
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
File: HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json)
Hash identifier: L5IUC1hdmrxSRGFG7cbZKTHo8RNOJ3adgKcm//PwZUQ=
Subject key identifier: 95:D4:2E:98:AE:54:2A:21:21:83:D3:D6:D2:1C:43:29:52:BC:CE:8F
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
Manifest number: 0220
Signing time: Fri 31 Jan 2025 02:07:52 +0000
Manifest this update: Fri 31 Jan 2025 02:07:51 +0000
Manifest next update: Fri 07 Feb 2025 02:07:51 +0000
Files and hashes: 1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: 3C4/8pJpGFAFGcTpGfnPc7GkTOMKPIMIbmA+vzYB0SU=)
2: 8BF25C3C777D11ED9F54B75EC4F9AE02.roa (hash: WzDhelPPEDQuZuvaKJRg1qx2hqnkCTlff2H/gFYAX1k=)
3: 2080359097F711EF91AB0436C4F9AE02.roa (hash: ayF9Bv7+wkh7jzbmvM6fDF9jk/NLjmF1YhPtsg38ygk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Validity
Not Before: Jan 31 02:07:51 2025 GMT
Not After : Feb 7 02:07:51 2025 GMT
Subject: CN=679c3078-99f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:77:6f:c6:02:cc:84:86:6b:46:9b:71:97:
a7:a0:04:8d:b1:60:cd:51:6b:a2:9f:95:9f:24:e5:
af:b4:f0:80:69:ae:48:a2:96:73:77:99:b4:9e:5d:
a6:46:21:26:a1:c4:75:b9:86:83:67:21:65:ea:4e:
31:36:b3:62:12:54:f2:24:46:f2:4c:c0:96:dc:36:
b9:50:13:62:d5:ca:49:bf:10:e4:8f:02:21:67:02:
41:da:04:3f:c1:df:24:17:c5:93:26:b0:e6:ce:a9:
87:a9:be:e2:8e:7d:44:b1:95:22:d0:b1:46:f5:fe:
95:ea:ed:0f:c6:b1:bf:35:09:05:0e:a9:90:70:19:
36:b2:d6:64:b9:6d:4d:43:fa:ee:21:ab:29:b5:d6:
7b:5e:6e:0b:bd:57:0b:9a:8c:77:19:86:1e:51:84:
65:31:98:ba:26:90:63:da:d3:5b:e1:76:51:e7:9e:
ba:59:b6:72:cf:3e:4f:b4:64:47:d5:30:3f:ae:1b:
8c:96:ca:35:bc:fc:83:c8:72:dc:42:ad:30:98:60:
72:20:b2:da:6b:c3:25:c4:46:43:2c:c5:a5:df:4d:
b8:bc:0c:5b:2b:60:d3:e3:df:b0:ad:2d:2f:88:3b:
55:6b:1d:86:ac:a1:4a:67:be:b7:0e:12:e6:5b:d7:
3c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D4:2E:98:AE:54:2A:21:21:83:D3:D6:D2:1C:43:29:52:BC:CE:8F
X509v3 Authority Key Identifier:
keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d4:6c:a4:1b:e7:4d:63:b5:c6:6e:88:22:f7:37:f2:2f:cf:
05:c9:6c:28:4d:a2:ed:69:46:4f:9a:07:e9:d4:d6:c7:80:d0:
19:f3:98:d0:60:6a:1c:a6:3d:b4:ff:06:14:15:46:f4:76:0d:
d6:58:1d:8e:56:42:02:53:47:ab:6c:5e:56:20:66:0b:50:84:
81:00:3d:c4:fd:80:31:6f:eb:4b:be:1d:b7:a5:b5:81:d7:cf:
d9:f5:98:fb:eb:7f:c3:b0:c6:ab:08:8f:17:f9:23:7e:18:83:
d9:97:76:e3:b8:6f:f0:0c:93:ed:6e:b3:8d:4d:b0:99:7e:32:
19:70:58:79:95:da:ec:45:11:9a:97:55:95:97:64:dc:6e:7b:
5d:76:98:89:a2:9a:8f:fd:f8:97:a5:c1:e5:50:3d:e8:7f:8d:
0b:08:53:6c:ec:92:5a:79:2f:c7:e3:99:5f:7c:c8:ca:38:e4:
19:7b:6c:8f:f6:16:5c:c1:53:74:75:2c:9b:5b:6e:e0:96:83:
88:4a:bd:ec:5b:18:95:67:91:24:21:e1:1a:07:cc:0d:7b:97:
0b:aa:a1:67:f0:66:1f:00:cc:64:91:50:f0:af:54:aa:e0:5c:
01:0e:08:89:87:83:ac:0b:ec:dd:08:f3:17:3b:1e:98:b8:98:
e8:20:e8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:03 2025 by rpki-client