Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
File: HNyP8SmsVhBgxHINdUk_12hGxhU.mft (raw, json)
Hash identifier: WDzoJ+E7tZbqg0ecnjWD0sj/TEolNMEUD1ccY8dJFhg=
Subject key identifier: 7D:81:46:5D:CE:27:18:D9:0C:02:E5:82:8D:5D:7C:F0:29:B8:9C:F0
Authority key identifier: 1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
Certificate issuer: /CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Certificate serial: 0AD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
Manifest number: 0ACB
Signing time: Tue 23 Jul 2024 23:07:33 +0000
Manifest this update: Tue 23 Jul 2024 23:07:32 +0000
Manifest next update: Tue 30 Jul 2024 23:07:32 +0000
Files and hashes: 1: HNyP8SmsVhBgxHINdUk_12hGxhU.crl (hash: o3AuKxFo8ykZXnovcU7cmOCNxrcRh9a1RImqIqK6diM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Validity
Not Before: Jul 23 23:07:32 2024 GMT
Not After : Jul 30 23:07:32 2024 GMT
Subject: CN=66a037b5-4a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:aa:7f:f0:15:1d:34:0d:14:f1:d9:d6:9f:
a8:36:d4:b3:1c:6c:e4:76:ef:42:02:a1:cd:32:e0:
18:68:1b:1a:f7:35:a4:de:eb:1e:25:06:bd:37:78:
22:6a:9d:fe:4e:9d:a2:c7:c4:55:3c:b9:4e:78:cb:
d3:9b:8b:b5:b2:6d:c6:53:7d:fd:dd:89:7d:f0:30:
fc:35:44:f2:b3:df:42:aa:37:26:9c:19:cc:99:44:
8e:26:e0:fc:a6:df:f2:79:08:fb:ce:64:25:be:bf:
92:35:6c:ba:da:b0:d1:cb:78:56:e7:aa:e2:81:bc:
be:2c:95:38:48:ac:ad:69:59:09:cd:aa:cc:82:5c:
56:17:62:50:bc:e8:e0:92:3f:cb:73:d8:5d:b5:29:
ff:e5:58:51:95:98:9c:f5:71:98:a6:a0:f7:d1:d7:
09:03:7b:1e:b8:4e:d4:0a:29:bb:1d:8f:4f:5c:92:
8c:5b:99:d5:62:68:a7:2c:14:c9:01:41:17:77:58:
29:dc:4a:85:40:a4:a0:ff:fb:8b:56:0f:32:72:b7:
de:a0:3d:85:9a:1a:90:6b:6f:73:ee:e8:04:79:4a:
f7:61:43:be:d9:33:1e:8e:f6:bb:05:7e:f6:e7:77:
db:a5:f5:77:ea:20:fd:56:b4:76:50:4e:ed:3e:27:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:81:46:5D:CE:27:18:D9:0C:02:E5:82:8D:5D:7C:F0:29:B8:9C:F0
X509v3 Authority Key Identifier:
keyid:1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:7d:aa:e0:ed:2e:ce:a2:6d:ed:7f:97:59:7d:cc:4c:9b:e0:
c3:a2:9a:eb:02:3a:72:97:b7:65:a9:73:8d:c7:40:2f:df:3e:
b3:90:4c:f7:e4:07:40:30:07:66:7c:a4:14:b2:2e:06:3a:92:
a2:a0:80:5e:1d:cf:bb:55:ee:7e:74:fb:db:95:f0:09:74:30:
ac:5f:88:46:2e:d1:75:54:55:58:8d:ad:cd:43:8f:c1:8c:88:
96:f5:aa:96:3f:d9:3b:90:d1:6b:29:fb:d4:de:6e:1a:87:70:
e9:72:26:2b:12:c6:fa:2e:5d:5a:66:fe:69:44:4e:0f:6c:22:
66:75:ae:b6:a0:8f:c3:83:d4:be:97:15:03:61:e2:80:dd:39:
c0:3f:f9:5a:3c:7a:20:16:34:9c:0d:2d:15:5e:e1:9c:87:5b:
eb:de:db:45:bc:d8:01:bc:d7:8f:c5:57:14:f2:c5:77:ae:cb:
83:b7:a2:da:60:28:8c:6f:f8:e6:60:8b:34:cc:bd:dc:12:13:
57:ce:55:02:99:8f:8d:40:c9:64:85:e9:af:4c:b8:96:c7:4e:
7e:32:e0:26:3e:70:a4:f3:88:a4:47:99:32:18:42:38:4b:d2:
29:fb:97:57:cc:87:cb:90:4e:90:ff:ab:9b:96:b5:e2:bf:93:
a8:f1:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:42:17 2024 by rpki-client on console-ams.rpki-client.org