Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
File: hrHxHRgdpsydsDI95DvJbFkJZeE.mft (raw, json)
Hash identifier: 14ycTe3lGri2/P6x6EYkscI38jICZERiMtc8tv4BAxs=
Subject key identifier: 80:B8:82:8F:B9:FE:DE:85:A1:A0:ED:F3:ED:62:BE:21:7B:3C:F0:1B
Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1
Certificate issuer: /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
Certificate serial: 0B77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
Manifest number: 0B6B
Signing time: Thu 30 Jan 2025 19:09:08 +0000
Manifest this update: Thu 30 Jan 2025 19:09:07 +0000
Manifest next update: Thu 06 Feb 2025 19:09:07 +0000
Files and hashes: 1: hrHxHRgdpsydsDI95DvJbFkJZeE.crl (hash: 5/+YU4+9eJ6By5bbqvFS93gZNEGPR91FmPdKiIHI6tw=)
2: C41D0390EA9611EEA68A3A1DC4F9AE02.roa (hash: 5i93kRFt15g1HXOZqcCTfVRBgr0xgYI+radWhnpC7c0=)
3: BF21F788EC5811EEB4293455C4F9AE02.roa (hash: a1JRhaeXn2WFPrwLiqmndenyLacpnioyFrrd1MH8M2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2935 (0xb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
Validity
Not Before: Jan 30 19:09:07 2025 GMT
Not After : Feb 6 19:09:07 2025 GMT
Subject: CN=679bce54-afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:74:05:49:f9:94:4c:45:a4:e3:cb:9b:67:
f1:53:fe:12:a7:c3:2c:01:fa:09:6e:ee:6e:5d:4d:
7e:8c:28:24:bb:a7:6e:40:cf:c5:4e:ae:a1:3d:1f:
d5:6c:88:d1:04:60:04:1f:42:c8:cd:ea:69:d1:d6:
62:ea:b6:38:5a:aa:a6:c1:28:73:6c:d5:4d:df:b3:
59:de:01:1e:f9:b5:1e:d2:8c:92:36:6f:02:af:93:
04:15:9f:b4:a4:b4:df:fc:09:47:09:2a:6c:69:bd:
60:00:28:b1:65:af:17:e3:da:b1:4a:3d:c5:98:0c:
73:ca:76:ce:fb:7d:6a:b1:a0:2b:19:6b:84:52:d1:
f5:99:49:05:dd:8a:ee:7f:50:d9:96:f8:b3:89:ce:
6b:2d:73:5c:79:7e:53:12:03:d5:a3:92:cd:5b:63:
30:36:71:a6:90:91:37:82:7f:f4:3f:66:b8:41:7d:
31:57:7f:c0:e3:fc:e9:11:5d:6a:97:41:02:92:36:
2e:b4:a6:b9:5e:52:a1:f1:cf:f8:16:37:e3:e4:ef:
79:09:f5:97:42:f8:f4:2b:16:f9:d3:8a:3c:6b:4e:
01:22:22:da:2a:0b:19:34:8e:e9:e1:79:1e:92:3c:
6b:1c:43:b5:ad:bf:90:25:61:69:d5:e9:c9:a3:c0:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B8:82:8F:B9:FE:DE:85:A1:A0:ED:F3:ED:62:BE:21:7B:3C:F0:1B
X509v3 Authority Key Identifier:
keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:2d:ba:1d:35:bd:45:c4:c9:39:c9:65:a0:bb:ca:e3:45:22:
18:9b:cd:40:3f:03:5d:9a:68:58:c2:65:b6:1d:ff:76:74:06:
ce:8d:8d:38:78:5e:34:88:ca:53:1d:5a:e9:53:72:1d:e6:7e:
05:8b:b7:49:96:84:8b:a5:1e:b9:d8:ec:69:e8:82:82:7e:ad:
f4:14:68:05:28:61:d5:8c:8a:6a:bf:2f:a4:8d:dc:02:94:01:
f0:3b:ab:27:e9:d1:db:9c:cf:9d:a9:87:3e:ed:34:08:9f:d2:
6a:97:f3:c1:bc:b3:06:4e:30:13:8c:6e:8d:a9:e1:bc:d9:6d:
85:03:19:7f:5e:3d:29:e9:2c:7a:c6:c9:25:d9:8e:2e:24:09:
40:e7:38:fa:d1:9a:b1:e4:28:b3:10:a1:0f:ec:a5:ff:98:6a:
11:b5:e1:38:c6:d8:f2:2c:66:e3:47:24:e9:d3:73:b5:a7:67:
d2:b3:f0:3f:0f:a8:97:07:31:ec:97:f6:7b:51:fc:83:a5:bf:
44:0e:66:e8:1f:b4:f9:42:37:ea:05:e1:cb:d5:c4:58:0f:4f:
09:96:88:b7:58:d5:30:e5:8d:5b:0a:30:9b:1e:62:ab:81:b9:
04:1a:4d:0f:72:aa:b6:ec:09:56:5c:13:30:f6:b4:78:96:21:
9e:e0:00:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:20 2025 by rpki-client