Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
File: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft (raw, json)
Hash identifier: 6C/V6IB3pVCKO3MVWfrx5cEc8hMN1jx6GylhfO0bymc=
Subject key identifier: 98:A7:4E:9C:57:3A:32:B4:52:F7:F6:FC:25:9B:3C:2F:B0:49:8E:73
Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B
Certificate issuer: /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
Manifest number: 9B
Signing time: Fri 31 Jan 2025 05:27:22 +0000
Manifest this update: Fri 31 Jan 2025 05:27:22 +0000
Manifest next update: Fri 07 Feb 2025 05:27:22 +0000
Files and hashes: 1: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl (hash: tn7lO/l5aoWa1YSMVmQKrhsuk9G1d69LB7a9BIor61c=)
2: 9D50BCA4F64211EE9114A555C4F9AE02.roa (hash: L/NVWM+Df+GwuQqnyYWtlVp/5U+iQmr8G8cxiRiESFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B
Validity
Not Before: Jan 31 05:27:22 2025 GMT
Not After : Feb 7 05:27:22 2025 GMT
Subject: CN=679c5f3a-6a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5e:ce:13:e6:da:75:4e:de:d4:d4:aa:9e:1f:
40:ba:02:b9:15:01:85:20:8b:ea:f4:d3:0f:79:bc:
bd:e1:c1:24:e0:ea:4d:9b:58:e4:ec:47:0c:7e:24:
81:bf:94:1e:31:f3:19:96:cd:3c:b1:e1:27:2f:c6:
a6:58:7b:a3:ce:7e:e7:01:bf:8b:23:b0:f7:a9:a2:
58:b4:05:4f:09:e9:e2:e5:6e:7d:7f:41:52:94:39:
cd:fb:70:30:c7:7b:08:80:af:0c:ff:7c:89:95:01:
07:3b:7b:5e:55:f8:65:9d:11:91:1d:8d:43:4d:de:
21:14:b4:ed:3d:2d:06:52:9a:bc:bc:51:90:b5:a5:
4f:0c:78:74:1d:d2:0d:fa:c2:ee:c0:d1:0e:e3:41:
f5:92:e3:02:0d:2d:b8:0d:77:df:79:15:8a:98:4b:
54:f7:2d:97:60:e0:5e:7a:61:5b:04:ad:31:66:bc:
c1:e8:0d:40:0e:f6:c2:7b:ab:cc:57:b5:a9:e6:bc:
48:37:d0:7f:55:de:05:4e:02:e7:a3:c2:3c:21:c9:
72:02:71:54:ce:46:9c:dd:cb:4e:c5:23:7e:33:0c:
b3:c9:72:29:b1:2d:0d:e6:eb:a4:ec:55:e0:4d:e2:
e2:68:78:a8:66:21:42:47:46:8c:78:3d:a0:8f:0a:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A7:4E:9C:57:3A:32:B4:52:F7:F6:FC:25:9B:3C:2F:B0:49:8E:73
X509v3 Authority Key Identifier:
keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:1c:55:9b:b1:20:2e:d6:72:be:2f:b8:9d:fd:e2:f8:42:c1:
45:a1:18:3b:fc:b1:5f:11:ce:32:3e:b7:f9:c8:55:7c:2e:dd:
50:83:9d:34:28:27:9e:3d:0d:cc:5b:8e:e3:de:e2:4b:80:7b:
ab:2f:eb:ee:0e:93:78:0a:72:de:03:90:3c:a1:24:8e:7c:4e:
c7:5b:27:d2:a1:72:79:0b:9c:aa:61:20:e8:a5:07:1c:9b:5a:
19:97:a4:4e:03:9e:15:b4:4e:5c:c9:b7:f0:00:ce:95:b9:da:
3b:06:f2:16:f9:66:34:d9:73:28:11:0b:55:13:45:9e:80:3b:
c8:05:b5:39:a8:82:11:5e:ea:a4:9d:59:b8:1e:b0:52:7b:2d:
3a:3d:57:df:00:6a:06:dc:25:06:7d:6d:f9:c9:7e:cf:ad:e2:
83:11:27:ff:54:ef:80:11:8e:0d:28:1d:c0:33:05:e4:e9:40:
b7:11:16:5a:58:0c:3c:54:98:74:9c:87:88:b3:eb:4c:7e:68:
26:c1:26:f2:72:f9:28:b2:8f:c5:ef:ef:e1:cd:ef:31:1a:24:
0a:f9:b8:6a:26:a3:8a:10:e8:06:13:54:b1:70:3a:c2:8e:1b:
9c:13:ab:db:3b:a7:c6:d8:56:e1:a2:62:cd:5e:d9:db:cd:25:
66:57:70:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA3M0ExMTAvBgNVBAUTKEY1NTAyQTREN0QxNEE2QUE2M0U1RkZBQkY5MzZFMTUy
QThERjgwM0IwHhcNMjUwMTMxMDUyNzIyWhcNMjUwMjA3MDUyNzIyWjAYMRYwFAYD
VQQDEw02NzljNWYzYS02YTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7V7OE+badU7e1NSqnh9AugK5FQGFIIvq9NMPeby94cEk4OpNm1jk7EcMfiSB
v5QeMfMZls08seEnL8amWHujzn7nAb+LI7D3qaJYtAVPCeni5W59f0FSlDnN+3Aw
x3sIgK8M/3yJlQEHO3teVfhlnRGRHY1DTd4hFLTtPS0GUpq8vFGQtaVPDHh0HdIN
+sLuwNEO40H1kuMCDS24DXffeRWKmEtU9y2XYOBeemFbBK0xZrzB6A1ADvbCe6vM
V7Wp5rxIN9B/Vd4FTgLno8I8IclyAnFUzkac3ctOxSN+MwyzyXIpsS0N5uuk7FXg
TeLiaHioZiFCR0aMeD2gjwrokwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJinTpxX
OjK0Uvf2/CWbPC+wSY5zMB8GA1UdIwQYMBaAFPVQKk19FKaqY+X/q/k24VKo34A7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDczQS9FQjRBM0FEQUY2
NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBxcGo1Zi1yLVRiaFVxamZn
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlWQXFUWDBVcHFwajVmLXItVGJoVXFqZmdEcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDczQS9FQjRBM0FEQUY2NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBx
cGo1Zi1yLVRiaFVxamZnRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCHFWbsSAu1nK+L7id/eL4QsFFoRg7/LFfEc4yPrf5yFV8Lt1Qg500
KCeePQ3MW47j3uJLgHurL+vuDpN4CnLeA5A8oSSOfE7HWyfSoXJ5C5yqYSDopQcc
m1oZl6ROA54VtE5cybfwAM6Vudo7BvIW+WY02XMoEQtVE0WegDvIBbU5qIIRXuqk
nVm4HrBSey06PVffAGoG3CUGfW35yX7PreKDESf/VO+AEY4NKB3AMwXk6UC3ERZa
WAw8VJh0nIeIs+tMfmgmwSbycvkoso/F7+/hze8xGiQK+bhqJqOKEOgGE1SxcDrC
jhucE6vbO6fG2FbhomLNXtnbzSVmV3Ca
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:56 2025 by rpki-client