Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
File: Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json)
Hash identifier: cioAjDQEL2Jl8vnIyqfqiAc5ONETxSk+4eV6CrpJwys=
Subject key identifier: 1D:C6:78:FA:6E:DB:82:48:6E:0C:60:11:0F:7E:52:9D:B2:80:CD:32
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Certificate issuer: /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial: 0443
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
Manifest number: 043F
Signing time: Fri 31 Jan 2025 00:19:47 +0000
Manifest this update: Fri 31 Jan 2025 00:19:46 +0000
Manifest next update: Fri 07 Feb 2025 00:19:46 +0000
Files and hashes: 1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: u2MEhNqWlu1fgnU2gHdupyzvtyH7Pz3IEOz31jVelQ8=)
2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: Ib+CF/sk+KvnPvMxoim8MHqeWZYKc+NyST1cJiaAhsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091 (0x443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Validity
Not Before: Jan 31 00:19:46 2025 GMT
Not After : Feb 7 00:19:46 2025 GMT
Subject: CN=679c1722-12b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:6e:12:c9:f7:a5:fe:19:cc:87:39:5f:bc:
5a:21:c0:fb:35:e5:f8:3c:84:b3:c3:e3:c4:34:d2:
d4:6b:99:02:0c:b3:2d:54:17:eb:22:9b:9e:29:fa:
fe:42:dc:ee:43:9b:14:f3:9c:a9:ae:5f:d4:71:c0:
5f:a9:d9:0c:1b:64:8b:dc:81:3f:1c:ae:ec:25:16:
5e:bd:51:e8:cf:8f:21:c3:b9:e0:71:83:c3:4a:2f:
c5:25:09:80:6b:79:db:98:9d:ae:f6:d5:a4:25:cb:
d9:7d:c5:e1:32:a4:17:d8:83:83:fd:d2:24:26:00:
03:31:57:eb:93:8c:65:69:63:c9:c6:8e:21:74:59:
5a:10:c8:a9:d1:91:3e:e1:20:b3:4c:77:9b:43:0f:
2c:8d:db:0a:1e:86:08:cf:91:2b:c4:b3:e9:b2:1f:
fb:44:6a:9c:97:d0:6d:4a:f4:00:99:2f:84:b4:fe:
d0:5c:59:ff:e4:61:d5:52:81:bc:57:d9:8a:bc:2c:
0f:78:fd:65:aa:db:43:3a:75:83:d9:e1:9f:94:69:
23:48:28:d3:06:45:f0:78:4a:41:4a:e5:cf:a3:02:
24:a6:1f:a7:34:52:cb:fb:03:4f:45:39:4d:0a:89:
be:1c:a4:6e:59:de:ab:0a:32:8c:c8:cd:2c:d2:cd:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C6:78:FA:6E:DB:82:48:6E:0C:60:11:0F:7E:52:9D:B2:80:CD:32
X509v3 Authority Key Identifier:
keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3c:ce:37:a5:a7:85:1b:6c:2a:75:76:84:23:b4:bc:21:7e:
f1:3e:cc:72:af:60:86:12:a0:b4:5c:bb:7a:ec:15:9a:b0:a0:
95:52:7d:df:1b:d4:6c:ab:58:ce:4d:55:37:01:b5:9f:9a:c8:
10:56:48:51:49:41:f1:20:94:cf:b3:ab:83:62:54:e2:5a:be:
49:91:55:c4:b9:57:f9:90:f1:50:8c:eb:e6:ef:1d:f0:1a:a6:
9a:12:95:ce:85:c7:97:05:b7:64:d1:1f:00:de:6b:8c:99:63:
4d:43:da:27:a9:70:c1:f4:ce:e4:38:64:5e:0f:67:22:82:c9:
de:27:f7:eb:42:94:32:39:cb:7e:02:fd:b1:6a:3c:b0:85:4d:
4d:c3:3c:85:a7:f8:2c:83:f5:e7:a8:0e:5f:c0:92:44:01:b5:
29:24:2c:44:cc:bf:41:21:66:30:d0:b5:f9:af:5d:87:5b:05:
de:ce:28:fd:6b:1f:1c:68:45:a1:ca:20:6e:e8:70:ac:03:85:
13:1e:e8:5d:c3:1b:57:86:8c:9b:bf:21:64:e1:22:33:0f:a6:
4a:37:0d:af:df:38:4b:03:92:58:98:5a:8f:f0:de:95:88:33:
73:dd:da:99:b4:04:67:81:71:b8:08:54:90:56:fb:36:48:c0:
57:23:73:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:23 2025 by rpki-client