
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
File: OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json)
Hash identifier: Vg07JrvWQU+EOPBgv3hL4dF208w7eGYXuOhVxlkc9QY=
Subject key identifier: F0:89:95:19:6F:B6:29:3C:EB:16:16:68:D1:60:F4:5E:A4:44:A7:4A
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Certificate issuer: /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial: 1E64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
Manifest number: 1E58
Signing time: Fri 31 Jan 2025 16:04:27 +0000
Manifest this update: Fri 31 Jan 2025 16:04:27 +0000
Manifest next update: Fri 07 Feb 2025 16:04:27 +0000
Files and hashes: 1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: dZQ8HCBWaqZdTomwEzssPuXaw1XIZ1LpG3r8tVEDXzo=)
2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: W0ZWmGkhW06fRZVPw8jscLCIBobXeY3y+SwBDvJ1Z0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7780 (0x1e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Validity
Not Before: Jan 31 16:04:27 2025 GMT
Not After : Feb 7 16:04:27 2025 GMT
Subject: CN=679cf48b-417f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d5:60:1a:62:e3:de:58:22:d6:30:58:bf:a6:
20:e1:81:9c:c9:f9:2b:bf:1d:6c:27:d1:55:ea:ac:
1f:98:01:64:b4:5f:82:24:0a:87:cc:42:89:3a:fa:
b7:34:c8:c7:be:ad:ec:f2:83:e0:96:a1:f2:fa:dd:
23:9e:c4:2b:27:ac:ff:83:d8:df:48:a6:ef:12:4e:
fd:83:2f:fd:ce:d7:5a:1f:80:0b:68:89:22:f4:4e:
f3:aa:46:df:c6:ce:e1:dc:54:df:ba:a1:03:18:50:
9e:e0:ae:7c:14:41:47:cf:ba:b9:44:07:a8:59:75:
64:a5:d1:e7:fc:a1:1e:09:3b:4e:e1:f1:20:ff:92:
fd:16:f1:84:36:19:2b:35:3c:c3:38:d6:b7:21:ba:
79:91:73:97:ea:a9:37:76:66:58:11:46:56:f1:9d:
f8:d5:fa:0e:5c:55:5f:56:d4:b3:00:1b:f3:b7:76:
a3:f9:fd:33:31:2c:6f:03:1d:f0:65:16:78:9c:50:
f0:24:9f:ce:1b:64:a8:43:2f:bb:c6:50:20:64:a6:
d0:8e:d3:82:95:37:72:20:73:a7:45:0d:27:b5:7d:
10:f4:76:82:ff:75:4f:f1:9b:a0:70:e3:c1:0d:93:
97:9b:55:c5:1d:6f:a3:ad:f4:10:ac:8b:d4:d4:e7:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:95:19:6F:B6:29:3C:EB:16:16:68:D1:60:F4:5E:A4:44:A7:4A
X509v3 Authority Key Identifier:
keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1a:38:45:74:19:6c:d4:3b:1b:c0:22:66:7a:58:bf:77:ef:
94:4f:30:b0:4d:8f:6f:0f:48:61:35:8e:49:f2:38:4b:ac:c7:
09:01:1f:61:13:44:ac:c1:8f:93:17:66:9c:30:d8:02:ba:51:
ee:d8:62:5e:f6:66:2b:d6:ac:53:49:65:7f:cf:21:bb:a7:60:
66:b6:5d:4b:30:3d:1c:9d:7b:49:ed:59:26:4f:b4:72:4d:6f:
8b:29:6f:dd:26:b9:07:06:68:2c:a2:55:a1:da:eb:9f:a5:90:
c9:28:df:46:48:c4:f7:e3:78:92:94:0b:11:85:fc:bc:9e:5c:
95:33:55:bf:3a:85:09:f6:64:b1:47:1e:5e:b6:d9:f7:6b:3e:
2d:27:b2:f9:1b:e2:a2:e7:7f:cb:61:42:4f:26:30:de:18:01:
0e:1e:61:33:cb:ca:aa:33:a3:5e:6e:5e:9e:ec:88:77:fb:2c:
18:ae:41:1e:cc:28:81:56:5c:cf:49:90:59:e7:e0:b5:f5:58:
49:34:61:42:ce:72:fc:ad:00:36:b8:fc:fc:a7:47:f4:cc:56:
42:52:1c:aa:ff:66:23:86:3d:17:5b:7b:13:4b:66:a8:72:06:
09:d0:fe:06:d9:41:4c:e3:13:a2:24:34:f3:bc:37:bc:89:d7:
6c:29:01:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBDN0MxMTAvBgNVBAUTKDM5RDFENTk1NTQxODkxMzUzMDk0NTgzNjE4RDZDQzA3
OUM4MzBDRTEwHhcNMjUwMTMxMTYwNDI3WhcNMjUwMjA3MTYwNDI3WjAYMRYwFAYD
VQQDEw02NzljZjQ4Yi00MTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7dVgGmLj3lgi1jBYv6Yg4YGcyfkrvx1sJ9FV6qwfmAFktF+CJAqHzEKJOvq3
NMjHvq3s8oPglqHy+t0jnsQrJ6z/g9jfSKbvEk79gy/9ztdaH4ALaIki9E7zqkbf
xs7h3FTfuqEDGFCe4K58FEFHz7q5RAeoWXVkpdHn/KEeCTtO4fEg/5L9FvGENhkr
NTzDONa3Ibp5kXOX6qk3dmZYEUZW8Z341foOXFVfVtSzABvzt3aj+f0zMSxvAx3w
ZRZ4nFDwJJ/OG2SoQy+7xlAgZKbQjtOClTdyIHOnRQ0ntX0Q9HaC/3VP8ZugcOPB
DZOXm1XFHW+jrfQQrIvU1OdDfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCJlRlv
tik86xYWaNFg9F6kRKdKMB8GA1UdIwQYMBaAFDnR1ZVUGJE1MJRYNhjWzAecgwzh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM3Qy8yOUY3QTA0MDZF
RjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtUVXdsRmcyR05iTUI1eURE
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09kSFZsVlFZa1RVd2xGZzJHTmJNQjV5RERPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEM3Qy8yOUY3QTA0MDZFRjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtU
VXdsRmcyR05iTUI1eURET0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOGjhFdBls1DsbwCJmeli/d++UTzCwTY9vD0hhNY5J8jhLrMcJAR9h
E0SswY+TF2acMNgCulHu2GJe9mYr1qxTSWV/zyG7p2Bmtl1LMD0cnXtJ7VkmT7Ry
TW+LKW/dJrkHBmgsolWh2uufpZDJKN9GSMT343iSlAsRhfy8nlyVM1W/OoUJ9mSx
Rx5ettn3az4tJ7L5G+Ki53/LYUJPJjDeGAEOHmEzy8qqM6Nebl6e7Ih3+ywYrkEe
zCiBVlzPSZBZ5+C19VhJNGFCznL8rQA2uPz8p0f0zFZCUhyq/2Yjhj0XW3sTS2ao
cgYJ0P4G2UFM4xOiJDTzvDe8iddsKQFm
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:36 2025 by rpki-client