Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json)
Hash identifier: ZBMHQbWdJ8tvfkI0xiXyz37PJc6TdVPyP7518qJXl8M=
Subject key identifier: 5C:0D:32:AA:35:79:34:D7:C6:9E:78:9D:DE:27:2F:94:CF:C1:27:89
Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
Certificate issuer: /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Certificate serial: 3464
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
Manifest number: 3459
Signing time: Fri 31 Jan 2025 14:59:32 +0000
Manifest this update: Fri 31 Jan 2025 14:59:31 +0000
Manifest next update: Fri 07 Feb 2025 14:59:31 +0000
Files and hashes: 1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: FsKG1wWK6gbWB/A/ve4xxxMn1h8GtHUMr+w1jpwB1l0=)
2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: alhBAf8jvRhFefsbDXOa8VjrZGUtci5WGYLgfA9nSPA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13412 (0x3464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Validity
Not Before: Jan 31 14:59:31 2025 GMT
Not After : Feb 7 14:59:31 2025 GMT
Subject: CN=679ce553-35c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:26:b1:de:64:a5:f3:ef:51:a8:00:91:11:
25:e3:71:bc:77:9a:70:3b:7d:3a:e1:3c:e8:33:90:
85:b6:54:3f:e3:6f:d7:7b:b1:1f:75:88:ac:f4:a9:
be:f7:1c:2b:ff:db:38:5f:f2:07:f7:6c:02:0c:04:
35:7a:93:9b:b8:65:87:56:5a:44:8f:41:44:d3:c3:
f2:8d:2e:3e:ff:3f:71:63:08:16:50:fd:b1:99:c9:
ee:83:e8:2b:95:b1:6b:db:70:00:12:4d:58:d2:76:
3b:9a:39:c6:06:96:19:f5:b2:21:8a:20:ec:61:4b:
48:b3:86:09:ba:7d:5f:53:17:de:4b:c3:5d:98:1f:
83:a6:4b:ef:48:ff:3d:f9:5f:aa:5f:1e:81:80:0e:
4a:2d:7b:92:25:2a:57:71:5b:ea:8e:b5:5d:da:b8:
6d:2a:39:46:8a:c7:f4:1f:ef:f3:07:bf:f5:76:3c:
2d:b4:f0:1c:d5:db:d8:98:e4:97:ad:d8:a2:05:86:
7e:38:e0:c5:16:e7:da:a1:4c:f2:89:3b:cf:11:17:
1d:c8:47:46:af:be:4a:39:84:a9:ad:8c:fd:bb:d0:
4c:27:c2:3a:1b:fa:66:37:c8:a9:85:1d:aa:45:42:
3a:ab:36:17:d5:45:9a:5d:40:67:3c:c4:c0:e9:8f:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0D:32:AA:35:79:34:D7:C6:9E:78:9D:DE:27:2F:94:CF:C1:27:89
X509v3 Authority Key Identifier:
keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:fe:59:ee:74:dd:a3:ef:de:8c:8a:28:a4:7d:62:9a:a2:04:
a9:2f:9a:a8:6a:43:9a:1c:97:03:af:ad:68:94:f7:51:80:88:
d4:5d:01:12:aa:49:50:12:c3:09:f8:7e:1f:28:75:cf:9f:cd:
ef:e8:eb:a5:d9:36:ee:a1:46:35:76:f3:90:0a:ec:54:34:df:
d1:57:07:d3:8c:f1:aa:58:15:d6:06:d0:3b:20:68:98:73:55:
ca:f7:2a:8c:70:02:f1:bc:85:ac:83:41:4d:ee:af:07:d1:79:
4c:1d:a9:e5:bd:3b:1e:0b:51:be:77:70:f6:d4:43:cd:dd:e6:
11:0d:62:1b:c7:3b:4d:0c:e1:a8:ab:ea:0b:2d:7e:57:b8:01:
f7:b0:ef:dd:4e:15:f5:50:c2:bb:a7:5e:05:cc:d1:49:4b:c4:
d0:10:f4:a0:f1:33:41:75:cd:41:60:3b:da:a1:0f:af:54:c9:
c7:7d:d8:cf:c0:28:10:65:f7:94:60:a7:64:dd:e7:88:d6:fd:
d6:e9:b8:18:63:4a:de:2f:94:98:00:5d:f2:2b:c2:b3:de:10:
b8:08:b9:ca:9a:6b:3e:d8:12:7a:ae:a6:ab:8b:e6:9b:37:75:
7a:ed:b2:15:45:a3:89:d6:97:3c:13:59:61:04:ab:e4:b4:e1:
cf:6d:05:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:03 2025 by rpki-client