Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json)
Hash identifier: VkOVtZ/keN6ZOuFRWoH6uC6b34bPsF6NfM/ZdTc6Gy4=
Subject key identifier: 3C:CC:74:B0:54:EE:A4:E7:41:58:8A:C9:4E:1B:84:CA:DD:F0:BF:9F
Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Certificate serial: 0A0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
Manifest number: 0A06
Signing time: Thu 30 Jan 2025 19:57:21 +0000
Manifest this update: Thu 30 Jan 2025 19:57:21 +0000
Manifest next update: Thu 06 Feb 2025 19:57:21 +0000
Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: yeU5O/3kMSUfCK4rHqEOa2haX4Qpo+z0AgAd1aFq71c=)
2: 9261E554464611EE84B7C534C4F9AE02.roa (hash: lLxl/sSYgP6ZriIWkj+AWN6PJcQcpVbRmAe2Y2lbT3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2574 (0xa0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Validity
Not Before: Jan 30 19:57:21 2025 GMT
Not After : Feb 6 19:57:21 2025 GMT
Subject: CN=679bd9a1-9a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:d0:ff:97:59:a2:30:3b:dd:f5:c6:a1:4e:
2f:70:9a:ee:08:0f:43:b6:3f:f3:06:8a:e0:61:b1:
d7:8e:8b:f2:33:77:6e:fe:00:ce:79:d2:a6:36:41:
6e:9e:83:41:e2:d6:fa:b0:db:ea:d7:be:91:5c:1b:
e5:13:7d:26:c6:f8:d9:bb:c9:06:28:a1:94:1b:43:
13:cf:d6:fb:96:ac:46:0a:bf:a9:3f:01:f3:5d:d0:
0e:77:b8:3b:6d:ed:44:8c:9b:3b:e6:3b:42:13:4b:
38:e4:3c:ae:59:39:5c:dc:a1:f0:b1:73:ef:00:8f:
dc:b6:83:78:42:bd:9d:4c:34:d3:72:a3:81:1c:9d:
07:d6:ee:18:7f:a0:27:80:42:33:55:50:1c:42:8e:
9f:ab:39:d4:ce:60:13:ab:f9:4d:52:3b:5b:72:89:
d6:9a:5a:84:30:61:47:b6:58:05:d5:0c:d2:d8:07:
ef:2a:56:a3:7a:c3:bd:cc:e7:9e:a4:6c:24:41:c4:
e9:a6:ff:54:47:4d:29:e7:d6:fe:23:a0:31:f3:49:
16:bc:c7:85:9f:b6:04:50:31:78:52:40:af:25:ad:
3d:41:0f:a8:3a:07:76:bc:c6:79:08:90:4f:78:5e:
12:ac:1a:cb:34:54:4f:f8:56:d7:fe:b6:f1:cc:1a:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CC:74:B0:54:EE:A4:E7:41:58:8A:C9:4E:1B:84:CA:DD:F0:BF:9F
X509v3 Authority Key Identifier:
keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:de:b7:20:44:cf:7c:7a:f4:51:84:a6:e5:df:10:00:07:5a:
f0:73:6d:6a:cc:cd:7b:3c:67:45:69:96:f0:b4:f8:65:59:fe:
8d:ba:92:a4:87:f3:5b:ee:d9:57:0f:19:09:26:1e:59:2e:60:
d2:65:73:03:22:14:49:16:98:ab:9f:a4:16:ba:15:ec:5b:9c:
38:c0:e3:11:b9:cd:c4:29:55:b3:f5:d7:9b:d6:2f:f8:72:0b:
25:56:f8:c8:fe:aa:6d:e8:e2:73:77:17:90:60:6b:6a:1a:dc:
d7:4b:98:1d:63:4b:13:f0:18:d2:d3:6c:92:4a:b8:10:0c:ed:
ba:32:ac:2a:42:57:b4:e0:b5:af:3a:62:25:aa:56:a6:37:48:
24:ad:af:c5:f6:60:ae:6b:1b:96:9f:13:76:f4:db:ae:16:ce:
6e:ad:4f:32:21:d9:8c:d7:79:2c:34:c1:c4:f5:16:73:af:86:
01:99:a5:cc:ab:db:4c:6c:d1:ec:87:12:79:c9:7d:4a:d2:c1:
c9:a1:ab:35:26:ef:44:64:a6:59:49:58:4b:fc:17:88:7a:63:
f7:64:22:37:1c:06:de:ea:be:30:0f:ac:87:9f:bf:54:0a:cb:
36:67:72:f0:17:11:15:e9:da:ff:47:71:3d:02:d3:64:07:65:
7d:59:71:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:31:48 2025 by rpki-client