Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json)
Hash identifier: 8P/kbQRHaE4ogsjYSvt17HvHHIbW3MEhCfmvx5CdZvM=
Subject key identifier: 38:56:2F:9B:0E:38:85:FB:4E:36:FA:B0:D2:9F:3D:20:D6:8B:6D:87
Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
Manifest number: 01BB
Signing time: Fri 31 Jan 2025 02:23:24 +0000
Manifest this update: Fri 31 Jan 2025 02:23:23 +0000
Manifest next update: Fri 07 Feb 2025 02:23:23 +0000
Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: FV6Fkp1fIPmeTW7gxDjTUUvjtabxZa6Ce6BhsGZS8gw=)
2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: AZy7/TxMpzRlcr6hksesm9lJQNr2Dwt8ilbyJ2QESrI=)
3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: 8uNU/3Og8Qb0Djb5B657ZCQSK+n3RVoZQHApiAni9qA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Validity
Not Before: Jan 31 02:23:23 2025 GMT
Not After : Feb 7 02:23:23 2025 GMT
Subject: CN=679c341b-5303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:97:0b:23:65:8b:ab:83:7f:a5:e7:7e:07:
7d:29:05:13:5b:79:24:ea:7f:af:6c:c9:7b:41:36:
27:00:31:d8:53:68:69:c3:a1:34:b7:53:87:4e:2e:
0c:77:6e:a6:33:cb:22:cc:ff:fa:9b:a4:11:bc:57:
d0:22:fe:be:e6:18:a2:74:5d:ac:53:72:2e:94:1c:
62:1f:07:61:92:54:bf:22:02:fa:18:b1:7a:3e:4c:
36:b3:9c:55:27:0e:ec:09:d5:bd:40:8b:8a:0d:32:
65:66:87:f4:42:ba:ac:4c:81:be:d4:a7:85:f5:03:
27:1b:78:20:cb:c8:c6:21:79:a5:07:cc:79:32:be:
5c:fc:52:8b:61:9b:ca:91:d9:93:7d:fc:8b:79:5e:
1a:71:91:5c:d6:a2:0c:76:c4:19:e9:96:6c:a0:e5:
60:64:28:31:22:10:89:a4:06:62:bc:20:10:80:6e:
0f:85:ac:fb:d7:c1:89:18:78:a6:8e:f7:8d:74:8f:
b1:e5:23:14:c3:61:88:a4:d7:5d:26:61:f9:07:f7:
9f:4b:4a:b4:c7:04:d1:10:d2:6d:0c:17:e1:13:64:
03:5b:cf:c2:d1:a9:c8:14:d5:44:19:0c:3b:c3:78:
70:db:2c:3e:bb:40:b6:b8:04:11:55:d9:7e:71:f1:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:2F:9B:0E:38:85:FB:4E:36:FA:B0:D2:9F:3D:20:D6:8B:6D:87
X509v3 Authority Key Identifier:
keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:c0:68:e6:a8:d6:1b:52:d9:c9:45:33:e4:4d:ae:08:fd:9c:
4f:47:ba:c0:51:37:28:79:81:46:b2:2d:6e:ab:83:03:31:ca:
a3:b5:8a:da:1a:f7:9c:0a:50:a5:26:9f:9b:ea:fe:68:fe:93:
30:94:5c:1d:ff:de:a6:e0:2e:8e:4e:aa:cd:91:b4:d4:73:0e:
9b:03:49:07:ad:fd:eb:e1:5a:12:e3:68:04:86:87:80:5f:7e:
1a:7d:18:fe:59:c2:1c:a6:e6:76:c3:25:7c:ce:38:e8:14:a6:
b5:3d:84:6c:49:33:2c:e6:7f:ea:c7:ed:30:70:2a:9a:6f:06:
e1:16:dc:ed:e0:73:b2:de:9c:fa:5f:dc:c4:52:c0:0b:5b:76:
1f:7a:61:be:b7:de:26:5e:13:4e:79:19:98:ac:55:f2:7d:86:
22:d8:a4:86:ab:40:0b:5b:83:e6:4f:9b:cd:3e:5d:7f:bf:a9:
ea:bf:bc:37:97:5f:fb:01:12:52:7e:b3:f3:f4:34:82:69:0c:
83:d5:66:42:63:12:84:31:a4:7b:49:31:23:5b:d0:c2:4c:64:
15:c6:79:08:a8:e9:06:c1:84:4e:f2:b2:de:9a:b1:c5:1d:50:
b7:ef:63:90:c4:73:aa:aa:e5:39:38:a3:38:ed:37:21:c6:3d:
bb:1b:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:05 2025 by rpki-client