Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft
File: hsjX-0IuFSejmUSD0fne8sYKMHI.mft (raw, json)
Hash identifier: KE6HGZXL6k2I1R8SzktmN+L9FsJi20oFAAGlSNV/NMc=
Subject key identifier: 89:DF:29:39:5A:67:3B:24:53:9F:95:67:7B:D3:0D:DE:52:97:62:47
Authority key identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72
Certificate issuer: /CN=A91BEB11/serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072
Certificate serial: 3463
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft
Manifest number: 3463
Signing time: Fri 28 Mar 2025 15:00:43 +0000
Manifest this update: Fri 28 Mar 2025 15:00:42 +0000
Manifest next update: Fri 04 Apr 2025 15:00:42 +0000
Files and hashes: 1: hsjX-0IuFSejmUSD0fne8sYKMHI.crl (hash: Zr+yKpE0WLb85PH6NXQdvsKC8c+sT1epbOueEdQoKKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13411 (0x3463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEB11
Validity
Not Before: Mar 28 15:00:42 2025 GMT
Not After : Apr 4 15:00:42 2025 GMT
Subject: CN=67e6b99b-978b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:a0:59:43:f5:cd:d7:8b:96:50:d9:57:ce:
9e:2d:c0:1e:af:2b:d2:af:11:b7:ff:ae:c5:6c:6e:
42:d9:37:46:fa:d2:9b:6c:93:e9:4f:3e:5d:be:da:
45:47:91:97:82:e0:2f:bd:b7:52:45:cd:62:07:72:
1e:ec:3c:e2:e7:a7:5b:b3:45:01:b4:18:18:49:ea:
d3:14:05:0d:ed:a2:45:e7:42:f5:c9:56:9e:3d:90:
9f:f9:8c:f0:3b:12:a0:9f:d5:3d:0c:a6:ad:a3:e8:
fc:5f:50:05:68:70:48:14:3f:f3:e3:c9:6d:06:9a:
b6:dc:90:1e:c6:9d:8f:e7:0f:74:09:a0:d7:62:86:
e4:37:5e:8d:f3:ec:f2:a7:b8:d7:91:14:0e:7f:c5:
f2:47:15:7d:9a:7a:02:b4:ad:6f:12:fc:2b:bb:15:
b5:7e:b7:cd:59:99:30:22:5a:1a:d1:2f:c3:a2:f7:
c3:ba:7d:fb:98:2c:ab:01:12:32:f6:34:2b:33:5c:
99:19:b5:4f:5d:b1:94:a7:e4:b5:b8:89:b2:29:91:
64:e2:1e:83:6a:83:51:94:1c:d3:87:43:78:38:e5:
5e:ba:fc:d3:12:bd:2a:9a:90:a9:6a:8a:14:41:34:
22:cb:26:21:b6:d0:ef:14:49:e8:a2:d8:fd:be:fb:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DF:29:39:5A:67:3B:24:53:9F:95:67:7B:D3:0D:DE:52:97:62:47
X509v3 Authority Key Identifier:
keyid:86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3a:97:28:df:41:83:7c:cb:6e:1e:3a:e4:28:45:6c:88:bc:
73:eb:f7:fb:86:7b:3c:53:9b:96:b3:34:38:0c:2f:10:8b:15:
8f:cd:a8:63:6e:ff:ac:a5:21:1e:1e:1f:bf:cd:46:5a:0a:c0:
df:6a:bc:df:2e:c4:1b:f5:5a:a7:cf:ff:3f:ad:4c:1e:5e:57:
a1:d6:44:a9:eb:bf:14:49:d9:fc:39:d3:62:14:ea:88:bc:5c:
da:ea:ac:c2:20:b5:d4:5f:78:5c:ac:18:bd:d0:82:f8:3b:a9:
15:c3:ed:18:92:e3:94:ed:7e:4f:13:b0:2e:1b:22:43:02:20:
c4:7a:26:d1:b4:8d:7d:2b:2a:e7:d4:39:22:49:5d:e1:17:9c:
b6:9b:2e:c3:55:12:cd:77:82:39:0e:82:40:8e:d7:8e:8c:bc:
cf:4b:3b:12:4b:5a:d5:61:29:33:24:57:0a:19:40:d0:9d:86:
95:11:e2:56:b0:65:e3:c5:83:24:58:51:c7:3e:0f:cf:ff:b0:
9d:99:0e:45:f0:10:e9:43:e2:34:00:aa:9f:5f:a5:58:7d:f7:
19:4d:18:3a:a6:c3:84:0e:5f:c0:2b:fb:88:77:97:ac:e9:aa:
6d:f2:80:39:bd:df:4b:05:7d:de:d7:6c:b2:d4:47:45:75:f9:
5a:e4:e1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:39 2025 by rpki-client