Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json)
Hash identifier: VM1gSLwnSKAVLBzJ6St3eYqYVA7vBCW1v1kd//sh2A0=
Subject key identifier: 8A:3D:FF:DB:FD:5B:26:F1:83:6E:C8:21:DA:1A:2C:49:2B:5B:61:3D
Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70
Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
Certificate serial: 0BED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
Manifest number: 0BE4
Signing time: Fri 31 Jan 2025 18:38:31 +0000
Manifest this update: Fri 31 Jan 2025 18:38:30 +0000
Manifest next update: Fri 07 Feb 2025 18:38:30 +0000
Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: OObSb2Rk61C7AOQV1M+5Swxro+w8cK4NVaMJwieC+po=)
2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: fNKHCrlloZaF6YEqwDlDZ6OwI4uUpNjeaTgxoFN7c8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
Validity
Not Before: Jan 31 18:38:30 2025 GMT
Not After : Feb 7 18:38:30 2025 GMT
Subject: CN=679d18a7-7ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:47:43:5c:c5:d3:9d:24:0a:7e:ab:e8:dc:
98:41:41:48:4d:42:1b:05:f8:d8:3a:61:d9:d5:15:
72:d6:d3:25:73:ea:a6:1d:22:dc:8b:7c:f1:92:cb:
4e:04:31:d5:ba:a3:20:29:0f:e0:72:dd:3c:38:4c:
57:95:be:b4:b9:01:42:02:1b:06:7d:47:37:41:49:
1f:4e:d8:ac:ed:d5:79:d9:62:22:b0:23:61:3e:0b:
63:a1:53:91:e8:15:2f:58:5e:b4:e5:6e:b9:4d:b3:
77:22:49:0e:13:9c:d5:09:da:35:e3:c6:0e:d7:52:
70:a6:f2:6c:6a:97:8c:a6:e5:e8:50:fc:4b:d5:74:
13:9c:75:1a:e1:34:57:8e:10:73:0e:30:cd:a3:bf:
42:f9:f2:9a:46:81:3d:1b:99:78:92:cb:b3:f7:df:
28:fb:af:9e:4d:3d:f0:1a:ce:a7:bd:aa:d5:d2:87:
17:c0:dd:33:f6:0f:76:70:72:34:75:5e:b6:99:f0:
14:2d:82:85:c2:4e:8f:b1:64:41:a8:79:bc:0b:ec:
35:77:c1:6f:08:3a:6a:72:c9:33:41:c8:29:86:44:
14:04:fb:7e:25:0e:21:3e:b1:78:69:ab:5f:b8:a3:
62:53:51:7f:2d:1b:2f:7e:c3:9e:3b:ee:88:b9:4f:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3D:FF:DB:FD:5B:26:F1:83:6E:C8:21:DA:1A:2C:49:2B:5B:61:3D
X509v3 Authority Key Identifier:
keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cb:89:08:f4:03:eb:40:4a:65:4c:bf:c0:d9:42:14:42:17:
ed:88:19:6b:cd:87:4c:48:7e:b6:7f:61:77:f5:03:f9:f3:0c:
d5:e1:e0:42:f0:b9:84:86:63:f5:c0:e5:b3:49:4b:10:cd:77:
f6:5f:ec:c6:65:71:18:3f:71:32:88:fa:09:24:d9:bb:db:a7:
24:4c:1f:ce:83:31:3c:0b:82:21:de:8d:14:1e:ac:3d:a6:7b:
2a:45:28:e2:a8:3c:9b:60:f8:02:c4:57:fd:d6:4b:6a:4e:73:
b1:08:e0:68:ac:8d:c0:6f:fa:15:db:fa:ce:eb:cb:1a:7d:77:
57:15:38:43:f7:7c:be:39:55:9c:f8:7f:0f:5b:02:91:81:ab:
41:2f:5a:2e:02:da:36:69:c7:1e:56:d8:8e:d7:7a:f6:57:d9:
4a:6e:1f:92:2f:8d:62:0c:a9:e1:aa:93:6a:4e:ac:32:7d:b2:
f3:8b:01:5d:9b:4a:2a:6b:df:e4:22:5f:5e:b9:57:8a:b4:7f:
51:2b:4b:0f:62:7b:cd:b2:96:1c:bf:fc:6a:78:70:33:fa:18:
7e:76:11:8d:6b:57:e1:38:81:8d:df:0c:ad:94:d5:9e:c8:cf:
cc:3a:2e:57:fe:a3:32:9d:98:05:60:27:2b:ff:4b:fb:fd:64:
4b:fa:7a:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZBQkUxMTAvBgNVBAUTKEE3NDYwNUNCOUQ1MDcxQ0ExNzI5RDkwODc4MzQ0MDdG
MTRFQTg1NzAwHhcNMjUwMTMxMTgzODMwWhcNMjUwMjA3MTgzODMwWjAYMRYwFAYD
VQQDEw02NzlkMThhNy03ZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0s1HQ1zF050kCn6r6NyYQUFITUIbBfjYOmHZ1RVy1tMlc+qmHSLci3zxkstO
BDHVuqMgKQ/gct08OExXlb60uQFCAhsGfUc3QUkfTtis7dV52WIisCNhPgtjoVOR
6BUvWF605W65TbN3IkkOE5zVCdo148YO11JwpvJsapeMpuXoUPxL1XQTnHUa4TRX
jhBzDjDNo79C+fKaRoE9G5l4ksuz998o+6+eTT3wGs6nvarV0ocXwN0z9g92cHI0
dV62mfAULYKFwk6PsWRBqHm8C+w1d8FvCDpqcskzQcgphkQUBPt+JQ4hPrF4aatf
uKNiU1F/LRsvfsOeO+6IuU8AOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo9/9v9
Wybxg27IIdoaLEkrW2E9MB8GA1UdIwQYMBaAFKdGBcudUHHKFynZCHg0QH8U6oVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCRS9BM0Y1MDlGMjBD
NEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNjb1hLZGtJZURSQWZ4VHFo
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AwWUZ5NTFRY2NvWEtka0llRFJBZnhUcWhYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkFCRS9BM0Y1MDlGMjBDNEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNj
b1hLZGtJZURSQWZ4VHFoWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8y4kI9APrQEplTL/A2UIUQhftiBlrzYdMSH62f2F39QP58wzV4eBC
8LmEhmP1wOWzSUsQzXf2X+zGZXEYP3EyiPoJJNm726ckTB/OgzE8C4Ih3o0UHqw9
pnsqRSjiqDybYPgCxFf91ktqTnOxCOBorI3Ab/oV2/rO68safXdXFThD93y+OVWc
+H8PWwKRgatBL1ouAto2acceVtiO13r2V9lKbh+SL41iDKnhqpNqTqwyfbLziwFd
m0oqa9/kIl9euVeKtH9RK0sPYnvNspYcv/xqeHAz+hh+dhGNa1fhOIGN3wytlNWe
yM/MOi5X/qMynZgFYCcr/0v7/WRL+noQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:57 2025 by rpki-client