Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
File: HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json)
Hash identifier: hC9c6C1FdnG6Ph9j7OR6cU/Ztkf8Xs5aviyNHGfsn3w=
Subject key identifier: 66:3E:C6:3C:4D:F6:9C:CE:3F:61:91:EB:0A:84:6E:68:F1:A2:D8:9B
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
Manifest number: 0110
Signing time: Fri 31 Jan 2025 04:01:26 +0000
Manifest this update: Fri 31 Jan 2025 04:01:25 +0000
Manifest next update: Fri 07 Feb 2025 04:01:25 +0000
Files and hashes: 1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: HVaiHUFRDMzqz/Z9VI3Bk1kErYUn9sLp0lzWWcgrf5Y=)
2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: kMBmqA1/dyDv1ZADsMkGis7eLU/R9lLG3vYr3JHV36o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Validity
Not Before: Jan 31 04:01:25 2025 GMT
Not After : Feb 7 04:01:25 2025 GMT
Subject: CN=679c4b16-24df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:fe:d8:89:2e:bb:d4:b8:3e:27:b4:c8:b1:
4d:b9:ea:73:e9:ce:88:44:06:8c:fd:b1:7c:f7:28:
9a:7a:ea:f0:d6:5b:df:f4:22:a5:b6:b4:ad:d9:18:
67:c9:e9:73:cc:f9:d1:35:af:d9:bb:68:45:7e:f9:
92:7e:5f:f4:69:ab:3a:3b:32:7d:19:71:37:c7:86:
f2:ae:48:62:e6:b2:0c:b8:f0:45:18:64:bc:b4:6c:
9e:0a:7f:17:ea:d0:7a:c7:a1:82:da:65:8e:10:18:
b6:22:9d:99:5b:c8:e0:7c:8b:5f:2e:96:84:ae:8f:
10:92:4e:88:9c:d2:77:d3:66:4b:c8:da:98:59:7a:
2e:47:19:5e:0b:fc:8a:5f:dc:a9:31:57:bd:09:77:
fb:cd:0e:c2:51:e8:56:a9:17:2c:96:2f:4b:06:e0:
e6:1e:79:97:0e:88:de:ae:97:b9:80:c4:99:f1:29:
83:39:d6:b2:46:49:32:2c:fa:5f:94:6c:70:38:4b:
98:fa:64:ce:94:8d:f4:94:0f:db:a1:18:4a:4a:de:
77:07:1e:c7:4c:98:e2:cc:b0:e7:c5:f3:b3:3d:34:
f0:d6:2f:4d:db:71:88:b2:fa:55:05:8b:cf:a8:0c:
6c:7e:86:2c:79:0c:d4:7a:63:1c:e7:05:8c:02:c4:
44:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3E:C6:3C:4D:F6:9C:CE:3F:61:91:EB:0A:84:6E:68:F1:A2:D8:9B
X509v3 Authority Key Identifier:
keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:64:55:05:09:55:02:e3:04:8b:11:77:9d:d1:74:91:4e:3c:
d3:10:57:32:7e:6d:e7:17:1b:ef:ce:e6:5a:28:70:2b:aa:2f:
82:dd:47:ee:be:08:41:6c:e1:42:a6:54:78:0c:0d:f1:9d:6f:
2a:e7:65:24:c7:53:4c:60:d8:cd:f5:50:73:53:8e:2d:66:20:
9f:12:07:ff:75:6e:8f:6d:a0:0d:62:1d:6e:26:cc:f5:f0:67:
13:b7:1d:cc:42:cd:96:84:77:21:e9:bf:0d:3a:a1:5e:a5:b9:
4d:e3:f6:f4:6a:24:06:d1:cc:39:fa:00:91:15:f3:be:35:b8:
22:f6:26:db:0a:3b:52:d7:50:05:d3:48:44:d7:1e:b2:c2:6c:
1f:1e:51:b3:7d:06:f2:04:8d:35:dc:af:5c:ac:35:34:3a:e7:
2e:a1:7c:0d:b3:52:fd:bc:3b:4c:f4:c6:46:24:35:12:90:75:
ae:a3:45:92:fe:56:8a:05:5b:03:2d:ac:98:da:e8:64:02:dd:
47:8f:83:39:a7:95:7a:f8:21:3e:09:57:59:0b:78:46:2a:b2:
b6:03:42:24:af:1d:12:66:1a:de:ef:43:87:75:70:87:48:3a:
ec:d7:ee:59:ab:31:94:af:19:b4:aa:55:e2:c7:dd:ec:72:6b:
d8:ea:f9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:51:57 2025 by rpki-client