Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json)
Hash identifier: vErv0TI53VqxZ43CfAN6eWdnAixHp3G67zR36cWGU0o=
Subject key identifier: 9B:D3:4C:FF:86:E6:BF:AD:9B:55:D4:07:40:13:E3:07:7B:20:98:17
Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC
Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC
Certificate serial: 09BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
Manifest number: 09B1
Signing time: Thu 30 Jan 2025 20:06:25 +0000
Manifest this update: Thu 30 Jan 2025 20:06:24 +0000
Manifest next update: Thu 06 Feb 2025 20:06:24 +0000
Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: D0SqejUre/tGFL2gP4TsSUXlOWE3ESLebbxk1trMBcw=)
2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: pkQyF6/gfOZsdS2FZ7pXb1wwkEQgEQkFPici094hylM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2491 (0x9bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC
Validity
Not Before: Jan 30 20:06:24 2025 GMT
Not After : Feb 6 20:06:24 2025 GMT
Subject: CN=679bdbc1-48c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:b0:d1:95:0e:dc:2b:4e:0b:d4:88:91:8f:
4b:27:c4:7b:2c:14:40:b2:8c:6a:a5:89:70:7f:7d:
2e:cc:41:26:40:37:ad:13:b7:6b:02:2a:f2:57:a2:
29:39:e1:b8:0c:21:41:52:df:f2:ad:69:6b:d4:bc:
29:f1:33:3b:73:1f:3f:8e:49:8e:de:7e:a0:74:6e:
20:64:16:60:cb:5e:3a:a2:33:f2:6c:97:59:77:aa:
2f:c2:90:77:7b:66:d3:e8:2e:2a:bc:c2:c0:70:1b:
1b:9e:37:44:85:90:0b:fc:8a:1d:f7:d3:a4:01:db:
b2:a9:81:aa:f5:38:d2:00:cd:23:f0:2b:7f:40:16:
ed:05:8c:5e:b6:2a:7f:df:86:8f:4c:12:33:e6:7b:
dd:4f:30:2e:0f:05:6e:a1:2f:53:e0:1b:a0:fb:53:
8a:8f:5e:af:6e:0e:d8:89:bd:1b:c7:46:f1:6e:12:
e2:6f:46:f9:3d:5d:13:9a:71:bc:92:51:46:64:23:
9e:07:2f:42:ae:ec:b4:49:b8:a3:b3:d1:37:53:09:
77:b1:59:92:a7:a6:44:ea:9a:ef:23:50:58:0a:83:
74:f7:20:6f:6f:f5:67:88:d6:ea:ec:06:cd:3e:e2:
e6:25:d7:d5:02:d5:e2:8c:80:48:9c:ae:7b:fa:fd:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D3:4C:FF:86:E6:BF:AD:9B:55:D4:07:40:13:E3:07:7B:20:98:17
X509v3 Authority Key Identifier:
keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:16:33:ff:07:f1:7e:b1:02:9c:6f:8d:f6:c7:88:16:ee:a7:
aa:55:f7:e1:21:17:5b:4d:ad:a8:75:2a:3e:fd:b7:f7:46:ac:
c1:48:52:5a:3b:bb:5d:e9:63:5f:a8:16:a7:30:13:cf:97:34:
9c:6b:7d:f0:79:25:d8:be:5d:9e:16:5f:c0:60:b4:27:e2:c1:
83:1c:90:69:d6:a9:65:4f:26:e7:3e:4f:9f:ee:0b:b6:bb:e9:
e8:c7:a5:2f:e8:89:13:ab:a2:08:69:02:35:a5:f5:93:6c:dd:
0a:15:59:e5:b5:16:36:85:a0:22:4f:40:bd:89:1c:68:00:b8:
33:8d:e1:7f:6b:e8:bc:05:58:cc:72:b8:3a:ce:c9:0e:3c:4d:
e7:6f:b1:7b:ce:a5:9d:aa:f2:6e:70:79:59:c7:94:27:d2:ab:
19:fc:27:c8:42:aa:d6:f6:26:25:e9:e0:21:10:5f:4c:6e:5f:
92:ff:47:90:10:05:71:24:b6:2e:17:eb:95:88:1b:e9:c6:52:
08:0b:a4:36:8e:8e:30:45:3d:3b:10:e9:de:ba:9b:af:7c:c6:
28:4c:c7:14:95:59:a3:4a:83:ef:3d:2a:ef:81:36:ed:e5:28:
55:28:7f:dc:d8:a5:7b:3b:b3:83:82:4a:91:eb:f2:a3:31:ed:
0c:97:53:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:36:53 2025 by rpki-client