Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json)
Hash identifier: B8bIIMMkxrmB+KWXN4OCO2X9FUNTloH6LQrgVTtUtHY=
Subject key identifier: CC:B6:27:E5:5F:60:4D:28:60:47:DA:4A:0F:0E:5B:7D:FE:21:6C:67
Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Certificate serial: 34A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
Manifest number: 3478
Signing time: Fri 31 Jan 2025 14:35:43 +0000
Manifest this update: Fri 31 Jan 2025 14:35:42 +0000
Manifest next update: Fri 07 Feb 2025 14:35:42 +0000
Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: KTzp/4yv1CtDgOrk/m6d0Xe1NLtSoStz5n7QhMZLJJ8=)
2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: d0P/BKes6SbSKV4r9lK1XjzU3f1Gv4sq1ihkJ2akzQw=)
3: 44E2CCAEBA9811EFBA471E62C4F9AE02.roa (hash: 1oolI04ZrhXaYmXgZvqSiMymHhXrDoJjC9cjKEp6I10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13475 (0x34a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Validity
Not Before: Jan 31 14:35:42 2025 GMT
Not After : Feb 7 14:35:42 2025 GMT
Subject: CN=679cdfbf-21eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e2:8c:67:f8:e2:f6:e6:44:24:06:93:7a:42:
99:e5:71:8e:38:30:f0:f9:21:8b:b4:6b:b5:bf:ab:
a5:49:1f:ef:18:eb:ba:97:82:dd:20:13:07:25:f1:
cd:5a:ba:71:f9:1c:5c:54:6f:a6:fb:19:85:5b:1d:
37:e9:23:11:3b:65:5d:e3:07:c5:1b:cc:6a:bb:3a:
3d:7f:ff:c0:fe:9e:a3:0a:11:76:30:89:ce:a2:83:
e1:11:58:13:59:75:2d:58:84:0b:e8:91:9c:22:db:
3b:c4:6a:fc:40:96:72:02:d0:10:7d:30:78:9e:bd:
d3:6e:26:ca:a8:68:cc:e7:5a:e6:3e:5f:d9:5b:5d:
52:6e:0f:88:66:c4:84:a5:0a:40:06:aa:cc:69:a7:
fe:c1:a9:f2:86:43:ef:c9:d8:98:c7:72:fa:d2:33:
6e:37:81:64:33:a2:a5:b0:29:dc:dd:57:0c:74:74:
8e:bf:a0:fa:6b:4d:74:06:03:95:2b:a2:0e:8f:97:
14:21:33:cb:ac:3d:de:de:79:d6:b9:1b:45:5a:77:
85:22:24:66:de:9e:54:df:a9:9d:0f:e8:1a:22:80:
33:85:58:cb:88:8e:b0:9a:6d:c4:e8:38:a1:2d:20:
2f:ee:5a:92:4a:c5:4c:3f:3d:15:ed:71:cc:52:34:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:27:E5:5F:60:4D:28:60:47:DA:4A:0F:0E:5B:7D:FE:21:6C:67
X509v3 Authority Key Identifier:
keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b7:41:f3:92:c7:72:0b:9c:fd:3a:95:81:d8:fd:d5:9e:37:
28:46:d4:f5:45:9b:45:79:7b:c9:f2:58:31:9c:ca:bf:ba:4a:
64:71:7e:04:41:36:d0:fb:c9:d1:69:00:b8:3d:ae:26:26:7e:
a7:5c:2c:b0:b3:f0:d2:95:08:7a:6f:b6:f3:12:d6:14:f5:7a:
bc:16:5d:76:33:3d:1f:51:40:d8:3e:6d:33:2b:fc:2c:d2:a8:
ed:b2:f1:04:89:65:ac:2d:fc:f9:c1:02:58:2a:1a:ad:e4:fb:
9e:0c:d1:72:9b:5b:d1:6c:26:ee:b3:6f:b6:c3:cd:16:87:37:
da:a8:ff:2b:1d:6d:fb:7b:4c:07:a4:6c:c3:02:ce:d4:d9:dc:
ca:7e:d5:31:67:b7:5d:d6:78:14:98:d1:20:e7:00:73:1e:79:
bc:97:dc:ad:99:30:0e:6d:64:27:bc:5a:f9:13:cb:32:7b:2a:
4d:9a:45:b1:c4:94:b0:a5:0b:10:3d:de:d6:3a:fa:f7:32:77:
df:2e:e9:11:85:6b:27:11:dc:17:50:d2:e6:4b:02:b5:2b:13:
ea:9d:70:ec:50:2b:27:3a:f0:75:68:b5:d8:da:52:ca:88:43:
af:cd:9d:b3:4e:b6:ce:49:e6:5d:9a:63:a1:88:04:bc:b4:b1:
2c:b2:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:25 2025 by rpki-client