Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File: Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier: qqNpMUlLjswgIOUSy4wtWyiy13xXqeNJBIS1lXXP7ms=
Subject key identifier: 9C:4A:5B:91:13:1D:78:8B:84:F6:FE:57:C2:09:DE:81:58:62:0F:BF
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial: 06B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number: 06B0
Signing time: Fri 28 Mar 2025 22:26:14 +0000
Manifest this update: Fri 28 Mar 2025 22:26:14 +0000
Manifest next update: Fri 04 Apr 2025 22:26:14 +0000
Files and hashes: 1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: lLw3BE6M5cdTmfFUMGcx+z9+CJkr7/a+fE7C0R7QiJQ=)
2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: fGJYrfdMmxnMU9m3ImkorOWGB4M3nyP+3+G+aL2cIE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1717 (0x6b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8D
Validity
Not Before: Mar 28 22:26:14 2025 GMT
Not After : Apr 4 22:26:14 2025 GMT
Subject: CN=67e72206-2b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:56:b6:3e:f2:89:28:6b:f6:33:10:0e:7f:
36:43:1f:d7:15:52:73:3a:62:1d:49:13:75:f6:ce:
87:12:a3:f8:e8:15:ec:d8:ba:3e:0d:7c:02:6a:96:
7e:5a:05:2b:5a:bd:c2:00:ec:2f:45:09:b7:ef:7b:
e7:96:f0:57:a3:b9:b0:97:01:13:b4:84:d2:03:f1:
43:06:7d:78:74:44:cc:c9:5b:9e:e7:e9:8c:00:3f:
c1:f0:b0:41:36:6a:a1:59:91:1a:2f:6e:a6:03:5a:
eb:c3:d4:5f:03:63:58:49:85:46:7d:89:17:51:b1:
49:98:ba:7d:3b:54:1d:30:00:95:35:5e:a6:97:32:
9e:ab:d1:65:a6:3f:82:bb:b0:a6:75:2f:b8:24:4e:
e8:14:64:3d:22:7a:6e:7a:a5:65:7d:22:2d:9a:c8:
62:01:8e:39:89:ad:fc:86:2c:bf:7f:fc:d1:8e:17:
7c:7f:e6:d3:0a:8e:85:9a:86:d1:0c:37:61:83:9a:
fc:b7:2f:d1:ee:5f:06:3b:83:16:d5:7e:6b:6a:31:
c1:9b:af:ae:87:e1:06:ed:cc:97:e4:09:d0:ba:e9:
51:b8:df:b3:e3:17:5c:c0:ff:eb:f3:ed:9c:75:6f:
34:3a:2f:a2:5a:ae:e2:a1:05:0f:a5:24:6e:54:28:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4A:5B:91:13:1D:78:8B:84:F6:FE:57:C2:09:DE:81:58:62:0F:BF
X509v3 Authority Key Identifier:
keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:2b:2b:8b:f0:74:bb:a2:67:69:ec:76:03:b2:e2:09:9d:cc:
79:9b:6a:d5:40:7f:44:3c:aa:0b:99:af:d1:c6:9a:45:76:ce:
4b:f2:01:06:28:86:7e:5b:46:39:de:e0:b8:d3:c0:d5:6a:c1:
b9:79:85:71:5d:6c:4a:38:19:b3:e2:11:3a:22:37:61:0a:d4:
e1:06:35:46:43:b3:a1:89:9c:70:ea:f3:d8:38:b9:e9:b7:5c:
23:24:7e:1c:05:e1:37:cd:38:55:f4:ae:19:27:cb:a4:25:7a:
ba:3b:28:43:32:33:20:1d:28:f0:e1:a7:ee:1f:d3:c2:4c:aa:
06:65:d3:01:b5:d2:69:33:98:8e:5e:64:07:ce:e4:c7:05:a2:
2d:8c:c2:78:71:53:57:13:fc:ea:17:8f:04:8e:17:50:b8:25:
ea:fe:4b:c8:6d:d5:8e:cf:e7:09:e8:07:a8:08:a9:b6:99:65:
d8:88:e4:a0:1f:73:ca:84:41:64:bd:ff:f6:29:f2:29:9f:32:
ae:fd:b4:d3:c2:73:e0:86:43:ba:85:8d:2f:81:38:02:1c:39:
b1:23:ee:f6:c7:21:93:3c:27:0c:ab:3c:ba:b8:31:b4:17:c4:
f4:33:1b:4d:65:e4:dd:e8:b1:fa:a9:b7:06:8c:df:4a:b9:eb:
6a:73:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:41:51 2025 by rpki-client