Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft
File: h2oHnURPUsZNYGBMzHT5XwitpUc.mft (raw, json)
Hash identifier: mSHtI8ew0TG93jyEawmD9KszZVIStkEUhItym+XFp/0=
Subject key identifier: 1E:D0:1F:91:30:47:29:83:BE:E0:A8:F4:00:8F:3D:6E:0E:E0:F2:EF
Authority key identifier: 87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47
Certificate issuer: /CN=A91EB527/serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547
Certificate serial: 0307
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft
Manifest number: 02FE
Signing time: Fri 31 Jan 2025 01:21:07 +0000
Manifest this update: Fri 31 Jan 2025 01:21:07 +0000
Manifest next update: Fri 07 Feb 2025 01:21:07 +0000
Files and hashes: 1: h2oHnURPUsZNYGBMzHT5XwitpUc.crl (hash: lp+jF9Lh9RxL0AV2NFNCMieVDBdkM37KMN6wsDJK8X8=)
2: 408045262AAA11EE86A2063BC4F9AE02.roa (hash: KULh3Cwj4pTsQ4NdFS2oaGBEZ1LXp6l0HQDgLQQ16OI=)
3: A9D7005CA94111EF9CC46F2FC4F9AE02.roa (hash: dxGl/7gfmwIzrpPvuQV22Q3Xb8qBR16UFLioFibE54M=)
4: 7AE355C0A94111EFB4F9A22EC4F9AE02.roa (hash: /XL7p2Q1hHPtidLAFeXIsJVDG0l7K1bzPg/w/IkAkqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 775 (0x307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB527/serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547
Validity
Not Before: Jan 31 01:21:07 2025 GMT
Not After : Feb 7 01:21:07 2025 GMT
Subject: CN=679c2583-c33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:c2:7e:63:8d:a9:0e:ef:e8:a0:6d:7d:52:
8b:00:09:2d:71:bf:4d:2c:71:bf:52:cc:aa:ac:6b:
89:de:fe:19:77:8f:36:47:f7:0b:c7:83:32:5e:3b:
ed:45:1d:5f:cc:51:c2:51:7f:f1:23:3c:d1:1a:f6:
f7:38:19:45:11:7d:09:66:f2:66:e6:8e:74:18:3f:
ba:2d:91:d3:df:22:0c:8f:4a:f2:d5:c4:9f:55:02:
81:31:06:16:8d:ad:94:ee:2f:f8:7a:5d:a3:ac:e8:
69:2f:21:5d:fa:ba:83:88:e7:c4:28:8c:21:84:fb:
f4:0c:e3:f0:10:82:f6:99:53:eb:8f:f8:b2:e2:cf:
04:66:4e:e6:59:e5:2d:8d:54:ef:b2:b7:c7:9e:ee:
4c:b8:a1:fd:d1:42:b6:60:a3:27:39:93:76:ab:e0:
ae:af:86:1a:c5:c1:64:d0:28:26:64:18:ff:85:aa:
3a:62:46:4a:0d:f9:a8:21:c8:3d:d5:dc:1d:7a:f2:
76:b7:1c:f3:3d:cf:f4:71:d5:f3:6f:30:fd:f1:56:
cd:97:63:aa:0f:34:9d:73:16:05:11:67:ef:e2:87:
e5:0f:3f:5a:ea:b2:b3:de:df:1a:da:36:71:66:b0:
83:d1:bb:00:01:a4:05:37:ec:09:a7:f2:43:1d:07:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D0:1F:91:30:47:29:83:BE:E0:A8:F4:00:8F:3D:6E:0E:E0:F2:EF
X509v3 Authority Key Identifier:
keyid:87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:10:56:9c:30:c6:f5:21:09:fc:7d:b8:a6:f6:e9:bc:57:e8:
2f:52:6f:6e:09:84:5b:01:f6:bb:e4:53:5f:24:15:b2:ab:3c:
98:9c:1c:0d:b2:f2:43:12:5b:76:9f:d0:3a:03:ed:fc:89:2c:
25:90:5a:d1:63:06:d3:7e:1f:63:55:b8:f0:3c:9a:cb:e0:4f:
6b:0a:db:22:f5:cd:4a:81:30:1b:20:5a:4c:e0:81:47:06:e8:
6c:a6:a3:16:53:5a:b9:e6:28:b4:1a:d9:c1:45:29:81:45:e7:
7b:78:df:3c:76:02:21:93:af:f7:a6:ed:3d:73:49:a4:a0:64:
99:3f:18:df:da:64:33:31:90:7c:e9:f6:85:a8:92:5e:f0:6c:
67:b2:e5:09:db:c5:39:89:db:40:e6:5e:91:52:8e:2c:6f:03:
38:69:07:ed:54:60:76:30:be:0b:d4:93:a6:d7:c5:0e:63:96:
ff:18:9b:ab:17:47:fc:84:ec:83:81:c8:33:03:17:85:10:e4:
78:89:69:6a:cf:c4:d1:6c:8c:db:73:2c:6b:75:ff:f3:41:a9:
87:af:50:ae:7a:43:b2:22:cd:75:1c:02:b1:f8:88:5e:a1:9f:
34:94:24:4b:46:d1:40:a1:4e:fb:ad:8d:14:5c:8c:59:4d:e7:
a6:fe:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:40:08 2025 by rpki-client