Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json)
Hash identifier: TMU/KJyqejiykwHQz5ZKSkAx561EoBSsA7JaGjUwvRg=
Subject key identifier: D6:21:08:E2:C0:85:00:98:CB:79:88:2A:C7:A8:72:D1:34:BF:8B:80
Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Certificate serial: 053A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
Manifest number: 0532
Signing time: Thu 30 Jan 2025 23:33:17 +0000
Manifest this update: Thu 30 Jan 2025 23:33:17 +0000
Manifest next update: Thu 06 Feb 2025 23:33:17 +0000
Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: JI5MS6nNYDL/iwRwOUKufIGMbb9K24jyrLRcM7Ow3mA=)
2: 09182D38084E11EF89D29620C4F9AE02.roa (hash: ezYsgIsJQh8aISDzGTb2ynExMdrgWLQpdiVgohF5Bnw=)
3: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: kLrHarsAJe0BrznIqBMgdmpnUXMXpEfMItL+hhFxFSE=)
4: 08990BC0084E11EF89D29620C4F9AE02.roa (hash: i1fkph3atVfnVEbnt9xSvvG/cUJYGzp+on9uV8ITB20=)
5: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: cYehtuypxx/DqVciqwtyme0u/Ljft0WiF3QhRefDaVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1338 (0x53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Validity
Not Before: Jan 30 23:33:17 2025 GMT
Not After : Feb 6 23:33:17 2025 GMT
Subject: CN=679c0c3d-c6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:7a:9f:be:99:f8:3b:c6:6f:42:7f:12:df:
32:2c:6b:4f:b8:b3:75:2a:ef:2b:ed:7d:2b:b7:93:
f4:ee:89:85:6b:a8:6b:57:dd:9f:2d:c6:b1:85:bd:
1c:e0:8e:02:18:84:3c:a8:38:17:8b:16:e3:ca:5b:
9b:8d:93:36:8c:84:8f:2e:96:c4:74:1a:3e:99:3e:
2a:63:12:31:52:ae:41:5c:3c:8c:97:5b:0b:dc:12:
6c:a1:d4:84:08:10:e4:a5:45:ac:01:de:b8:78:da:
73:31:5e:4f:71:85:bb:7a:7e:5a:c7:15:f1:07:3d:
84:db:35:37:47:44:ab:8a:88:22:a1:d8:2e:d4:5b:
7c:1b:42:23:cc:30:7f:c8:3e:41:bd:71:fa:5d:37:
69:fc:17:28:84:fc:ba:f5:ae:8d:40:78:02:69:7c:
aa:77:1c:57:91:d1:00:8c:51:f6:de:cb:18:2a:b1:
d1:fc:e5:c3:0e:d5:02:b2:34:96:4a:c8:ea:d9:fd:
af:05:8b:cb:04:9b:0d:2f:a7:a7:43:07:37:70:17:
3a:5c:f7:26:64:6f:97:4d:09:d5:24:61:81:55:a9:
6e:97:ad:bc:79:14:1d:38:04:75:29:9a:8d:1e:d0:
cb:c1:43:18:43:4f:e0:e6:77:b3:d6:32:1e:f5:0a:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:21:08:E2:C0:85:00:98:CB:79:88:2A:C7:A8:72:D1:34:BF:8B:80
X509v3 Authority Key Identifier:
keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:66:76:a6:a5:ef:69:96:fa:0b:b6:e2:9f:f7:aa:de:aa:5e:
37:40:35:38:8f:d3:33:91:17:eb:5f:e8:52:a9:4f:05:3b:51:
6d:93:dc:d0:5d:8b:74:25:12:a2:ab:15:80:1b:fd:c0:4d:e6:
0b:bd:d6:7a:9a:3f:1a:66:4e:e7:a3:fe:ed:87:12:04:75:bb:
d4:b3:86:d0:38:04:61:7a:11:8b:14:0c:44:a7:71:2d:27:30:
49:d1:ac:5a:d6:a0:df:e9:1a:69:93:a2:a6:11:bf:3d:9d:43:
05:57:32:30:d3:43:23:fc:87:f4:6f:36:6c:78:84:f6:78:d8:
b1:6a:89:c5:a7:80:3b:12:0d:d9:da:3d:4f:76:93:52:23:8d:
3c:aa:1f:35:6b:78:83:68:e8:57:05:a2:00:26:06:08:b7:99:
9d:cb:c5:aa:e5:23:68:40:1a:0f:47:b9:d4:e6:74:a2:9e:c7:
c5:f3:fe:61:08:28:c2:4b:91:01:3f:22:3a:d1:df:fa:64:81:
6f:79:d5:b1:b9:f4:d5:5d:d3:7f:c2:06:7c:34:f8:46:aa:23:
9c:7e:57:9a:fa:a1:ea:fb:54:68:46:e4:4b:64:17:b5:c8:44:
cb:de:c3:af:ac:8c:dd:6e:84:ce:3b:45:64:83:1b:6a:d4:0d:
b9:3e:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:40 2025 by rpki-client