Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json)
Hash identifier: sbGnxGKwjPDgOehbHHqUZwmFCi18/60nQugSohEjYZw=
Subject key identifier: EB:11:49:3A:59:06:E4:D5:6F:27:5F:75:3A:49:70:9E:AA:4A:0B:E6
Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Certificate serial: 227A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
Manifest number: 223A
Signing time: Fri 31 Jan 2025 15:53:19 +0000
Manifest this update: Fri 31 Jan 2025 15:53:18 +0000
Manifest next update: Fri 07 Feb 2025 15:53:18 +0000
Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: /UFGgTyOBldqgdImCruO6cvNzPCM1nwr3Q6JFbpE09o=)
2: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: wXATKovo7SMCs4Sjl6WSvsrS7s1LwuBJsCqyfazF85I=)
3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: K8lxpuSGa3hE5HZ2FtNWD3paYpQtfp/AoALIaMdmBnY=)
4: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: vFaGBlF9+Zjf3Awaf+ms/PRalIKraIH0omeBdNCwy5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8826 (0x227a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Validity
Not Before: Jan 31 15:53:18 2025 GMT
Not After : Feb 7 15:53:18 2025 GMT
Subject: CN=679cf1ee-7170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:e1:0a:84:2b:5a:4a:b2:39:5f:31:b9:2a:
11:04:c0:ae:34:e6:f3:b8:b8:97:9c:1c:69:5f:2b:
10:0c:b1:0c:8f:00:36:f8:63:ff:e7:e0:10:5a:d0:
f3:4f:58:82:d5:29:20:f6:47:c0:3a:01:09:fd:dc:
8f:d8:6b:a2:ab:6a:70:c1:86:19:ed:aa:7f:07:a9:
ec:e2:c8:f9:1d:cb:9d:73:5b:2d:8b:4f:b3:ce:8a:
c0:b6:c3:a6:75:9f:17:9c:35:44:ae:6d:91:32:95:
77:83:59:bb:d7:a8:db:67:a6:cd:fe:0e:0d:76:e7:
b9:a5:fd:97:7e:57:a9:68:52:00:35:91:b6:47:6f:
cf:c4:83:39:51:b4:29:8e:8a:50:b9:44:03:cd:37:
01:5f:bc:54:8f:fd:a0:7e:75:db:6e:53:0e:25:73:
76:20:d7:c4:77:be:09:ba:28:bd:dd:9c:86:b4:20:
24:48:df:01:4c:ca:0d:6b:a4:e5:89:37:1c:40:0d:
4d:0f:2a:0e:82:7d:09:90:c8:c0:e1:ee:ad:53:31:
92:53:f1:ef:09:a2:22:c0:15:1f:14:f4:7e:a1:02:
11:db:ca:c5:06:48:7e:3d:3e:82:5a:05:66:5a:c5:
54:93:35:b6:8c:c5:fe:5c:6e:87:e9:63:8a:90:49:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:11:49:3A:59:06:E4:D5:6F:27:5F:75:3A:49:70:9E:AA:4A:0B:E6
X509v3 Authority Key Identifier:
keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:86:0f:6f:e0:07:2b:3a:ee:a1:dd:9f:a1:8e:20:df:0a:02:
da:0a:84:ae:6c:1c:0f:81:73:06:5e:1b:7c:ba:0c:ac:00:cc:
25:62:14:7c:0a:62:a7:3b:8c:81:79:03:34:17:7d:84:08:90:
91:77:ba:8c:bf:d1:1f:87:a6:5d:25:3c:f6:0e:34:0c:42:b3:
d1:02:87:6c:62:cd:19:47:bf:a1:c1:f8:47:bb:b0:91:92:73:
89:6e:e1:c5:a9:63:31:ac:93:e5:97:59:0a:42:c9:9b:a7:bc:
4c:d9:39:d2:4e:b6:0f:98:d8:5c:90:22:2c:2b:67:d2:88:03:
7b:41:91:1f:35:b5:fb:07:4e:35:97:e7:8a:d7:42:80:0f:5c:
44:f0:53:93:12:45:7a:8a:9d:dc:bb:5d:92:b7:67:d6:80:db:
6a:97:ff:4b:c0:6c:c6:f1:1f:89:1b:a6:01:72:30:d0:92:fe:
82:ec:3a:67:da:2e:f8:5c:8f:25:50:3c:6f:da:24:26:7c:fc:
2c:08:d1:0a:2d:27:f3:89:50:ef:4c:6b:82:b1:b3:d9:3c:36:
97:07:8f:f9:cc:61:60:1a:2a:41:c2:21:28:a0:fc:26:5d:53:
7f:fa:97:8a:e2:04:e0:bf:46:44:22:7e:f9:00:d5:30:8a:97:
3d:25:b0:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICInowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF
MkMyNDIwRjkwHhcNMjUwMTMxMTU1MzE4WhcNMjUwMjA3MTU1MzE4WjAYMRYwFAYD
VQQDEw02NzljZjFlZS03MTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuzHhCoQrWkqyOV8xuSoRBMCuNObzuLiXnBxpXysQDLEMjwA2+GP/5+AQWtDz
T1iC1Skg9kfAOgEJ/dyP2Guiq2pwwYYZ7ap/B6ns4sj5Hcudc1sti0+zzorAtsOm
dZ8XnDVErm2RMpV3g1m716jbZ6bN/g4Ndue5pf2XflepaFIANZG2R2/PxIM5UbQp
jopQuUQDzTcBX7xUj/2gfnXbblMOJXN2INfEd74Juii93ZyGtCAkSN8BTMoNa6Tl
iTccQA1NDyoOgn0JkMjA4e6tUzGSU/HvCaIiwBUfFPR+oQIR28rFBkh+PT6CWgVm
WsVUkzW2jMX+XG6H6WOKkEmSXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsRSTpZ
BuTVbydfdTpJcJ6qSgvmMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4
NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6
S2N3NmVHM3JlRmZpd2tJUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlhg9v4AcrOu6h3Z+hjiDfCgLaCoSubBwPgXMGXht8ugysAMwlYhR8
CmKnO4yBeQM0F32ECJCRd7qMv9Efh6ZdJTz2DjQMQrPRAodsYs0ZR7+hwfhHu7CR
knOJbuHFqWMxrJPll1kKQsmbp7xM2TnSTrYPmNhckCIsK2fSiAN7QZEfNbX7B041
l+eK10KAD1xE8FOTEkV6ip3cu12St2fWgNtql/9LwGzG8R+JG6YBcjDQkv6C7Dpn
2i74XI8lUDxv2iQmfPwsCNEKLSfziVDvTGuCsbPZPDaXB4/5zGFgGipBwiEooPwm
XVN/+peK4gTgv0ZEIn75ANUwipc9JbDL
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:12 2025 by rpki-client