Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
File: kI54kDTxhBXYdZwmo0brgQ71pBU.mft (raw, json)
Hash identifier: sX0xdryp9hMMUpWhSSDXIquJXRC0Ll26Eq8I3ULXIqg=
Subject key identifier: E8:6B:7F:E2:C2:3A:DB:F2:9A:8D:C5:04:F8:64:95:7F:40:E8:B4:12
Authority key identifier: 90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15
Certificate issuer: /CN=A911B4ED/serialNumber=908E789034F18415D8759C26A346EB810EF5A415
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
Manifest number: 012E
Signing time: Fri 31 Jan 2025 03:42:07 +0000
Manifest this update: Fri 31 Jan 2025 03:42:06 +0000
Manifest next update: Fri 07 Feb 2025 03:42:06 +0000
Files and hashes: 1: kI54kDTxhBXYdZwmo0brgQ71pBU.crl (hash: npUTrF7NYFvliZd1xlSAYKaLpMPxHYnpyRz1M1QYcgo=)
2: 86A2CEB60F3E11EEA4C55465C4F9AE02.roa (hash: LEuGWO/AHJLUDwLeABLdjtuQr5+JNGq1678nn2RoAyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B4ED/serialNumber=908E789034F18415D8759C26A346EB810EF5A415
Validity
Not Before: Jan 31 03:42:06 2025 GMT
Not After : Feb 7 03:42:06 2025 GMT
Subject: CN=679c468f-9525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:29:a3:16:38:18:20:12:b0:36:39:67:b9:
9c:d8:fe:87:3f:20:0a:0d:0d:11:94:4d:b7:1f:60:
a4:13:cc:8e:ab:58:5c:a2:4e:df:0a:89:de:74:fc:
24:a8:03:0f:45:ca:4e:7f:3d:a1:48:b7:7a:ba:06:
44:fb:a5:44:ac:d8:d8:80:ec:39:3c:2b:1c:0e:1e:
4c:4e:4b:98:e2:6f:17:a8:00:06:56:4d:df:98:97:
b5:30:cf:65:44:46:0b:0b:21:7a:09:d6:66:6b:66:
6f:a6:2a:7b:87:f5:7c:d2:d7:d9:d8:a5:00:f8:fd:
73:b0:e6:ab:9b:1b:18:7b:51:61:35:f8:f4:3e:5d:
cd:00:4a:a5:d7:93:ba:cb:cb:0d:91:b3:55:b8:4d:
5f:ee:6a:ae:d8:3b:9f:fd:39:6f:27:85:31:42:0d:
1f:0e:a0:32:6e:f8:6f:ce:9d:54:ca:87:9e:92:5f:
c4:e6:57:85:e1:ff:d1:0d:0d:21:44:a1:dc:1e:e4:
b2:4a:58:0f:af:f6:80:40:3e:89:fb:3c:14:83:ff:
41:91:f2:fe:f2:f3:8e:e2:0d:d8:5a:c8:ea:d3:19:
41:ef:4d:d5:c3:0e:f1:84:19:f2:02:51:6c:11:7f:
84:41:15:ba:34:3d:f2:7d:72:4e:29:4b:98:14:a1:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6B:7F:E2:C2:3A:DB:F2:9A:8D:C5:04:F8:64:95:7F:40:E8:B4:12
X509v3 Authority Key Identifier:
keyid:90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f6:b7:2c:ee:cd:c0:60:45:36:95:88:39:f6:3e:2f:b4:ca:
18:b7:e3:5f:ad:5a:c8:6c:1d:3d:3e:86:4b:1f:ef:0a:52:6a:
fe:12:2a:2f:c5:d5:d1:24:da:21:3a:23:f8:6d:f3:f5:d5:d7:
a3:f4:8a:c7:52:d4:58:52:68:61:e9:6d:b1:d7:a5:cb:f5:37:
fd:42:25:4e:8b:b2:6c:57:97:14:2d:71:33:57:c5:7a:4d:44:
1b:dc:99:fa:db:76:16:4e:c2:32:a9:c7:c3:e0:ad:a9:2e:83:
85:f6:3b:6d:2a:8e:57:46:59:7b:c2:53:b9:78:25:3c:26:7a:
9f:85:26:6f:b1:8b:b8:d9:6d:92:33:c2:50:fb:da:02:b8:9a:
4e:bf:b3:fe:80:ae:20:0c:15:78:1e:b5:7b:5c:16:49:b7:b7:
ff:fc:23:ae:d0:29:ef:f6:35:0e:74:9f:e3:99:23:95:9f:85:
7f:50:10:94:2a:37:36:d8:95:f0:53:44:c0:17:7d:3a:87:9c:
7c:66:be:58:d6:6a:42:e3:f2:35:18:48:5e:58:5b:10:4b:34:
44:8f:05:a5:65:27:b4:7f:a2:3c:6f:5a:2c:a7:f6:42:9e:89:
9d:7a:15:31:8e:0d:70:ff:43:c7:d5:b0:db:3d:98:28:d3:d6:
4d:af:51:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0RUQxMTAvBgNVBAUTKDkwOEU3ODkwMzRGMTg0MTVEODc1OUMyNkEzNDZFQjgx
MEVGNUE0MTUwHhcNMjUwMTMxMDM0MjA2WhcNMjUwMjA3MDM0MjA2WjAYMRYwFAYD
VQQDEw02NzljNDY4Zi05NTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAraApoxY4GCASsDY5Z7mc2P6HPyAKDQ0RlE23H2CkE8yOq1hcok7fConedPwk
qAMPRcpOfz2hSLd6ugZE+6VErNjYgOw5PCscDh5MTkuY4m8XqAAGVk3fmJe1MM9l
REYLCyF6CdZma2Zvpip7h/V80tfZ2KUA+P1zsOarmxsYe1FhNfj0Pl3NAEql15O6
y8sNkbNVuE1f7mqu2Duf/TlvJ4UxQg0fDqAybvhvzp1Uyoeekl/E5leF4f/RDQ0h
RKHcHuSySlgPr/aAQD6J+zwUg/9BkfL+8vOO4g3YWsjq0xlB703Vww7xhBnyAlFs
EX+EQRW6ND3yfXJOKUuYFKE4IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhrf+LC
Otvymo3FBPhklX9A6LQSMB8GA1UdIwQYMBaAFJCOeJA08YQV2HWcJqNG64EO9aQV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjRFRC9GQTRCMEFDNDBG
MzcxMUVFQUI5RDk0NjhDNEY5QUUwMi9rSTU0a0RUeGhCWFlkWndtbzBicmdRNzFw
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tJNTRrRFR4aEJYWWRad21vMGJyZ1E3MXBCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjRFRC9GQTRCMEFDNDBGMzcxMUVFQUI5RDk0NjhDNEY5QUUwMi9rSTU0a0RUeGhC
WFlkWndtbzBicmdRNzFwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC49rcs7s3AYEU2lYg59j4vtMoYt+NfrVrIbB09PoZLH+8KUmr+Eiov
xdXRJNohOiP4bfP11dej9IrHUtRYUmhh6W2x16XL9Tf9QiVOi7JsV5cULXEzV8V6
TUQb3Jn623YWTsIyqcfD4K2pLoOF9jttKo5XRll7wlO5eCU8JnqfhSZvsYu42W2S
M8JQ+9oCuJpOv7P+gK4gDBV4HrV7XBZJt7f//COu0Cnv9jUOdJ/jmSOVn4V/UBCU
Kjc22JXwU0TAF306h5x8Zr5Y1mpC4/I1GEheWFsQSzREjwWlZSe0f6I8b1osp/ZC
nomdehUxjg1w/0PH1bDbPZgo09ZNr1F5
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:46:24 2025 by rpki-client