Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
File: HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json)
Hash identifier: YY0xHxJ3lU8lFxyHNMS3e1myUXhE3d/i5laOvXL4IqM=
Subject key identifier: 2B:DA:FF:6E:34:19:F6:1E:7D:00:AD:8E:5B:64:13:BC:45:33:D9:7B
Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8
Certificate issuer: /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
Certificate serial: 06CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
Manifest number: 06C5
Signing time: Thu 30 Jan 2025 22:04:27 +0000
Manifest this update: Thu 30 Jan 2025 22:04:26 +0000
Manifest next update: Thu 06 Feb 2025 22:04:26 +0000
Files and hashes: 1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: q6LWVtMI9oCspZIxPbiUsvNyJVbD2R2G9f5ylz55NDE=)
2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: wrLVWTfBY7EfCeqWtjAJjv+pu46Ld+Ri9uPM3Fhe0T0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
Validity
Not Before: Jan 30 22:04:26 2025 GMT
Not After : Feb 6 22:04:26 2025 GMT
Subject: CN=679bf76a-18cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:47:e6:2c:c8:45:e4:48:5b:7b:b9:62:94:
16:e9:77:60:7d:ea:ac:57:ff:9c:6f:6a:c9:aa:78:
87:e6:4e:14:f6:b7:90:c5:8c:cd:9d:c3:da:41:84:
e5:0e:57:a5:12:4e:3b:05:8b:74:b6:d6:7c:e4:cb:
37:e3:1a:b4:44:ed:be:d1:4d:22:da:19:76:42:bc:
37:33:60:bf:db:b2:25:20:63:3a:a9:e8:6b:da:e9:
17:7f:09:c9:a7:6a:9e:27:6f:a8:42:b2:e7:0c:08:
1d:a1:44:79:ca:4c:4d:89:e2:bb:79:ea:01:9e:73:
d0:63:31:89:1a:b6:12:cf:87:0a:4e:74:a2:22:0b:
56:1f:9d:69:bf:d3:47:ea:ee:fb:a1:88:88:d8:f0:
81:41:d1:d6:3d:a6:12:9e:32:83:48:6b:e8:31:e4:
3d:0b:84:0b:40:5d:9e:8d:c7:75:c2:51:d3:d1:d1:
41:c4:06:f6:25:38:cd:d5:a1:b5:94:6c:c6:13:33:
6e:70:20:3b:74:bb:a1:0d:b6:43:cd:f7:e1:83:9f:
c5:c3:bb:bf:bc:be:65:c0:44:c3:c1:9c:d6:b8:c2:
d7:2d:13:4f:6d:70:81:cc:98:2d:11:6e:e9:17:ff:
01:d8:64:07:5c:c7:dc:bb:ec:25:fa:cf:e9:75:58:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:FF:6E:34:19:F6:1E:7D:00:AD:8E:5B:64:13:BC:45:33:D9:7B
X509v3 Authority Key Identifier:
keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cb:62:9e:57:67:04:29:e0:dd:60:bd:bb:eb:ed:3d:9f:4c:
54:75:80:3f:52:09:c6:33:01:dd:64:cc:04:56:e4:e1:10:74:
4c:b4:6c:22:6a:65:01:fa:41:ad:98:e1:63:57:71:5f:c1:dd:
8b:7b:51:3c:23:6f:49:62:01:60:02:95:2f:67:79:56:40:75:
80:9d:f1:99:fe:9d:f3:6a:7c:3e:23:04:98:82:96:d7:17:44:
1f:44:24:eb:b9:13:48:c3:3a:f1:91:b1:06:70:88:1f:16:e6:
a1:6c:4c:52:75:8a:c3:eb:4e:e2:04:40:bd:81:0c:40:62:be:
d8:d8:5c:42:53:62:15:f0:49:f9:60:3d:ff:9d:2b:0b:6b:4d:
c2:16:73:e0:29:f1:dc:59:67:27:2e:0f:f1:cf:30:71:ef:5e:
b3:9f:aa:18:66:75:a5:d4:b1:11:01:6f:8a:a9:49:95:9d:c1:
07:85:17:d4:84:84:4b:1c:33:c8:f9:10:d0:3b:97:fc:0e:70:
44:14:32:55:bf:bd:93:ac:00:94:2d:d6:8a:f5:02:eb:0a:e5:
68:d1:77:37:af:5c:80:fb:4b:9b:b6:58:b4:db:ca:e5:8b:54:
e1:d2:f9:96:a8:7e:b5:2b:ea:86:f3:6c:ed:fe:c8:16:95:4c:
f5:2d:fc:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTEyNTcxMTAvBgNVBAUTKDFFRDc4MkJFNjJENzEwMTc2NjhCMjhBMzI2ODlFNDcw
RURBMjAxRjgwHhcNMjUwMTMwMjIwNDI2WhcNMjUwMjA2MjIwNDI2WjAYMRYwFAYD
VQQDEw02NzliZjc2YS0xOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApQhH5izIReRIW3u5YpQW6XdgfeqsV/+cb2rJqniH5k4U9reQxYzNncPaQYTl
DlelEk47BYt0ttZ85Ms34xq0RO2+0U0i2hl2Qrw3M2C/27IlIGM6qehr2ukXfwnJ
p2qeJ2+oQrLnDAgdoUR5ykxNieK7eeoBnnPQYzGJGrYSz4cKTnSiIgtWH51pv9NH
6u77oYiI2PCBQdHWPaYSnjKDSGvoMeQ9C4QLQF2ejcd1wlHT0dFBxAb2JTjN1aG1
lGzGEzNucCA7dLuhDbZDzffhg5/Fw7u/vL5lwETDwZzWuMLXLRNPbXCBzJgtEW7p
F/8B2GQHXMfcu+wl+s/pdVh2lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCva/240
GfYefQCtjltkE7xFM9l7MB8GA1UdIwQYMBaAFB7Xgr5i1xAXZosooyaJ5HDtogH4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTI1Ny9BOTBGMUVFNjQ0
MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVCZG1peWlqSm9ua2NPMmlB
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h0ZUN2bUxYRUJkbWl5aWpKb25rY08yaUFmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTI1Ny9BOTBGMUVFNjQ0MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVC
ZG1peWlqSm9ua2NPMmlBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBty2KeV2cEKeDdYL276+09n0xUdYA/UgnGMwHdZMwEVuThEHRMtGwi
amUB+kGtmOFjV3Ffwd2Le1E8I29JYgFgApUvZ3lWQHWAnfGZ/p3zanw+IwSYgpbX
F0QfRCTruRNIwzrxkbEGcIgfFuahbExSdYrD607iBEC9gQxAYr7Y2FxCU2IV8En5
YD3/nSsLa03CFnPgKfHcWWcnLg/xzzBx716zn6oYZnWl1LERAW+KqUmVncEHhRfU
hIRLHDPI+RDQO5f8DnBEFDJVv72TrACULdaK9QLrCuVo0Xc3r1yA+0ubtli028rl
i1Th0vmWqH61K+qG82zt/sgWlUz1Lfxc
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:46:08 2025 by rpki-client