Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
File: HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json)
Hash identifier: Ge68WEz7DDehXBWMpMaF7f0XRlojkI5sc+J8iSy3eLc=
Subject key identifier: E9:10:E4:59:76:8B:F7:4C:04:71:34:C8:7C:E1:84:20:9C:39:A7:6A
Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
Certificate issuer: /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Certificate serial: 34DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
Manifest number: 349B
Signing time: Fri 31 Jan 2025 14:16:01 +0000
Manifest this update: Fri 31 Jan 2025 14:16:01 +0000
Manifest next update: Fri 07 Feb 2025 14:16:01 +0000
Files and hashes: 1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: GF4iO7xoRZDTXBHfcrE/UxGXeCa91x+LTFwAGeQbpDk=)
2: 3D6EDF86EDA711ED91155885C4F9AE02.roa (hash: mXb8AscVsTwHQGsL7M6XAxSIWwOh5epna0XlBQIQUOY=)
3: D3DAACB2507E11EF91EDBA52C4F9AE02.roa (hash: Whq1SIyvQYa1mALpVqGVZuuCi11KV+H9HrjJKdS2dN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13535 (0x34df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Validity
Not Before: Jan 31 14:16:01 2025 GMT
Not After : Feb 7 14:16:01 2025 GMT
Subject: CN=679cdb21-d1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:21:2e:1d:fb:ef:0f:39:3c:1e:7c:bd:31:
ed:5a:54:75:24:7d:44:aa:3e:d6:b5:3c:b9:a9:32:
c3:cf:35:8c:8d:34:2f:fd:ee:62:6b:7f:eb:42:69:
12:99:82:50:a8:ee:6c:60:0c:0b:ff:b4:0c:91:d4:
cb:3c:0a:86:0a:0e:7b:37:7e:6f:8f:df:5d:b8:40:
62:84:07:5a:26:d8:46:f3:0c:6c:3b:19:85:11:9c:
c0:24:b8:7a:7c:f8:cd:d0:77:00:f6:1b:e0:b0:81:
33:e8:90:29:8c:05:de:00:52:8b:d1:1e:67:55:17:
9b:b1:86:b4:75:f0:a9:24:83:3a:08:9e:6d:ef:07:
47:11:46:3c:f0:76:13:37:e2:38:32:fa:90:fe:b3:
e6:7f:3c:3d:10:9d:7b:fe:78:0b:bc:dc:a8:21:5d:
66:02:8f:9e:59:5d:cd:05:9b:14:b0:6b:fe:b1:62:
cf:9a:f7:9c:06:4a:c2:1c:f2:61:5b:aa:4f:a8:f6:
31:aa:4f:0c:7a:13:ad:18:8f:a7:3f:ef:a5:dd:dc:
ce:64:40:3b:64:c7:53:b9:3f:36:d5:d4:7a:e7:e9:
8a:2a:73:07:cc:bb:cd:63:2b:ad:6f:f3:30:24:23:
c5:30:07:a6:59:63:9b:4c:ed:99:1b:56:32:f9:20:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:10:E4:59:76:8B:F7:4C:04:71:34:C8:7C:E1:84:20:9C:39:A7:6A
X509v3 Authority Key Identifier:
keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:84:d5:a5:19:8a:66:d5:aa:d2:92:54:64:10:de:fe:9f:68:
ed:de:7a:0f:90:f2:a3:70:49:8a:68:83:a6:2e:46:f9:ef:03:
28:ee:2c:83:e1:ef:79:fd:a6:69:39:f6:16:3a:24:78:65:14:
a8:d2:c3:a1:87:dc:69:05:5d:de:bb:23:a7:43:3a:b8:3a:ec:
d5:42:47:0b:ff:e6:bf:3a:4e:6d:95:11:87:54:58:6c:a7:bb:
9c:41:f5:29:95:a4:84:43:21:e2:45:da:e4:0e:bb:03:31:6a:
8c:85:ca:ee:55:08:65:04:8a:39:e2:8e:da:51:d3:de:6e:7d:
ea:75:13:82:25:87:4b:c6:44:35:59:c9:72:92:1b:ef:f6:3b:
b1:94:69:80:d6:b5:b8:6c:5c:22:c8:15:38:0f:57:a5:d5:29:
37:f2:44:ca:67:fd:e5:e6:f8:60:15:c7:27:68:7c:79:86:7b:
1e:a8:e3:83:a9:63:63:eb:87:eb:ee:c7:b6:5e:12:77:12:4a:
b7:46:58:fe:ad:81:0d:26:99:c7:5c:2e:65:29:a2:c9:79:2b:
3e:87:21:db:eb:89:bb:c9:81:a6:59:94:b3:d6:69:6e:0a:f1:
14:91:cf:36:4c:97:03:b5:6f:23:fb:c2:d9:bf:d2:75:71:d4:
6a:d4:a9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:34 2025 by rpki-client