Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json)
Hash identifier: E/TZX6O7K/usitmvBB7UZGhVkFjKm7ta2JXKBIZHVyU=
Subject key identifier: 75:14:10:71:B1:41:40:21:40:F0:E5:B3:15:03:4D:57:61:E3:0A:42
Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3
Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
Certificate serial: 0591
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
Manifest number: 058B
Signing time: Thu 30 Jan 2025 23:16:30 +0000
Manifest this update: Thu 30 Jan 2025 23:16:30 +0000
Manifest next update: Thu 06 Feb 2025 23:16:30 +0000
Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: j1VMUvbqb9lBp3+XftuQGPFg5XTGGIeQs2ka5CAopvg=)
2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: 4SABNLVP141mmTSS6gzli1B5PVXlz3wNBkczMbOULL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425 (0x591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
Validity
Not Before: Jan 30 23:16:30 2025 GMT
Not After : Feb 6 23:16:30 2025 GMT
Subject: CN=679c084e-9ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:50:74:90:05:bb:c4:8f:6f:4a:83:98:59:
9d:a4:63:d3:2e:0b:ab:ae:38:df:b8:3e:a9:b6:3f:
46:63:d9:93:ff:8f:b4:d6:1f:d1:f3:e9:cf:2a:d9:
ac:2d:bf:d6:ab:47:8d:4f:7d:0d:84:48:3f:30:fc:
57:d3:bb:00:51:07:39:70:71:a2:7c:cb:06:93:63:
75:21:0a:64:e1:9c:21:90:62:27:bf:e9:64:bd:b6:
00:28:e8:f5:28:0e:ca:b3:ca:66:90:1b:e4:4d:d8:
83:90:20:0f:fb:7e:36:66:d2:d9:0f:61:94:60:35:
a2:d0:24:80:50:44:82:b1:9f:07:a4:ac:7c:9e:42:
cc:a7:6b:35:d6:c9:44:dc:bc:fb:3d:a4:ed:5b:ee:
f0:99:e2:73:b8:5b:2e:b3:bb:85:93:3e:2d:ae:f8:
96:91:ef:f3:e1:bb:91:76:b3:36:03:08:57:8d:70:
49:4f:67:dc:17:64:a7:99:78:19:f5:64:3b:f1:b1:
47:52:82:ff:ed:5e:69:ef:f2:08:7e:8c:14:15:eb:
6a:fc:a3:53:f1:43:5e:e1:3c:a4:87:99:86:43:11:
45:ac:90:bf:ea:db:2c:ad:23:7b:33:65:d1:50:e1:
a6:c6:46:0a:92:f6:97:66:4d:0b:ca:27:ad:c9:c5:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:14:10:71:B1:41:40:21:40:F0:E5:B3:15:03:4D:57:61:E3:0A:42
X509v3 Authority Key Identifier:
keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:8a:62:53:a1:02:cf:ef:05:d5:af:80:ef:57:12:d8:b6:bd:
e9:f0:af:c0:aa:04:ea:7e:ec:be:32:21:de:1b:44:40:d3:70:
80:54:bf:53:b5:9e:88:91:58:4a:10:64:48:2f:40:3a:7b:70:
bc:7c:72:db:27:be:8a:02:81:4a:19:0d:d3:07:79:2c:ee:7d:
cb:9d:99:70:a0:87:9f:e4:2c:fb:38:a4:67:f0:bd:38:6d:d2:
f6:e9:a9:45:97:81:f6:56:87:ef:d4:8d:d2:d8:b5:b7:54:67:
0e:67:85:81:27:72:95:e0:8c:54:b1:46:4a:b2:ee:ee:30:93:
33:f3:a6:0b:60:00:be:cd:08:c1:af:28:2d:5a:d7:f4:2d:21:
32:2e:c2:da:a4:2c:ff:79:e4:5c:39:6f:ed:eb:b8:62:fc:03:
9b:19:ee:2e:01:22:e9:76:56:ef:71:ad:90:db:6a:32:7f:d2:
9c:70:be:63:a1:5c:78:a1:48:9c:b1:a9:61:94:2d:91:b3:51:
88:a8:bf:59:9e:a2:99:35:b9:e8:90:79:8e:b4:20:d6:f4:d6:
af:99:01:5b:bb:19:76:63:4c:07:9c:b8:e0:da:1c:4f:21:b2:
54:cd:33:0c:c4:9f:74:00:06:f5:57:b4:54:ae:84:38:18:21:
c6:35:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:37 2025 by rpki-client