Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json)
Hash identifier: rYDv1Q0mEFQH5edqh79FXKDQ1nEaBh8K147Rklwv7Ss=
Subject key identifier: B6:48:1E:41:9D:9C:A7:B6:29:4E:3C:3F:7E:33:1D:26:23:49:61:9F
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial: 0472
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
Manifest number: 046E
Signing time: Fri 31 Jan 2025 00:09:33 +0000
Manifest this update: Fri 31 Jan 2025 00:09:33 +0000
Manifest next update: Fri 07 Feb 2025 00:09:33 +0000
Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: QODEwkHsUWWSWI7xZeS5ZfDizobTXz9+CDzwedgBdbE=)
2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: Do6OgnR2E8Iy4DGGhWcszr7SeA/TupAI+DlFPIrWpNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1138 (0x472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Validity
Not Before: Jan 31 00:09:33 2025 GMT
Not After : Feb 7 00:09:33 2025 GMT
Subject: CN=679c14bd-8859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:39:0d:b4:8a:3c:37:b7:ec:dd:9c:9a:48:
64:a9:0d:99:73:9a:13:44:d6:77:b3:c5:9a:6d:20:
b9:3b:66:fb:12:ee:6e:bf:7c:57:d1:ac:de:9e:12:
5a:32:11:55:62:ec:19:27:43:0b:e6:63:36:0f:77:
02:f8:c3:5c:89:6d:85:15:bc:a6:e0:71:25:79:78:
e9:25:ea:04:5d:da:fa:50:ac:32:04:f0:4d:d3:0b:
69:cb:2e:2e:84:01:6b:eb:76:4c:5d:44:36:cc:15:
26:59:c1:3f:c1:5e:d2:18:5a:31:01:f3:ad:b2:04:
42:27:69:70:88:f2:24:79:3a:b5:a2:58:bd:f0:1c:
57:ef:bb:db:3f:9e:88:be:9d:ba:92:32:0b:15:3d:
cd:dc:d7:6b:88:e9:74:ec:4b:fa:5d:8f:dc:a5:e2:
2c:84:0a:0d:b0:d8:7f:09:cb:bb:ab:03:86:90:d2:
db:2a:59:91:34:b9:41:31:f1:21:b2:67:6a:79:27:
7a:3b:89:d8:59:bb:3e:02:09:b4:43:5a:6e:c7:d5:
43:f1:03:71:71:1f:5f:7d:be:d2:82:11:8d:cd:86:
b1:d7:5f:e3:e0:c3:20:61:45:6d:c8:e4:28:0f:67:
a1:96:c4:c7:8e:43:ef:00:a1:7a:e1:07:81:ce:3c:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:48:1E:41:9D:9C:A7:B6:29:4E:3C:3F:7E:33:1D:26:23:49:61:9F
X509v3 Authority Key Identifier:
keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:26:92:1c:03:e5:73:94:0a:2f:eb:cd:be:26:da:7e:48:11:
d5:86:15:64:4e:c8:a8:89:09:56:cd:8f:6b:c5:84:92:1f:3d:
8e:11:99:94:90:a0:53:2a:4e:d5:0d:2d:80:24:fa:66:2f:1e:
e8:ff:ea:bd:31:aa:e6:20:6a:a4:67:3b:60:2a:ce:62:41:75:
be:d5:bf:be:8a:2d:69:25:ec:9f:5e:85:f8:35:b4:85:ee:06:
5d:b8:33:95:6c:6d:02:60:50:f0:1c:f4:54:0a:fb:e5:1b:bd:
27:79:29:4c:93:e1:e6:aa:c6:db:05:99:44:c0:3b:4c:a5:a8:
4e:fc:62:9c:48:72:0f:49:b7:3a:60:81:8c:9b:61:72:c9:3b:
08:6c:4a:35:be:62:e6:cb:7e:5d:f5:c8:2a:14:41:7a:9c:d1:
5f:a1:84:a4:cc:55:19:5f:7b:5e:4f:95:6a:14:d2:eb:f5:80:
86:69:b9:88:d3:de:ae:19:43:23:79:4b:28:4d:eb:91:89:46:
6e:e7:76:65:9c:52:7f:47:73:21:8b:5f:13:a3:cd:94:ab:c7:
5a:b5:7e:31:dd:df:5e:f3:84:f4:70:26:67:98:0c:43:bc:03:
23:b1:bb:d6:86:19:3f:49:ca:40:49:5b:57:ec:9c:98:5c:f2:
d4:f4:2a:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx
NEEyQzIxMzgwHhcNMjUwMTMxMDAwOTMzWhcNMjUwMjA3MDAwOTMzWjAYMRYwFAYD
VQQDEw02NzljMTRiZC04ODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwo5DbSKPDe37N2cmkhkqQ2Zc5oTRNZ3s8WabSC5O2b7Eu5uv3xX0azenhJa
MhFVYuwZJ0ML5mM2D3cC+MNciW2FFbym4HEleXjpJeoEXdr6UKwyBPBN0wtpyy4u
hAFr63ZMXUQ2zBUmWcE/wV7SGFoxAfOtsgRCJ2lwiPIkeTq1oli98BxX77vbP56I
vp26kjILFT3N3NdriOl07Ev6XY/cpeIshAoNsNh/Ccu7qwOGkNLbKlmRNLlBMfEh
smdqeSd6O4nYWbs+Agm0Q1pux9VD8QNxcR9ffb7SghGNzYax11/j4MMgYUVtyOQo
D2ehlsTHjkPvAKF64QeBzjycBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZIHkGd
nKe2KU48P34zHSYjSWGfMB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw
QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjdCMy8yRkQ4MTVFQzMwQjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JO
QWt5enowQjVDbDhVb3NJVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCJpIcA+VzlAov682+Jtp+SBHVhhVkTsioiQlWzY9rxYSSHz2OEZmU
kKBTKk7VDS2AJPpmLx7o/+q9MarmIGqkZztgKs5iQXW+1b++ii1pJeyfXoX4NbSF
7gZduDOVbG0CYFDwHPRUCvvlG70neSlMk+HmqsbbBZlEwDtMpahO/GKcSHIPSbc6
YIGMm2FyyTsIbEo1vmLmy35d9cgqFEF6nNFfoYSkzFUZX3teT5VqFNLr9YCGabmI
096uGUMjeUsoTeuRiUZu53ZlnFJ/R3Mhi18To82Uq8datX4x3d9e84T0cCZnmAxD
vAMjsbvWhhk/ScpASVtX7JyYXPLU9CoU
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:12:53 2025 by rpki-client