Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File: Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier: q/eM4t9QYMvNYwpGT4cchuq/fRDHYDUZjJ25lO049JI=
Subject key identifier: DD:12:42:C0:7D:D6:F1:54:91:09:2D:C4:63:79:84:35:CD:A6:1B:A1
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial: 0695
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number: 0691
Signing time: Thu 30 Jan 2025 22:16:48 +0000
Manifest this update: Thu 30 Jan 2025 22:16:47 +0000
Manifest next update: Thu 06 Feb 2025 22:16:47 +0000
Files and hashes: 1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: SVTGMKdsKfA5QwHnWPQjZdgpE8bdd/M8fG7Kgxtxmww=)
2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: D45gCx25p55ZdSrenESWExC8wZeu5xeOajPz7tvTQDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1685 (0x695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Validity
Not Before: Jan 30 22:16:47 2025 GMT
Not After : Feb 6 22:16:47 2025 GMT
Subject: CN=679bfa50-4e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:80:b0:6b:4f:a5:0f:6f:72:4e:36:5e:3f:
38:d4:13:bc:56:16:1b:f4:bd:0b:68:fc:01:1e:b2:
a4:c2:4e:99:2b:79:1c:09:3c:9d:08:23:11:2f:cf:
1b:7a:32:9e:8c:8a:88:fb:e7:ce:dd:6b:f8:38:1e:
af:4e:49:4e:9f:63:4d:f1:2b:db:81:eb:82:a6:f0:
74:ea:e1:fc:61:d5:75:10:0c:a3:16:59:47:64:35:
6e:98:31:e1:e0:0b:99:3b:91:d6:fc:b2:2b:ea:25:
d5:c5:c9:e0:c5:c0:a4:99:4a:86:3a:95:b9:7a:c3:
2f:a7:ac:32:e7:25:60:c8:4b:1d:c9:a1:92:06:79:
cf:3f:fc:e0:36:59:8e:29:4e:86:c6:25:f1:8b:e9:
d2:ee:17:01:6f:62:e2:e0:49:05:0f:9b:73:9a:77:
dc:d7:85:8c:4b:a0:8a:a1:9f:33:d4:2d:96:9c:9a:
a5:03:f3:35:21:94:55:1c:65:8f:fd:17:aa:24:83:
f4:0d:e3:4c:6b:8d:61:e7:db:fa:fc:d3:c7:52:c1:
b6:9a:c5:5b:6d:c7:38:44:10:0d:ed:fd:25:f1:ea:
86:68:64:8b:5a:97:16:45:19:4a:55:74:41:84:c0:
b0:6d:ca:21:55:ec:3a:27:29:9a:25:f5:34:dc:43:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:12:42:C0:7D:D6:F1:54:91:09:2D:C4:63:79:84:35:CD:A6:1B:A1
X509v3 Authority Key Identifier:
keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:b4:d6:02:e8:77:25:af:66:bf:bd:7d:68:7e:a4:07:4a:3c:
99:e7:44:e6:5d:e5:19:3a:09:f4:7d:5b:6e:05:3c:cd:fb:d4:
ed:4e:f8:2a:cc:56:ea:11:38:0f:2c:d1:1c:90:a8:39:46:32:
2a:49:ec:ed:4c:aa:8c:a9:c1:a1:86:41:c4:e4:78:ba:90:e4:
51:65:e7:36:86:2d:6d:1e:25:ca:6d:7d:d7:4b:8f:51:dd:82:
98:42:46:a9:2f:76:9f:22:2f:10:ee:e8:88:34:80:20:b3:2d:
49:77:b8:33:80:75:d8:9d:61:d6:04:30:68:9f:fb:ed:b8:50:
3e:4c:57:80:82:ac:ef:39:c1:60:e8:56:da:7d:0c:cf:6f:72:
a8:06:6e:58:6c:5f:04:f8:86:ac:8d:af:f2:26:5b:f1:c8:41:
ae:d6:03:4b:cd:75:1b:fb:1e:1c:68:c0:cd:11:41:de:15:6d:
3d:c4:5e:d0:b7:08:e0:1b:97:51:8f:40:a5:58:3e:4b:e9:1e:
19:32:9f:0e:d0:42:5d:4b:77:aa:d5:de:8b:69:e8:cc:7d:bc:
49:99:00:24:f8:23:b8:cb:5c:5b:76:1d:8d:79:a7:f6:32:c7:
db:4f:5b:02:cd:ee:45:7e:f0:52:77:a4:e6:12:59:36:b0:c9:
af:3a:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:38 2025 by rpki-client