Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json)
Hash identifier: NjKUhd4G5PAhnA/8GH3uoRzT3J9Nhmr1H6wXmIJGvV4=
Subject key identifier: 4A:BD:A8:66:32:1B:C2:00:F5:F5:53:F3:FF:76:10:CE:1F:6E:B0:50
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
Manifest number: 22
Signing time: Fri 31 Jan 2025 07:00:01 +0000
Manifest this update: Fri 31 Jan 2025 07:00:00 +0000
Manifest next update: Fri 07 Feb 2025 07:00:00 +0000
Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: 7SIAkBiRuxCX9C3zzVUMgizsoPb0K7mPDDWnLJqsYwM=)
2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: GBnxkeFd5kF/YBnopk97FZtTVwQ6CFwNKcvPbBcM+Z4=)
3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: MaCtkavFP9h6cbzbI+/48yQalN3EQ9/HSWusPsbFrP0=)
4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: 8ewBwE8XstXeeqmSvgrbIwTd2CEtwyCXsNRMX6ARDE8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Validity
Not Before: Jan 31 07:00:00 2025 GMT
Not After : Feb 7 07:00:00 2025 GMT
Subject: CN=679c74f0-7db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:25:d7:c4:32:fc:a1:12:cd:bf:00:ba:ef:03:
f2:a1:a8:34:c7:e3:da:31:13:85:57:5e:23:c3:74:
1a:1e:eb:b5:6c:9b:cf:0a:3b:14:f5:0f:59:d3:a6:
91:de:89:8e:04:25:07:6b:e2:4e:09:53:cd:1d:e6:
6c:3d:86:99:39:92:ad:1a:6f:dd:67:7e:a3:7f:f4:
56:3f:b6:47:c1:a6:7b:63:fe:41:29:37:f0:49:46:
16:d6:d5:a3:1f:61:a7:87:68:f1:4a:3c:79:a5:e8:
3d:19:3a:5c:e2:a2:37:4b:0d:e9:16:37:f0:56:65:
59:34:a4:2e:3f:fa:ab:06:ab:f7:ad:25:97:55:86:
e1:1f:62:8b:c1:ae:1b:36:2a:0c:24:5d:9e:95:f0:
3a:09:fb:c0:89:3d:9c:0a:37:80:71:17:27:0e:66:
88:e7:27:c1:df:bc:de:ed:ca:0c:38:66:6e:e7:73:
f7:30:a5:63:2e:4a:9f:08:22:76:7e:c5:d4:a8:16:
e5:28:45:32:0c:f1:dd:03:a7:97:40:98:86:94:5a:
dd:a7:8a:68:26:e8:c8:c5:7c:bd:68:21:20:2e:b2:
49:6b:72:58:a6:4f:f0:cc:23:42:88:67:ce:e3:73:
ac:dc:a9:11:62:19:3d:c7:dc:39:54:2e:58:2a:1c:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:A8:66:32:1B:C2:00:F5:F5:53:F3:FF:76:10:CE:1F:6E:B0:50
X509v3 Authority Key Identifier:
keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:00:c8:43:00:e8:3e:1a:aa:18:8c:94:55:3d:9c:a3:e6:f2:
24:86:81:dd:f1:e2:02:3f:c2:49:dc:d2:d6:cc:52:f0:4c:07:
ba:37:ae:b5:e2:ef:1c:77:1c:96:60:77:88:9a:a7:83:54:23:
cf:a3:56:45:78:4d:1f:2b:6a:fe:3f:8a:bd:b8:d4:1d:02:ed:
3d:3d:9b:4f:f2:6b:3f:c3:3b:69:7a:17:a3:0d:42:39:12:ef:
63:6a:b8:33:14:5f:1d:68:31:9a:13:33:2d:6a:d4:a8:cb:fb:
8c:48:b1:47:5c:ef:8f:e8:3c:17:e6:6f:60:72:fe:28:62:5d:
6e:29:8e:60:90:61:4d:6d:33:fa:aa:42:33:1d:22:97:4e:46:
9f:55:83:2f:f3:8b:c2:b8:30:40:b1:98:b6:83:df:d5:3c:4e:
1a:38:8e:a9:74:33:02:e4:68:58:8d:cc:4f:cb:2a:7e:a3:8a:
87:bf:17:3e:f0:c7:84:a1:c0:d1:1a:3f:43:56:62:a8:4e:a3:
a8:1c:eb:64:1f:d0:ac:9e:b3:4c:7e:9d:45:8b:cb:ff:1e:c5:
e7:8e:bd:92:89:7d:31:5a:f0:9d:be:9e:2f:5b:77:45:63:0b:
e1:d2:49:17:ce:fe:04:f7:c1:c6:b5:47:8d:ab:61:fc:b2:72:
f6:d7:e9:d6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
ODJFRjExMC8GA1UEBRMoODcxOTdGRDU0NkRDMzE1MjMxMTFERDkzOTBCMUJBM0Yz
RDcwMjY1NjAeFw0yNTAxMzEwNzAwMDBaFw0yNTAyMDcwNzAwMDBaMBgxFjAUBgNV
BAMTDTY3OWM3NGYwLTdkYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDtJdfEMvyhEs2/ALrvA/KhqDTH49oxE4VXXiPDdBoe67Vsm88KOxT1D1nTppHe
iY4EJQdr4k4JU80d5mw9hpk5kq0ab91nfqN/9FY/tkfBpntj/kEpN/BJRhbW1aMf
YaeHaPFKPHml6D0ZOlziojdLDekWN/BWZVk0pC4/+qsGq/etJZdVhuEfYovBrhs2
KgwkXZ6V8DoJ+8CJPZwKN4BxFycOZojnJ8HfvN7tygw4Zm7nc/cwpWMuSp8IInZ+
xdSoFuUoRTIM8d0Dp5dAmIaUWt2nimgm6MjFfL1oISAusklrclimT/DMI0KIZ87j
c6zcqRFiGT3H3DlULlgqHJknAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSr2oZjIb
wgD19VPz/3YQzh9usFAwHwYDVR0jBBgwFoAUhxl/1UbcMVIxEd2TkLG6Pz1wJlYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MkVGL0ZDNjUwQjcyQjcx
RDExRUY4OTgyQzQwQ0M0RjlBRTAyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0ps
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaHhsXzFVYmNNVkl4RWQyVGtMRzZQejF3SmxZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4
MkVGL0ZDNjUwQjcyQjcxRDExRUY4OTgyQzQwQ0M0RjlBRTAyL2h4bF8xVWJjTVZJ
eEVkMlRrTEc2UHoxd0psWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHkAyEMA6D4aqhiMlFU9nKPm8iSGgd3x4gI/wknc0tbMUvBMB7o3rrXi
7xx3HJZgd4iap4NUI8+jVkV4TR8rav4/ir241B0C7T09m0/yaz/DO2l6F6MNQjkS
72NquDMUXx1oMZoTMy1q1KjL+4xIsUdc74/oPBfmb2By/ihiXW4pjmCQYU1tM/qq
QjMdIpdORp9Vgy/zi8K4MECxmLaD39U8Tho4jql0MwLkaFiNzE/LKn6jioe/Fz7w
x4ShwNEaP0NWYqhOo6gc62Qf0Kyes0x+nUWLy/8exeeOvZKJfTFa8J2+ni9bd0Vj
C+HSSRfO/gT3wca1R42rYfyycvbX6dY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:39 2025 by rpki-client