Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
File: hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json)
Hash identifier: JI4BjxsCFb4JV4mcVypxY2Dz334JeEak657XHhT2KXU=
Subject key identifier: 85:E7:76:C8:9A:D4:CD:24:49:C5:37:44:66:D4:03:7C:82:10:78:EB
Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
Manifest number: B2
Signing time: Sat 29 Mar 2025 05:25:57 +0000
Manifest this update: Sat 29 Mar 2025 05:25:57 +0000
Manifest next update: Sat 05 Apr 2025 05:25:57 +0000
Files and hashes: 1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: bnTeBu4ABIPfHx1DLVZ3Wslk9SnCp93Yaf5H47XxZ2s=)
2: 894D6CDE1C3511EFA78E995CC4F9AE02.roa (hash: uii8sBoCCA9oMiaCp6gGjIs44iklY2+Z8HWMoERYSKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CFCE
Validity
Not Before: Mar 29 05:25:57 2025 GMT
Not After : Apr 5 05:25:57 2025 GMT
Subject: CN=67e78465-c067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:c9:60:c1:b4:f6:38:26:23:58:91:cb:3b:
b7:d1:6e:ce:f3:ee:e9:80:ef:b3:65:01:f1:06:8e:
8d:e5:f1:7a:33:4b:d6:5e:5a:4b:f1:6e:5a:7f:3e:
54:bd:10:56:18:a3:da:b3:e6:57:83:53:13:05:23:
37:27:9d:84:37:56:c9:ca:b7:8c:d3:f3:3f:52:75:
b3:39:b7:b1:9c:f7:e1:bf:0e:6f:ea:91:38:f1:c4:
8c:2d:c7:7d:63:32:97:8b:f9:07:41:44:20:a5:4e:
e5:1e:4c:3e:68:3a:4c:99:b8:13:6b:97:0b:31:84:
65:ae:eb:ad:37:7d:72:ce:d1:51:c5:18:a4:a1:df:
c7:87:50:f5:d8:6a:9c:0f:c8:4e:fd:7c:5e:07:b0:
99:d3:eb:34:e5:52:39:3e:b2:64:fb:c9:68:5b:47:
8f:5e:c6:0c:d5:b5:c1:4e:63:63:04:7c:bd:74:18:
9c:31:f3:de:f7:a7:a5:9e:26:fc:ab:68:31:82:8d:
b0:5a:ba:dd:51:60:f8:45:f6:06:73:13:c4:c9:ab:
5d:78:76:cd:8b:f5:eb:02:4f:7e:44:e9:45:b6:54:
57:0b:08:3c:f8:f4:64:82:2d:e0:d5:a4:c8:e7:4d:
40:1b:5d:07:09:87:80:96:50:6b:13:05:85:b4:3d:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E7:76:C8:9A:D4:CD:24:49:C5:37:44:66:D4:03:7C:82:10:78:EB
X509v3 Authority Key Identifier:
keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:ee:fa:de:91:3b:1c:7e:ff:91:70:16:37:84:94:8e:0a:d4:
f0:2a:20:d7:04:ee:0c:0c:f1:83:a3:5f:90:6a:86:42:c1:30:
3c:7e:2e:12:29:16:7d:13:d9:1e:8c:c5:07:39:ae:8b:84:1c:
f7:7a:07:ff:a6:4a:6c:09:0f:2c:bd:89:ec:20:3f:f1:0a:cf:
fe:db:d4:c6:53:07:25:b2:33:fa:b4:84:51:c1:c6:9f:a4:a4:
d7:29:37:7b:8c:e7:b1:fa:aa:06:89:a6:06:a6:b2:7f:2f:8e:
09:62:62:06:25:9a:42:3e:72:b5:02:69:0c:19:1b:2e:ab:21:
4f:20:ba:58:08:8b:b1:ca:5f:9a:d7:71:94:00:38:df:7b:9c:
c0:60:28:4a:5d:61:f5:5f:dd:c0:79:85:8f:75:9b:81:53:1c:
f6:2c:b3:9b:b2:55:e5:16:3b:d6:fa:ba:ed:0a:2f:ff:64:c3:
93:1c:96:7b:6c:c2:9f:a9:07:25:cd:84:3e:03:bb:e1:85:95:
f4:25:b0:52:60:e6:ce:c2:b8:18:a1:8c:fb:15:ad:57:40:ab:
e5:82:9a:04:81:fd:bf:e1:39:bf:0e:be:52:60:b2:b8:09:b8:
1e:2c:0c:9f:bd:cc:b9:2e:2d:73:cc:bf:73:9a:05:12:2f:1a:
92:60:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:38 2025 by rpki-client