Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json)
Hash identifier: DRhbPdz2FzA/fWYSQsSyWCjPyLCmyxUlEcSBQT/YnKU=
Subject key identifier: 9C:4B:22:71:C2:18:7D:16:48:D4:90:05:8E:0C:C3:B0:EC:10:4C:93
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial: 34DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
Manifest number: 3498
Signing time: Fri 31 Jan 2025 14:41:12 +0000
Manifest this update: Fri 31 Jan 2025 14:41:12 +0000
Manifest next update: Fri 07 Feb 2025 14:41:12 +0000
Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: VreK8wfYRoJHzJUZQSDpD2dAOwJOeQ+HUjEEyktnofw=)
2: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: t7ps6xdVU6vrTG1nK/9OWIMcQSh+OrN9GXfbAq8uPbA=)
3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: n9gcG576WnWSfSbD1k2kQAFS8pFwmKZ/bu+qEXhq1js=)
4: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: um5n8atyzeoR8iKANdYR7vhmWocpmppM47bkyObk5w4=)
5: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: ay5cQZV1rdhUnH/CKXp7u80PlcZkJPfN/EH+LFqHlWE=)
6: 37E32C34DE0A11EFBAA0FC20C4F9AE02.roa (hash: 3GPebIheOkU+9ZA2gOJa4umMqDy6/jLjjn9U+nIE6JY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13530 (0x34da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Validity
Not Before: Jan 31 14:41:12 2025 GMT
Not After : Feb 7 14:41:12 2025 GMT
Subject: CN=679ce108-ed2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:62:a3:0a:ce:13:35:65:2d:40:85:d2:0a:
8d:e7:d1:0d:03:d5:47:31:3c:5a:61:08:66:6d:aa:
be:e2:c0:cd:98:e6:84:54:6a:a9:7d:e5:60:8d:36:
19:f7:20:10:7f:24:94:f2:3d:8a:2b:07:05:ec:be:
66:4c:67:e4:44:22:a1:c2:d7:66:a4:11:eb:84:a9:
73:1d:fb:c6:bd:9f:ee:42:d4:9c:fe:11:c5:4f:f8:
e4:94:e3:bb:8e:a1:12:14:da:17:bd:e3:d7:6b:57:
ca:80:1c:a3:e6:48:54:cb:39:f7:13:34:59:ee:ea:
88:28:87:f5:99:d6:80:4a:62:83:99:13:2a:91:73:
a3:3c:a5:e1:58:f4:0f:22:cc:1a:b4:c0:e1:07:6b:
84:bd:0f:9d:71:59:76:92:c0:0d:17:0d:63:53:d0:
25:40:85:bb:fd:ad:1a:33:63:31:23:e4:d2:9b:3e:
47:99:c7:07:5c:b3:73:e2:75:47:2c:ea:2f:18:eb:
6e:8c:a9:1c:0b:25:f1:ac:27:6b:a5:a7:d5:48:d5:
8e:be:51:47:d7:d5:5f:06:b8:a2:c7:ee:28:2b:1c:
b9:a6:f1:0c:41:27:77:15:ca:ba:f4:88:f2:d5:ab:
9a:80:a3:f4:90:4f:23:e6:66:b8:0e:5a:22:c5:8e:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4B:22:71:C2:18:7D:16:48:D4:90:05:8E:0C:C3:B0:EC:10:4C:93
X509v3 Authority Key Identifier:
keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:d1:f7:e0:12:3d:3d:af:37:9e:89:d2:40:57:3e:70:ea:f0:
a4:cb:96:ea:50:e5:64:f5:6d:8d:66:ac:18:8a:ea:49:58:75:
06:d3:33:05:75:29:c3:f5:6c:8c:d7:57:39:09:2c:56:d8:74:
8d:40:a1:59:1e:e9:ca:90:c3:74:77:04:4c:d7:96:41:74:14:
80:e9:78:07:7f:96:77:53:65:c2:57:2f:34:84:d1:52:e4:a2:
74:cd:ee:a8:49:73:d8:19:bf:79:58:38:32:e0:98:2a:81:73:
8d:37:00:ce:90:41:d2:72:05:16:56:f4:57:df:5c:d1:34:f3:
32:bb:e0:ef:7f:3b:60:01:40:db:55:a4:79:87:a2:75:05:04:
ef:d7:51:cd:6a:82:8c:ae:ea:c3:d3:63:65:ea:e1:ca:5b:cc:
b8:79:26:fb:7f:1f:a6:8b:96:9f:59:9b:0c:9a:a9:53:55:7d:
4e:0e:f9:da:88:69:64:56:9b:ad:ce:9e:be:c1:43:be:a6:35:
1d:1b:c2:ab:0b:24:30:20:7d:e7:8a:da:e3:4d:17:ea:7b:1a:
37:90:6b:0f:52:8e:3b:37:29:10:a2:2a:be:42:b2:04:00:55:
2a:e8:6c:39:df:b6:fb:ad:64:70:f3:45:1e:20:b1:0b:7f:e9:
4e:15:7c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:25:27 2025 by rpki-client