Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
File: HmHgACzkS79ZVTyASgrJEub-vzs.mft (raw, json)
Hash identifier: I3CgI4DLlN6V0jo7mAAmGdDiQx9f25cbw+0WKmaHoPc=
Subject key identifier: EC:A2:83:9B:B4:5F:92:EC:23:24:F6:80:7D:40:F3:D5:99:1B:D2:3B
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Certificate issuer: /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
Manifest number: 01FC
Signing time: Fri 31 Jan 2025 02:11:44 +0000
Manifest this update: Fri 31 Jan 2025 02:11:43 +0000
Manifest next update: Fri 07 Feb 2025 02:11:43 +0000
Files and hashes: 1: HmHgACzkS79ZVTyASgrJEub-vzs.crl (hash: SVXFOhGaVdKGJPEl+TVtaW/9yWjWHlEeQaBIXIJKFhE=)
2: 654307DC26CC11EDB395A078C4F9AE02.roa (hash: hGQixG8nIJXVA0JQORYC8z0pOj4UbTutn+kvPqmH25s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Validity
Not Before: Jan 31 02:11:43 2025 GMT
Not After : Feb 7 02:11:43 2025 GMT
Subject: CN=679c315f-a24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:19:2b:fe:72:35:9a:00:1c:09:d4:f4:33:
ea:ab:88:89:3c:58:13:9e:b8:7b:a5:cb:3f:50:f5:
38:ce:b0:95:ba:08:7a:0d:14:36:63:f7:71:73:54:
91:1a:ee:2e:d6:43:fa:78:48:1f:82:5d:a8:80:e5:
ef:75:b5:c6:56:90:c6:6b:3c:76:74:ad:57:7f:d7:
7d:17:94:be:56:d8:ee:2b:3b:ab:43:0e:d4:4d:36:
46:93:5a:ec:fc:68:af:e9:b3:ec:d3:5b:64:cf:f9:
79:43:65:e7:2f:9c:5e:fe:3a:54:62:60:0e:65:98:
cd:f9:d9:28:5a:da:dd:62:4e:df:d1:4a:be:e7:62:
2b:c0:84:b8:2f:9b:73:c2:a1:cc:01:f1:ae:d6:fc:
e1:0c:f4:d5:a1:95:24:59:9d:aa:07:35:71:65:54:
6d:22:39:cb:50:28:0f:17:b2:f7:27:9b:59:38:ed:
1e:25:d6:7d:23:db:f6:67:a9:b7:29:1a:df:07:ff:
98:14:41:04:8a:5b:3f:c1:32:54:32:60:bc:a4:fe:
b0:ed:e1:31:4a:63:c5:64:67:11:5f:ea:b2:bc:59:
3f:dd:d7:08:41:4d:a9:d3:19:50:d4:16:32:38:19:
3c:fc:d2:35:51:00:5a:8b:f6:63:61:5d:59:ae:ce:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A2:83:9B:B4:5F:92:EC:23:24:F6:80:7D:40:F3:D5:99:1B:D2:3B
X509v3 Authority Key Identifier:
keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:36:d6:2c:83:be:e2:f8:40:61:d2:64:33:06:de:1d:5c:3a:
65:07:50:01:23:5d:20:96:a3:ed:66:a3:dc:9b:f8:97:b3:77:
c3:3e:50:2a:d4:91:c8:4d:2a:65:a8:ef:34:2e:47:3d:e9:ea:
83:97:68:0c:ae:00:64:a4:3a:d9:1f:2e:29:25:00:1f:17:88:
01:46:5d:c1:e6:72:f4:47:9f:6f:53:a6:c2:cf:cd:fa:9f:3a:
aa:c4:44:6b:b4:d0:2c:d2:93:f8:82:ce:72:ce:3c:b7:f4:7c:
29:9b:66:04:f5:cd:10:0e:02:d2:24:f1:bc:a7:98:f3:71:5c:
3a:ec:c4:26:85:6f:23:06:d4:4c:0e:ba:16:8e:61:46:9b:57:
fa:d4:6a:47:e9:31:76:01:ab:a8:13:a5:67:b1:0a:50:74:0c:
b6:bc:12:8f:fe:2c:57:fe:bd:e6:70:34:b5:1b:7d:41:6d:54:
f5:2e:a4:f8:e5:49:88:57:96:e0:bc:6c:b8:45:1f:d7:cb:43:
59:74:7f:9d:07:1c:73:c5:a9:70:09:69:76:9e:1c:b4:d5:d6:
f1:6b:4e:07:07:eb:01:ab:ad:a8:3f:9a:63:35:71:22:dc:1a:
f2:70:b6:2f:62:a5:5d:5b:8c:20:40:66:80:9d:46:90:14:0c:
b3:de:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:27:23 2025 by rpki-client