC4s69/T40irsC8ZMQ1XsRoMqPY/f
Pgod5TY5KbBWgv5gFzuVOmXdPu5wTr243heWJdGcTN/VAlMzPRYEpdVOqei53m9v
Jt4AdjsBgUEhxCVQrKD++bfdRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRaZ/5B
jTdp/sjVudv6Yjng6LI7MB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy
RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl
bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0
VjBBOVQxMUZwVWNyc2dlbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCpEuOM8gKSl/S6R0mF5U/n+rRreEbtWLlEi6GxL6Yk4Gs5Jyi6HGn
nKjek873hmycqmlpLHDLBqhgBXB9WeD6df+q1UwjT0Yh8ueYsSdPKvksTgUV5t5u
5nx3tM0OmzuKF6Pe//uCQcH1LGGqQ9W+sl7rIwWEwXV9+5tJbc53P9I/SLQMHjaR
mR7kZlfMbRebYCsoTphIn2ZpbvaQ4rBjwa4KIgoD3guE7Wwh1/QQMAqV7mARP0Dy
2Fd9oqg+yfInv/KRfeysOA9dlciOzmOmiAUIrULErp+Zjqxf6wCnpZ8Mji4sfqf+
RNT8yoz7Z6i1upPivjz8u15pcc+V1fZ3
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:28 2025 by rpki-client