Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
File: HLS_2cCnMryPSmDIaUyR-DTKvBM.mft (raw, json)
Hash identifier: 88EYVq3LFEU4YX8BYaEJa0SJ+D0MmhIjm/gDjhX4Z1Y=
Subject key identifier: 6C:5E:29:4A:97:A1:FB:DA:C8:3E:43:0C:CD:50:16:82:D7:02:4B:03
Authority key identifier: 1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13
Certificate issuer: /CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13
Certificate serial: 08C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
Manifest number: 08BB
Signing time: Fri 28 Mar 2025 21:13:54 +0000
Manifest this update: Fri 28 Mar 2025 21:13:53 +0000
Manifest next update: Fri 04 Apr 2025 21:13:53 +0000
Files and hashes: 1: HLS_2cCnMryPSmDIaUyR-DTKvBM.crl (hash: CAWqfLVmWYAGV6LjOYGgcJ9wQX1oZ6p696YLgO2KypM=)
2: 3C52563E781F11EE9787607FC4F9AE02.roa (hash: iGx2/OJLyjhg1Fasnl64EO8+YlI70PVJOH1c6PHse0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242 (0x8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D83D0
Validity
Not Before: Mar 28 21:13:53 2025 GMT
Not After : Apr 4 21:13:53 2025 GMT
Subject: CN=67e71111-561b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:1f:21:f3:05:67:dd:48:1a:4a:a6:ea:d8:
83:6b:e1:73:e3:39:43:69:4f:a0:96:34:57:18:2e:
c1:63:c3:e2:67:86:a9:4e:10:fb:ee:a7:51:92:a7:
91:c4:a1:db:63:29:22:27:ef:47:95:24:83:19:3e:
6c:ce:c3:17:df:dc:41:72:7f:24:8e:fe:8f:b5:b0:
8c:de:d5:11:1a:8d:b3:30:e8:b3:01:c2:ee:06:12:
f0:9a:d8:90:fc:f8:4d:a6:ef:f9:9e:ea:13:ed:31:
29:7e:fe:ae:63:50:54:d6:ea:df:5a:a1:4f:f9:65:
c3:d9:2a:b7:46:48:c0:97:e0:a1:4e:1e:b7:03:95:
c8:cf:c8:72:ab:17:b7:4a:06:7f:cb:82:a5:d0:61:
5c:6e:63:a3:03:50:f0:0e:0a:c2:31:3f:01:29:f4:
bd:d2:0c:cb:96:6e:d2:22:c0:36:5a:ee:f7:ba:fb:
d3:6d:69:f2:69:7c:8d:7c:80:6b:63:bb:77:23:03:
c8:25:b2:f2:9c:e0:58:c1:33:5e:9c:32:f9:44:a3:
2e:ce:79:e9:4c:9f:97:ce:2c:c4:f0:f0:e7:3c:09:
89:6d:e7:60:3d:7a:73:43:d5:08:ad:ef:01:87:3c:
c3:bc:0a:d7:16:5e:d8:e3:64:2c:63:fd:f6:52:48:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:29:4A:97:A1:FB:DA:C8:3E:43:0C:CD:50:16:82:D7:02:4B:03
X509v3 Authority Key Identifier:
keyid:1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f3:92:44:10:26:81:64:a8:79:57:76:6a:5e:5b:7a:bd:d9:
68:44:f3:93:7d:7b:be:56:a9:36:cd:cc:c4:57:e1:11:63:f2:
5b:6a:41:5f:1a:c5:30:27:4e:6d:36:f6:35:72:47:7a:62:b1:
61:d8:48:42:2a:db:cb:25:ad:51:90:30:55:60:19:ba:2d:7f:
2b:6b:91:82:7e:2a:4c:cd:fb:90:30:48:94:9b:15:43:89:06:
49:42:96:86:b0:91:42:1d:f9:d8:e3:0d:65:6b:7e:af:c3:9d:
98:a3:16:d4:97:e4:28:7c:e7:3e:e2:2e:a5:9c:ac:dd:c4:76:
d8:6b:37:b3:2a:11:06:01:c2:e5:03:1f:14:11:63:96:f3:bb:
63:2d:6b:1f:d6:c4:37:da:d3:91:d5:af:8a:9b:d9:07:e7:f6:
14:2b:26:1e:e3:a9:c6:9e:8a:1f:bc:e1:20:50:9e:32:6d:d2:
33:3d:9d:35:fb:2e:a5:5c:44:7b:c3:81:71:76:7e:c5:33:96:
52:d1:76:2c:7d:be:38:ec:a7:6f:e3:51:89:91:60:5b:ea:08:
0a:49:0f:06:3c:74:1a:b8:24:81:a8:86:bf:eb:f8:e9:ce:fa:
05:71:1f:74:e3:37:3f:fc:37:67:a4:83:0d:89:51:e0:e4:f1:
01:1e:b8:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgzRDAxMTAvBgNVBAUTKDFDQjRCRkQ5QzBBNzMyQkM4RjRBNjBDODY5NEM5MUY4
MzRDQUJDMTMwHhcNMjUwMzI4MjExMzUzWhcNMjUwNDA0MjExMzUzWjAYMRYwFAYD
VQQDEw02N2U3MTExMS01NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2F8fIfMFZ91IGkqm6tiDa+Fz4zlDaU+gljRXGC7BY8PiZ4apThD77qdRkqeR
xKHbYykiJ+9HlSSDGT5szsMX39xBcn8kjv6PtbCM3tURGo2zMOizAcLuBhLwmtiQ
/PhNpu/5nuoT7TEpfv6uY1BU1urfWqFP+WXD2Sq3RkjAl+ChTh63A5XIz8hyqxe3
SgZ/y4Kl0GFcbmOjA1DwDgrCMT8BKfS90gzLlm7SIsA2Wu73uvvTbWnyaXyNfIBr
Y7t3IwPIJbLynOBYwTNenDL5RKMuznnpTJ+XzizE8PDnPAmJbedgPXpzQ9UIre8B
hzzDvArXFl7Y42QsY/32UkhwvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxeKUqX
ofvayD5DDM1QFoLXAksDMB8GA1UdIwQYMBaAFBy0v9nApzK8j0pgyGlMkfg0yrwT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wMzExNjMxMkFG
QkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1yeVBTbURJYVV5Ui1EVEt2
Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0hMU18yY0NuTXJ5UFNtRElhVXlSLURUS3ZCTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODNEMC8wMzExNjMxMkFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1y
eVBTbURJYVV5Ui1EVEt2Qk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDQ85JEECaBZKh5V3ZqXlt6vdloRPOTfXu+Vqk2zczEV+ERY/JbakFf
GsUwJ05tNvY1ckd6YrFh2EhCKtvLJa1RkDBVYBm6LX8ra5GCfipMzfuQMEiUmxVD
iQZJQpaGsJFCHfnY4w1la36vw52YoxbUl+QofOc+4i6lnKzdxHbYazezKhEGAcLl
Ax8UEWOW87tjLWsf1sQ32tOR1a+Km9kH5/YUKyYe46nGnoofvOEgUJ4ybdIzPZ01
+y6lXER7w4Fxdn7FM5ZS0XYsfb447Kdv41GJkWBb6ggKSQ8GPHQauCSBqIa/6/jp
zvoFcR904zc//DdnpIMNiVHg5PEBHrgM
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:59:00 2025 by rpki-client