Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft
File: cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft (raw, json)
Hash identifier: K6LqEIcE/Y1UQwz11KL+GcZ++KVmj8oK/TtsewAxuYc=
Subject key identifier: 27:AE:B4:B3:5C:6B:0B:14:FF:C4:AA:9F:CF:37:05:9C:45:CB:D6:BE
Authority key identifier: 71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6
Certificate issuer: /CN=A9125C31/serialNumber=7105372446A2064546D9629F421C376FDCEF21D6
Certificate serial: 0BB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft
Manifest number: 0BB1
Signing time: Thu 30 Jan 2025 18:54:18 +0000
Manifest this update: Thu 30 Jan 2025 18:54:17 +0000
Manifest next update: Thu 06 Feb 2025 18:54:17 +0000
Files and hashes: 1: cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl (hash: VxAD3Dp86F3uatDKzNa3p8erUvKhPvx0gCgZcJuECPM=)
2: 4697751815B111EA8277BA34C4F9AE02.roa (hash: dxDp9E0tHPQ++XAIde+nxMm3Ga/WWcWY96m0Hl+beDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3000 (0xbb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C31/serialNumber=7105372446A2064546D9629F421C376FDCEF21D6
Validity
Not Before: Jan 30 18:54:17 2025 GMT
Not After : Feb 6 18:54:17 2025 GMT
Subject: CN=679bcada-8c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:c8:33:a7:99:8f:65:8e:23:30:af:01:79:
44:f8:5e:dd:8c:53:44:ea:cc:36:c6:c2:40:ba:a0:
28:6a:e4:c6:4a:b0:7e:0c:d1:50:ef:47:14:58:fb:
a0:d8:9b:38:39:e1:6c:0b:6f:57:1f:f6:cc:a4:f3:
cf:1a:6e:10:3d:36:dd:57:52:41:d4:6e:ac:20:50:
62:0f:62:a4:29:e1:6c:86:1d:4d:1b:71:66:fd:b9:
ab:e9:2b:89:49:29:98:c8:d5:54:48:0c:4b:f9:31:
5b:41:42:6e:aa:67:31:fa:a3:70:31:83:18:0a:30:
ba:10:63:92:14:80:4d:f0:13:22:01:bd:98:00:c1:
12:f7:4c:37:99:cb:1c:5f:cf:c6:ec:a6:c1:5a:a7:
e9:bf:bb:61:b5:2e:71:75:9b:60:c8:cb:47:99:ba:
c1:f1:77:bb:78:31:d5:10:8c:0c:5c:b4:6e:20:c0:
c3:09:42:01:6c:8b:a1:9b:6c:29:93:49:6a:7f:67:
0b:32:c6:80:a0:fa:5a:c2:68:2c:ad:09:6f:17:b9:
2a:07:53:a7:9f:b2:8b:e5:8d:a6:ff:39:f7:0b:5b:
8d:31:01:64:8a:ba:37:f9:ef:d7:8e:55:30:8a:fa:
5d:97:e5:66:d0:1b:ef:de:b6:d0:53:45:8d:d2:75:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AE:B4:B3:5C:6B:0B:14:FF:C4:AA:9F:CF:37:05:9C:45:CB:D6:BE
X509v3 Authority Key Identifier:
keyid:71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9d:06:81:19:17:e9:cf:c1:ff:dd:fa:bd:16:43:f9:e9:1e:
62:3c:2a:68:71:28:6e:e2:a0:dd:d0:4e:c3:10:b0:0b:2a:41:
22:11:95:fc:77:43:8d:db:a7:96:b5:15:3d:f8:4b:47:5b:24:
a1:89:a1:f6:b6:19:41:f6:64:d7:47:65:28:f4:c0:cd:59:14:
fe:7d:8f:84:a3:5f:ac:6a:60:13:f5:dc:68:1a:20:4b:03:34:
7d:3a:dc:ac:5f:54:1f:6a:41:43:c1:55:89:41:69:3b:d7:66:
95:73:29:22:10:e0:c5:f5:c7:4d:be:f6:73:26:d2:fa:84:83:
d1:b1:a5:0c:b1:53:02:5f:53:3a:e6:c2:71:8b:b9:48:8b:c3:
8b:7e:c0:88:bb:0a:e6:64:44:43:76:39:b7:33:b5:d8:e3:4a:
e7:4a:48:c0:97:dd:d3:ad:89:dd:3b:ed:df:d3:c6:df:32:24:
d7:b5:fc:8c:95:56:43:10:46:09:c7:a9:c2:14:40:b8:f9:fc:
30:2d:c5:49:a7:e2:ed:6e:ac:25:89:ad:2d:02:4e:01:d0:f6:
ba:57:ac:d9:62:cd:c9:10:35:1b:64:e3:a7:ae:62:5c:2b:36:
a9:fa:3b:f9:74:98:6a:c5:d3:9a:68:7c:0d:63:e5:f1:27:84:
0d:d7:84:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjVDMzExMTAvBgNVBAUTKDcxMDUzNzI0NDZBMjA2NDU0NkQ5NjI5RjQyMUMzNzZG
RENFRjIxRDYwHhcNMjUwMTMwMTg1NDE3WhcNMjUwMjA2MTg1NDE3WjAYMRYwFAYD
VQQDEw02NzliY2FkYS04YzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhPIM6eZj2WOIzCvAXlE+F7djFNE6sw2xsJAuqAoauTGSrB+DNFQ70cUWPug
2Js4OeFsC29XH/bMpPPPGm4QPTbdV1JB1G6sIFBiD2KkKeFshh1NG3Fm/bmr6SuJ
SSmYyNVUSAxL+TFbQUJuqmcx+qNwMYMYCjC6EGOSFIBN8BMiAb2YAMES90w3mcsc
X8/G7KbBWqfpv7thtS5xdZtgyMtHmbrB8Xe7eDHVEIwMXLRuIMDDCUIBbIuhm2wp
k0lqf2cLMsaAoPpawmgsrQlvF7kqB1Onn7KL5Y2m/zn3C1uNMQFkiro3+e/XjlUw
ivpdl+Vm0Bvv3rbQU0WN0nXHuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeutLNc
awsU/8Sqn883BZxFy9a+MB8GA1UdIwQYMBaAFHEFNyRGogZFRtlin0IcN2/c7yHW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzMS8zOEJGNDA5QTE1
OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJrVkcyV0tmUWh3M2I5enZJ
ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NRVTNKRWFpQmtWRzJXS2ZRaHczYjl6dklkWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NUMzMS8zOEJGNDA5QTE1OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJr
VkcyV0tmUWh3M2I5enZJZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvnQaBGRfpz8H/3fq9FkP56R5iPCpocShu4qDd0E7DELALKkEiEZX8
d0ON26eWtRU9+EtHWyShiaH2thlB9mTXR2Uo9MDNWRT+fY+Eo1+samAT9dxoGiBL
AzR9OtysX1QfakFDwVWJQWk712aVcykiEODF9cdNvvZzJtL6hIPRsaUMsVMCX1M6
5sJxi7lIi8OLfsCIuwrmZERDdjm3M7XY40rnSkjAl93TrYndO+3f08bfMiTXtfyM
lVZDEEYJx6nCFEC4+fwwLcVJp+Ltbqwlia0tAk4B0Pa6V6zZYs3JEDUbZOOnrmJc
Kzap+jv5dJhqxdOaaHwNY+XxJ4QN14S0
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:17 2025 by rpki-client