Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json)
Hash identifier: 3N1eZdbyitIvZ8EHAYqa1MF1aD67uatCWUA4+8ZUn5Q=
Subject key identifier: 1E:9B:6A:45:AB:FB:E1:1F:FC:7B:84:6F:62:D4:2F:55:F6:7A:A0:BF
Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Certificate serial: 08AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
Manifest number: 0896
Signing time: Thu 30 Jan 2025 20:39:33 +0000
Manifest this update: Thu 30 Jan 2025 20:39:32 +0000
Manifest next update: Thu 06 Feb 2025 20:39:32 +0000
Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: 9aVK1TQRj1mV4MJjNVWxU7U3tJMoSxtYaQCeGA7NsKo=)
2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: YmROt2RnH3UdNIAXBylk68JRdbwoGmgzkhxTYT8yZZA=)
3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: jI9GJ3mUj7/g+UDfOOrVVqKbgOohmwcRp94iSUpENxA=)
4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 65R5M+eBFk+Sri4/ilXTe6yj4G3UYq+q394nSZKR7qQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Validity
Not Before: Jan 30 20:39:32 2025 GMT
Not After : Feb 6 20:39:32 2025 GMT
Subject: CN=679be385-865c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:f9:ad:b7:1d:b3:81:fe:9e:4f:66:e5:c4:
fb:fa:b2:91:f6:3e:0c:c9:ed:ab:24:88:36:c5:7f:
ce:69:41:86:20:50:04:7d:6d:53:06:75:41:7d:26:
ca:6a:77:5f:c7:61:0a:55:48:2e:d9:28:67:25:10:
5c:86:e2:de:f2:d1:ef:f4:dc:8b:91:e9:da:3f:3d:
65:28:7f:eb:a5:83:dc:bf:6a:27:dc:6d:f1:87:52:
da:ed:90:2a:36:1f:60:fc:fa:bb:a8:bc:b0:f8:17:
5a:be:c2:cf:82:d1:05:33:8b:93:d2:d6:36:c3:96:
71:7e:bf:ee:94:02:37:e9:84:21:18:cf:dd:48:f2:
73:50:c7:ed:6f:f7:bd:fb:c0:4e:65:ba:74:59:ad:
73:69:c9:5a:45:a3:fb:6d:86:99:20:a7:98:07:d1:
6c:dc:17:ae:c2:67:ba:84:c1:d3:fc:ea:e0:98:f6:
44:18:3b:ce:4b:7a:e4:38:bc:b0:0a:01:eb:f0:7b:
b8:4d:cf:11:17:78:3d:3f:0c:cf:6b:d0:35:fe:a5:
17:2a:5c:08:4c:d6:a2:2f:e6:45:d4:7a:6d:10:d7:
7d:91:7a:1a:43:48:67:6a:d8:75:e6:af:de:d9:dc:
c2:54:85:0f:82:a8:43:58:25:88:61:4d:76:37:1f:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9B:6A:45:AB:FB:E1:1F:FC:7B:84:6F:62:D4:2F:55:F6:7A:A0:BF
X509v3 Authority Key Identifier:
keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:e9:28:95:1d:dc:07:d7:47:4e:0b:39:0c:a3:26:ad:b2:cc:
81:42:35:a8:c6:fa:7e:a4:09:8a:34:a4:27:08:1a:6d:c0:58:
32:a9:c8:0f:0b:92:fd:26:39:49:ce:a8:0a:40:35:69:63:55:
7b:65:19:65:9e:80:e8:e1:ed:8b:ef:89:48:d6:af:d7:53:4d:
23:6d:73:9b:6c:35:03:6b:de:15:92:6b:cb:bd:c7:dc:3d:5c:
5a:43:e0:8f:9e:dc:8a:cf:21:5f:6e:d0:a0:35:96:d5:f0:ef:
a7:e1:1c:90:b5:87:f3:77:cf:57:1b:3c:77:f4:b0:2e:0b:17:
df:bd:60:04:a0:97:45:9e:86:e6:4a:6e:74:78:45:65:16:eb:
c5:a1:aa:43:b1:b4:06:04:cf:e1:f8:05:2d:d1:d5:1b:1b:12:
48:64:42:d9:50:19:3a:12:ae:0d:66:9a:ac:95:bf:d8:2f:6f:
2e:2f:ce:8a:2e:5c:09:04:f2:ac:74:bf:83:b9:d7:c4:d8:da:
d7:49:aa:8f:fa:8d:7d:cb:06:ba:bc:c8:55:fd:b1:22:97:3e:
8d:d2:45:45:40:84:68:b7:2f:d7:19:3f:5c:aa:f1:95:19:a2:
ee:8a:ab:3a:e4:ad:ea:38:e0:24:10:ff:9b:38:13:70:ec:14:
88:be:ba:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB
RDBBRkMzMDUwHhcNMjUwMTMwMjAzOTMyWhcNMjUwMjA2MjAzOTMyWjAYMRYwFAYD
VQQDEw02NzliZTM4NS04NjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyMj5rbcds4H+nk9m5cT7+rKR9j4Mye2rJIg2xX/OaUGGIFAEfW1TBnVBfSbK
andfx2EKVUgu2ShnJRBchuLe8tHv9NyLkenaPz1lKH/rpYPcv2on3G3xh1La7ZAq
Nh9g/Pq7qLyw+BdavsLPgtEFM4uT0tY2w5Zxfr/ulAI36YQhGM/dSPJzUMftb/e9
+8BOZbp0Wa1zaclaRaP7bYaZIKeYB9Fs3Beuwme6hMHT/OrgmPZEGDvOS3rkOLyw
CgHr8Hu4Tc8RF3g9PwzPa9A1/qUXKlwITNaiL+ZF1HptENd9kXoaQ0hnath15q/e
2dzCVIUPgqhDWCWIYU12Nx+oKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6bakWr
++Ef/HuEb2LUL1X2eqC/MB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0
NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi
a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDO6SiVHdwH10dOCzkMoyatssyBQjWoxvp+pAmKNKQnCBptwFgyqcgP
C5L9JjlJzqgKQDVpY1V7ZRllnoDo4e2L74lI1q/XU00jbXObbDUDa94VkmvLvcfc
PVxaQ+CPntyKzyFfbtCgNZbV8O+n4RyQtYfzd89XGzx39LAuCxffvWAEoJdFnobm
Sm50eEVlFuvFoapDsbQGBM/h+AUt0dUbGxJIZELZUBk6Eq4NZpqslb/YL28uL86K
LlwJBPKsdL+DudfE2NrXSaqP+o19ywa6vMhV/bEilz6N0kVFQIRoty/XGT9cqvGV
GaLuiqs65K3qOOAkEP+bOBNw7BSIvrpn
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:32:11 2025 by rpki-client