Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft
File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json)
Hash identifier: ITQG4sY7J2GnTWuEKACaBIKiAmg5kEDuET/0BrHMLyY=
Subject key identifier: E4:48:D9:7E:CE:82:04:67:42:E4:F7:4B:3B:7E:8E:9E:61:52:C4:E8
Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66
Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866
Certificate serial: 05D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft
Manifest number: 05D0
Signing time: Thu 30 Jan 2025 23:02:18 +0000
Manifest this update: Thu 30 Jan 2025 23:02:18 +0000
Manifest next update: Thu 06 Feb 2025 23:02:18 +0000
Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: l4oD3GhqSBULf6WW+X5MG1VNe7Ze1XT8HxTU1Bk0hRI=)
2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 0r8dNC3T3U5Gps7z0KLK3z7USX3hgA285YyOymm8LtI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866
Validity
Not Before: Jan 30 23:02:18 2025 GMT
Not After : Feb 6 23:02:18 2025 GMT
Subject: CN=679c04fa-d6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:e3:09:1f:09:77:3f:55:0d:ec:db:fe:7f:
77:f5:45:c1:9d:44:70:e0:0a:5b:76:c3:9e:b1:72:
12:46:09:d6:33:a6:f0:d4:71:b0:39:35:11:40:2b:
ac:af:dc:b0:e1:6e:2c:ca:b7:54:3e:4d:92:eb:7d:
29:e1:77:92:16:6f:77:c2:1d:4d:f9:5f:c0:57:67:
d4:45:1e:14:70:ab:50:45:ae:4b:48:ea:93:07:ce:
c8:ab:aa:cd:bc:0c:25:58:21:c7:d3:76:71:ef:89:
4b:3c:e3:27:37:09:12:d1:37:c2:3a:97:23:53:de:
29:5d:65:73:0c:ba:75:72:3e:5f:6f:c5:2a:cd:58:
c1:75:5c:14:79:3f:70:a7:b6:1d:f5:5a:5b:02:12:
3e:b2:63:ee:b5:43:59:2f:a0:31:31:44:e5:ce:43:
7f:59:c7:c5:87:c6:7f:c6:ba:ef:e4:18:ca:91:ec:
72:db:ef:76:c1:93:c4:7a:4d:1c:3b:18:34:e0:35:
9b:54:f4:f4:ba:35:28:41:0b:bb:5b:2e:04:60:b4:
2f:ac:f7:7d:7c:5d:02:0e:90:6a:92:a6:43:fd:de:
3b:29:7a:73:94:b1:5a:65:82:ec:82:cf:79:e7:fb:
64:d7:41:2c:c0:04:cd:db:f7:63:e9:01:0b:11:86:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:48:D9:7E:CE:82:04:67:42:E4:F7:4B:3B:7E:8E:9E:61:52:C4:E8
X509v3 Authority Key Identifier:
keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:85:80:bf:48:68:a0:3d:bd:8b:63:37:81:f0:35:03:38:b1:
99:a7:ab:3f:a4:c3:63:2b:8c:0f:a4:85:de:cf:6a:7a:9d:13:
07:00:6d:79:d7:a9:83:fd:0c:02:56:be:34:59:9f:4e:c0:cb:
b8:33:58:ad:27:21:a0:b8:5a:39:31:e5:8b:0f:38:b7:97:a6:
b0:37:45:45:cf:0f:10:62:29:a8:7b:61:a9:5c:34:eb:59:90:
dc:95:6a:c9:aa:ac:ec:de:67:2d:bd:a4:75:4a:7f:16:db:33:
b5:e2:49:78:62:74:cc:e5:82:be:5f:3c:b8:05:07:f7:4c:db:
d5:5d:85:83:fa:a9:21:6a:89:c5:0b:f5:36:ef:ea:f4:0f:c3:
f5:fb:90:98:74:83:5d:d5:85:08:d0:a7:22:f5:ea:e6:1a:78:
cf:11:2e:ff:2a:2a:68:fa:5a:9e:f4:4c:a6:4f:10:75:d6:4b:
92:38:fb:a3:67:09:9e:0b:10:62:b6:cb:75:ac:d7:b8:58:fe:
c0:ca:45:d8:e3:f8:c3:58:33:51:8a:b2:f1:df:15:02:fe:73:
0b:f8:dd:a3:a8:35:ba:3e:c0:d1:3d:61:be:bb:27:8f:76:26:
10:91:d3:42:81:e7:2f:c9:1b:43:d3:67:aa:98:61:f8:cc:ab:
4c:a2:ed:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:21 2025 by rpki-client