Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json)
Hash identifier: BlC1klWNWkrreWmpMxNc7J0HuPhCFN7LapZJ8Q16tcc=
Subject key identifier: 37:81:2D:E0:FB:FE:1C:6D:0F:C9:12:02:A2:04:E8:A5:9B:19:6C:38
Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Certificate serial: 13CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
Manifest number: 13C4
Signing time: Fri 31 Jan 2025 16:57:22 +0000
Manifest this update: Fri 31 Jan 2025 16:57:22 +0000
Manifest next update: Fri 07 Feb 2025 16:57:22 +0000
Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: po0d93t46QM5SBlqzsiFaFVds979VfM/FUFkOHCBawE=)
2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: 5pUcv+0LLLp1O/NzGX71FS1/aeQUGa83zSCV7bRjRQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5068 (0x13cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Validity
Not Before: Jan 31 16:57:22 2025 GMT
Not After : Feb 7 16:57:22 2025 GMT
Subject: CN=679d00f2-5d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:a0:ca:a1:2c:9b:ce:97:07:7d:1c:ff:4f:
2e:4b:be:41:eb:36:64:64:69:d9:d6:0c:b1:e6:a9:
93:79:20:8d:25:1a:b8:94:f4:f2:85:f0:a9:17:62:
bb:cc:1c:c6:81:6c:53:d3:96:9b:7d:28:1f:e9:83:
32:1e:e8:ed:c7:52:b1:71:b0:2f:61:ed:7a:45:cf:
c0:19:bb:e8:5c:43:a8:0c:17:25:39:b3:8f:8b:f8:
2b:01:82:f4:8c:ed:c0:b8:ee:4f:69:15:73:40:89:
49:24:9b:df:5c:0f:7f:bb:58:3d:9f:cc:e8:3c:f1:
b2:6c:6c:d9:f9:7a:ad:30:6a:e5:03:89:e0:19:50:
ba:ed:a2:7d:f5:e4:e9:31:3d:5b:9d:4d:6a:b0:63:
01:67:c7:f3:bb:22:66:92:55:73:17:c3:0d:8a:8d:
5c:88:db:60:7c:15:b0:a4:78:e7:f2:13:f3:68:0b:
ac:72:67:bc:54:62:16:6f:98:a4:00:9b:1a:24:85:
24:58:af:52:bd:15:94:40:8a:38:bd:8f:60:c2:14:
a4:c8:81:1e:f2:8d:d5:d6:63:68:85:e9:ae:1e:49:
8c:a3:27:6b:76:a2:d4:e9:4e:6b:2a:10:f5:ca:15:
cf:ec:75:f3:f6:f7:a0:af:91:a5:06:f8:22:25:9d:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:81:2D:E0:FB:FE:1C:6D:0F:C9:12:02:A2:04:E8:A5:9B:19:6C:38
X509v3 Authority Key Identifier:
keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:f2:15:01:1d:bf:ba:00:6e:ba:75:f2:46:49:22:bc:c9:c9:
1f:ee:71:08:86:38:0c:82:89:7f:92:42:98:8a:a0:40:7f:be:
5b:aa:42:43:a6:94:27:07:76:05:02:6b:f3:97:27:7e:eb:4d:
7a:a8:cf:ad:99:c9:4e:4f:eb:39:52:38:ed:ef:24:3e:c0:67:
4a:be:2b:cc:74:63:71:bb:38:41:9d:9e:a6:12:ba:34:7a:30:
da:47:9d:73:e9:56:52:42:1b:9e:92:ca:fa:cf:79:6c:86:fa:
88:d0:18:a1:15:97:b2:bc:12:c9:b8:19:8b:d9:83:c6:43:f9:
96:e7:95:58:3a:fd:95:b9:65:af:70:d1:b4:74:9f:5c:72:36:
bb:d7:0e:f0:87:1d:51:a6:d7:83:7f:26:43:52:8c:30:04:06:
8d:e3:8f:c3:d3:71:07:f2:6b:7c:aa:7f:61:27:dc:f9:61:59:
ee:69:59:ce:61:ed:24:11:af:a8:9c:0c:3f:a8:82:d1:25:96:
1b:ff:c2:b4:3b:bb:1a:77:05:eb:ec:c5:2a:98:88:46:b6:22:
31:88:9b:13:aa:db:39:a4:e7:eb:01:10:7b:f0:29:71:a4:31:
01:57:f7:c7:5e:57:30:38:c2:3b:ba:e7:79:9e:6b:7b:0d:82:
21:79:28:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4
NjcwQzg5Q0IwHhcNMjUwMTMxMTY1NzIyWhcNMjUwMjA3MTY1NzIyWjAYMRYwFAYD
VQQDEw02NzlkMDBmMi01ZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv/OgyqEsm86XB30c/08uS75B6zZkZGnZ1gyx5qmTeSCNJRq4lPTyhfCpF2K7
zBzGgWxT05abfSgf6YMyHujtx1KxcbAvYe16Rc/AGbvoXEOoDBclObOPi/grAYL0
jO3AuO5PaRVzQIlJJJvfXA9/u1g9n8zoPPGybGzZ+XqtMGrlA4ngGVC67aJ99eTp
MT1bnU1qsGMBZ8fzuyJmklVzF8MNio1ciNtgfBWwpHjn8hPzaAuscme8VGIWb5ik
AJsaJIUkWK9SvRWUQIo4vY9gwhSkyIEe8o3V1mNohemuHkmMoydrdqLU6U5rKhD1
yhXP7HXz9vegr5GlBvgiJZ0QCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeBLeD7
/hxtD8kSAqIE6KWbGWw4MB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG
NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ
Y1dRVDc5WmhkTU9HY01pY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDT8hUBHb+6AG66dfJGSSK8yckf7nEIhjgMgol/kkKYiqBAf75bqkJD
ppQnB3YFAmvzlyd+6016qM+tmclOT+s5Ujjt7yQ+wGdKvivMdGNxuzhBnZ6mEro0
ejDaR51z6VZSQhueksr6z3lshvqI0BihFZeyvBLJuBmL2YPGQ/mW55VYOv2VuWWv
cNG0dJ9ccja71w7whx1RpteDfyZDUowwBAaN44/D03EH8mt8qn9hJ9z5YVnuaVnO
Ye0kEa+onAw/qILRJZYb/8K0O7sadwXr7MUqmIhGtiIxiJsTqts5pOfrARB78Clx
pDEBV/fHXlcwOMI7uud5nmt7DYIheSgj
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:47:52 2025 by rpki-client