Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
File: HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft (raw, json)
Hash identifier: /uWi6kd+5lVrGST3iZusIl4+aBpn8Z6t96b5fm7pFcc=
Subject key identifier: C0:6C:6F:C9:2E:7A:C2:F0:80:2D:15:B9:42:57:33:98:27:DB:66:60
Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Certificate serial: 132B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
Manifest number: 1304
Signing time: Fri 31 Jan 2025 17:03:44 +0000
Manifest this update: Fri 31 Jan 2025 17:03:43 +0000
Manifest next update: Fri 07 Feb 2025 17:03:43 +0000
Files and hashes: 1: HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl (hash: f6RxDK4/JVqdD8BSZds8nNoc4mWAAkCr+ZmRn96Pex0=)
2: 40366CF0F8C811EBB7BFD243C4F9AE02.roa (hash: 8hyXNYESkSjUrpbYxaS/qkwp3HcVC+EurBWeQvWRtvM=)
3: E4A74BE6255211EB96B9B269C4F9AE02.roa (hash: Ahmq+kO6A0bgXkAjwTqcQfdgpiGuxiz20RpREd5Xycs=)
4: 538F7B12B1D711EBB3C0A24AC4F9AE02.roa (hash: lphxg6l5kCfwED0OWn5gQnqtc1lhTVAr6wMcBhF8yGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4907 (0x132b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Validity
Not Before: Jan 31 17:03:43 2025 GMT
Not After : Feb 7 17:03:43 2025 GMT
Subject: CN=679d0270-aaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:7d:65:16:f1:78:33:c0:94:fa:82:25:43:
a0:97:48:a3:7f:77:01:5a:6d:72:fc:c9:58:fc:23:
48:b6:6c:59:d6:fd:21:e8:af:8b:14:54:1a:e7:ee:
d6:0f:3b:62:f2:0e:61:cf:76:e2:b7:d0:96:81:df:
5b:bf:97:fe:e3:15:70:b6:a3:55:92:1f:6f:dd:e7:
af:f6:a6:33:d3:0e:68:30:54:4c:9d:6e:95:96:00:
92:3d:72:bc:f3:c3:b2:75:5d:8c:03:a3:1b:4c:2c:
be:03:2b:08:17:d3:f9:ad:4a:d1:5b:db:37:81:af:
d7:f6:b0:e8:c5:30:e9:f2:db:af:17:89:49:f0:7d:
77:57:4e:bd:e6:fa:2e:ba:dc:29:97:15:52:19:63:
9c:01:fb:0a:bc:c9:c1:bf:7c:9d:17:94:d5:07:12:
ed:a9:02:00:74:ad:bc:68:97:61:28:cb:a4:64:80:
66:ae:3a:ca:2f:75:be:42:03:90:f8:b0:cd:f6:60:
d4:c9:12:e1:1b:3e:a5:fb:57:dd:1a:ba:a2:b7:8d:
a6:29:ed:ae:e5:ea:7b:e0:b0:5e:86:5e:8d:1b:8d:
8c:9a:01:83:27:f8:0a:24:b3:24:ef:0f:87:e1:bb:
36:c3:6d:44:06:31:91:28:50:d6:00:18:30:dc:d9:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:6F:C9:2E:7A:C2:F0:80:2D:15:B9:42:57:33:98:27:DB:66:60
X509v3 Authority Key Identifier:
keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:cd:7b:67:e0:6a:96:de:26:6f:b4:e1:cb:33:e2:fd:6d:2a:
ac:6f:0d:1d:6f:2c:3b:15:d2:f5:0a:c5:74:52:8b:58:10:e7:
c6:94:d7:9f:e4:f2:5a:79:7c:d0:53:92:fd:9f:e1:bc:3b:9d:
a9:22:f5:31:d7:d5:2a:93:18:fc:9c:ea:98:62:31:c4:26:d2:
b1:a0:62:5a:02:f1:92:68:a3:e3:9e:f3:c4:66:43:80:f7:3c:
02:fc:aa:48:28:7d:94:db:5a:17:45:66:c1:fd:20:97:8f:c8:
76:e7:76:4c:aa:8c:5b:4c:1d:93:7f:1e:e8:96:74:93:78:e2:
0d:5a:60:66:6f:7c:cb:c0:be:f8:50:8f:78:9a:d6:33:22:42:
47:7d:fb:cf:d2:53:0a:f6:d5:ff:da:05:56:5a:89:11:e5:c1:
09:eb:d0:bb:86:3d:8a:d5:70:03:22:af:6d:fc:55:de:23:32:
8a:21:31:fa:01:8b:10:27:63:a3:b4:f2:6c:1b:1c:ff:46:c0:
12:5c:a5:b3:7b:ce:52:5d:a5:ce:6e:73:cd:bb:49:5a:de:88:
f0:2a:68:fc:92:27:14:bc:9b:26:01:95:02:65:40:c3:09:f1:
5e:e6:19:a6:5a:a0:af:90:11:0b:1f:c0:5b:9c:d7:0c:7d:ce:
3e:40:72:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:57:50 2025 by rpki-client