Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json)
Hash identifier: LVpi4bWT3Vwpi7BT0vk0amAlz3W2O1HbXdtFwIPTKjs=
Subject key identifier: 11:C1:AF:C0:F1:CD:0F:DC:70:88:E0:E9:E6:A1:6E:B8:68:7F:AD:8F
Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F
Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
Manifest number: 0177
Signing time: Sat 29 Mar 2025 03:20:51 +0000
Manifest this update: Sat 29 Mar 2025 03:20:51 +0000
Manifest next update: Sat 05 Apr 2025 03:20:51 +0000
Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: fNpj6AfKFt28m/Y5sKyIXvRZ/HIqV8/98TrNRPptcQY=)
2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: k8fn8kaAVqX+FyPeWprQ1+C6X5Mp6iWOh3NubB8x45A=)
3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: 63Cg8UWmGVPjQtQwAhVDY7/yUPc1L0LYA1nO69mjsoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E5F6
Validity
Not Before: Mar 29 03:20:51 2025 GMT
Not After : Apr 5 03:20:51 2025 GMT
Subject: CN=67e76713-8de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:a6:8f:be:45:15:4a:a0:53:a5:58:65:f1:
c1:f1:9b:6d:b4:01:48:2b:d8:e1:52:bd:78:5f:ff:
b1:dc:ea:a4:47:ca:2c:c0:21:6d:af:b5:1d:33:82:
35:63:ac:c3:b5:64:80:14:3c:ac:9c:54:ca:0d:16:
d7:55:45:c0:4f:3f:a7:c4:d5:50:86:75:26:60:52:
81:69:a9:65:be:c6:40:46:c1:7c:91:ce:9f:3f:33:
f9:fb:84:48:74:34:93:42:27:77:bd:b8:dc:40:fa:
82:f8:f2:ff:4d:e7:fd:5e:3a:37:9a:46:c6:27:fa:
35:d8:09:26:64:b9:53:20:05:3e:1e:1d:fa:f4:d4:
c4:69:71:da:73:80:ee:79:74:30:c7:a5:19:05:c1:
d0:33:1f:8a:7b:17:c7:5d:ff:ca:b9:20:45:8a:48:
12:f3:02:f8:f5:f8:2a:9e:ae:90:1c:69:8e:30:86:
f7:01:94:d1:53:56:b4:02:b1:d6:71:59:62:ea:bf:
35:f9:bf:3e:4a:28:2a:f5:ad:e3:90:82:28:06:a7:
ad:5a:9a:7d:81:52:8b:3b:36:c5:fc:b4:40:a6:7c:
e8:1e:4b:ad:08:27:a5:04:a6:b6:57:98:43:1e:53:
f3:12:44:2c:c6:50:40:df:e0:8b:4c:7a:71:e6:f2:
71:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C1:AF:C0:F1:CD:0F:DC:70:88:E0:E9:E6:A1:6E:B8:68:7F:AD:8F
X509v3 Authority Key Identifier:
keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4e:89:ee:b1:6d:84:16:5b:c2:8c:19:26:29:5a:d4:8d:51:
04:4b:be:58:ef:ff:ea:4e:4d:46:e8:2c:03:dc:e3:fb:22:10:
7a:e5:8b:c9:5b:fa:f4:8d:d9:0d:06:6e:3a:2c:1b:61:80:a5:
c1:e2:d2:85:9d:bf:8d:59:90:5d:10:50:d0:96:95:2f:43:c3:
dc:a2:f3:40:b6:f3:40:7a:13:bc:b6:e8:87:77:ca:8b:d4:c2:
e4:54:97:3c:8d:b9:7d:64:f6:d1:44:7c:9a:41:1f:ce:1a:75:
bc:81:7d:05:2e:e5:0a:ea:7f:1e:78:61:27:c2:0e:6c:6f:98:
22:67:32:6f:e4:02:0f:a8:3e:48:e0:e3:72:81:c3:15:7f:4e:
f9:86:c9:82:c8:b7:be:f6:e8:8b:84:1f:28:83:9b:c8:aa:3e:
6e:4e:82:79:13:a8:da:fc:2d:d2:94:6e:50:b9:8a:86:91:37:
4c:d3:8a:79:76:28:ec:8c:2d:de:55:3a:71:65:1f:2c:9a:cf:
f2:1c:06:92:1b:7e:df:4e:68:f5:90:5d:1f:56:73:28:62:10:
fe:78:e9:d2:5c:44:7c:f6:3a:c2:8f:3f:48:d3:5b:46:57:c9:
f7:b0:8b:8e:fb:9f:ed:98:52:0a:ea:3a:36:fe:92:22:30:af:
2b:c1:61:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:35 2025 by rpki-client