Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json)
Hash identifier: uFuWrwa+LDwp84I+NFYg943Lz7HcCE6d2t0ZAZgX7no=
Subject key identifier: 53:2F:52:A5:80:95:5E:FB:C1:19:CE:BE:FF:B0:29:12:51:8B:DA:8F
Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Certificate serial: 03F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
Manifest number: 03EE
Signing time: Fri 31 Jan 2025 00:36:49 +0000
Manifest this update: Fri 31 Jan 2025 00:36:49 +0000
Manifest next update: Fri 07 Feb 2025 00:36:49 +0000
Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: xARM9JMmf20i2AW9/v1GlpPaOXDJHJ1sAPBCPMuQZgA=)
2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: amJzS7fS0qwVdajHhOHPPRxX4Ss5Ng0s6L0nYbstO78=)
3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 76rKPM4Cl24qOxvpyPfe4PxAfRqCYHAiT0+M4zUtc90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1014 (0x3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Validity
Not Before: Jan 31 00:36:49 2025 GMT
Not After : Feb 7 00:36:49 2025 GMT
Subject: CN=679c1b21-80d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:21:d2:81:df:fb:8f:f7:33:d5:f9:76:01:
48:de:a6:5a:53:e6:71:3a:ab:ef:20:e2:68:4a:56:
da:6e:e9:d3:99:6a:89:26:10:f2:b7:22:1f:ac:51:
ca:02:bd:7d:59:6b:3d:ed:7a:03:40:3f:87:7b:dd:
0c:d7:d3:c1:bf:db:fd:3e:08:e5:f5:32:1c:c5:e7:
c2:50:49:d6:5c:87:3b:fa:7e:87:5c:46:46:29:c7:
8d:6b:5f:cc:f4:3c:99:ee:e8:af:44:29:64:ea:51:
f3:ee:b8:49:92:26:7d:91:01:ec:66:4d:8f:de:df:
ca:0a:d7:5e:8c:99:63:ad:23:49:12:e4:7d:b2:26:
0c:24:4a:e8:62:69:b2:e7:63:40:e0:c6:e5:ca:1e:
ac:85:18:a6:e5:ff:a6:65:0a:a3:e8:53:b1:37:ef:
b1:7d:b9:da:c2:bf:e1:b3:67:21:b6:81:b4:70:44:
1b:5c:a3:49:1e:fe:ef:9d:ed:08:63:51:c7:9b:d4:
50:57:6c:36:b6:2d:d6:91:73:b7:ed:97:0c:e2:ec:
09:4d:5b:5e:db:6d:06:34:38:15:66:73:4d:6d:bd:
f3:7f:ae:6c:a8:c2:32:52:d1:82:ee:5e:15:62:63:
6b:f2:b1:e8:3b:56:56:6f:b5:d8:4b:55:d0:37:f7:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:52:A5:80:95:5E:FB:C1:19:CE:BE:FF:B0:29:12:51:8B:DA:8F
X509v3 Authority Key Identifier:
keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:c9:99:76:9c:c0:e4:87:0e:d5:b8:67:1c:db:44:16:55:b7:
b3:a4:f4:ce:21:7a:99:18:86:1c:ae:a6:b0:1e:fd:0f:50:77:
9e:9e:96:00:6b:3d:b6:80:d6:ca:57:10:0c:8f:c1:8d:ea:e6:
ec:bb:b5:24:77:2c:4f:f9:b9:18:a5:31:2e:fb:a3:6d:9a:77:
c1:a3:bb:48:f0:73:31:29:d2:fa:41:60:b8:3a:69:d8:73:50:
d0:a7:0f:7e:5d:4c:93:36:bf:c4:7f:18:79:52:ef:08:6f:f4:
70:60:c1:8a:82:f3:19:da:9a:72:f4:97:d6:2c:e0:9c:e2:b2:
85:14:9c:09:7d:c4:92:49:c1:d6:64:8f:15:8d:8c:6b:6b:0d:
47:d2:99:f2:14:b7:28:a8:22:80:33:ae:ba:01:b1:ae:85:72:
d0:7a:0a:e7:df:0c:be:e8:b4:6a:a8:eb:cf:0c:f5:8d:be:56:
27:62:fc:03:71:99:33:45:a2:f7:46:10:84:af:49:2b:18:b3:
9b:eb:92:54:33:65:76:75:94:5d:0f:96:c5:17:70:13:4f:78:
b0:f9:11:06:59:41:10:a1:ba:9d:8f:56:94:e8:f1:d3:64:ce:
96:78:50:b2:48:8f:83:c4:d9:98:1a:10:c0:f2:8b:d9:df:1f:
cb:ea:95:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF
NTg3QzZERDIwHhcNMjUwMTMxMDAzNjQ5WhcNMjUwMjA3MDAzNjQ5WjAYMRYwFAYD
VQQDEw02NzljMWIyMS04MGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzEAh0oHf+4/3M9X5dgFI3qZaU+ZxOqvvIOJoSlbabunTmWqJJhDytyIfrFHK
Ar19WWs97XoDQD+He90M19PBv9v9Pgjl9TIcxefCUEnWXIc7+n6HXEZGKceNa1/M
9DyZ7uivRClk6lHz7rhJkiZ9kQHsZk2P3t/KCtdejJljrSNJEuR9siYMJEroYmmy
52NA4Mblyh6shRim5f+mZQqj6FOxN++xfbnawr/hs2chtoG0cEQbXKNJHv7vne0I
Y1HHm9RQV2w2ti3WkXO37ZcM4uwJTVte220GNDgVZnNNbb3zf65sqMIyUtGC7l4V
YmNr8rHoO1ZWb7XYS1XQN/eB8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMvUqWA
lV77wRnOvv+wKRJRi9qPMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy
RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi
ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC
WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA0yZl2nMDkhw7VuGcc20QWVbezpPTOIXqZGIYcrqawHv0PUHeenpYA
az22gNbKVxAMj8GN6ubsu7UkdyxP+bkYpTEu+6NtmnfBo7tI8HMxKdL6QWC4OmnY
c1DQpw9+XUyTNr/Efxh5Uu8Ib/RwYMGKgvMZ2ppy9JfWLOCc4rKFFJwJfcSSScHW
ZI8VjYxraw1H0pnyFLcoqCKAM666AbGuhXLQegrn3wy+6LRqqOvPDPWNvlYnYvwD
cZkzRaL3RhCEr0krGLOb65JUM2V2dZRdD5bFF3ATT3iw+REGWUEQobqdj1aU6PHT
ZM6WeFCySI+DxNmYGhDA8ovZ3x/L6pUd
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:02 2025 by rpki-client