Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier: n7sSM2Nn+7jCERwYjOdOCja40XgAzY3grnyCVGxPHcc=
Subject key identifier: 30:F6:F1:4F:F6:CB:2F:15:72:1A:46:39:45:24:5B:AC:8C:D8:CD:0E
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number: CC
Signing time: Fri 31 Jan 2025 04:59:33 +0000
Manifest this update: Fri 31 Jan 2025 04:59:32 +0000
Manifest next update: Fri 07 Feb 2025 04:59:32 +0000
Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: O/LfDOr+f9AtCCVxpQjQc4+J+OpxagRiR71WWMdc1qU=)
2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: kortXzDV3z8yqdb7hUTvSq2L5JWGq27VKKVJ2FtpSxc=)
3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: rRm+rUr3qcN16z/Oqf9uTNEkdYMxgFxb6sxz/dypYvc=)
4: A17C3508168911EFBF38F580C4F9AE02.roa (hash: 5gm1wj46SXJPZC1pKKhppvpQZgvvcitCu8i+WN1ATKA=)
5: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: O9tYO6kupKQU9ptuAQl06h/ZNlTFKl9W/lRHr1Y6j4E=)
6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: vihfleeETh6RhPkPr9fPr5Gym7kQ9gHXsPSD/cQHxVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: Jan 31 04:59:32 2025 GMT
Not After : Feb 7 04:59:32 2025 GMT
Subject: CN=679c58b5-3148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:c7:d1:3c:91:24:df:a8:a2:7e:5f:11:7d:
cc:26:3d:53:d4:20:5b:84:6e:2b:ea:cd:55:21:26:
d0:32:eb:03:90:2e:75:a9:f3:35:f8:f2:64:bf:36:
21:b5:ea:5c:72:ed:70:4f:5d:25:ab:63:12:6c:a6:
0a:42:5f:a2:57:87:65:d1:f5:45:42:ab:0e:90:cd:
d6:17:17:81:c5:ae:c7:8a:c0:a8:06:4c:fa:af:eb:
e2:05:91:75:47:a7:19:19:70:19:8a:ba:62:8c:7e:
4e:55:89:b0:83:87:0e:d9:c0:62:e7:7e:b1:05:76:
e7:bd:da:1b:56:83:7d:63:0a:26:e6:2c:5e:cd:80:
50:17:68:0e:1f:f2:ef:ea:e4:9c:5d:32:5e:bf:aa:
a1:a3:16:a7:1e:69:ab:9a:51:25:41:67:f8:7d:06:
5e:2a:65:71:62:31:13:dc:21:69:f4:42:05:cb:e8:
de:6f:6a:53:77:65:27:9c:1e:f3:e9:fa:77:d7:9b:
56:c7:87:ea:18:b4:22:fc:2c:e2:a7:4a:e9:9d:a4:
12:3d:2f:b4:83:b4:79:49:2d:ac:8c:ba:47:8d:74:
cf:42:b1:39:96:25:ba:bf:c8:58:11:93:84:30:eb:
bc:39:f1:94:bd:fb:70:ab:b6:fe:8d:b1:1c:08:4a:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F6:F1:4F:F6:CB:2F:15:72:1A:46:39:45:24:5B:AC:8C:D8:CD:0E
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:28:4e:66:a5:c0:f9:42:4b:71:b7:f6:02:02:64:f6:e5:34:
c7:b2:ac:2f:3f:f7:ac:9c:a3:39:6f:1c:57:0d:1d:cb:a0:65:
bb:c5:7a:fa:1b:3f:35:8d:c8:a9:cf:12:17:3f:b6:b3:3e:e9:
ad:dc:4d:c1:2d:fd:f0:07:a1:62:b8:6a:e9:a7:df:c3:55:0c:
22:85:68:c1:62:10:21:b2:4e:0f:50:08:91:0e:68:0d:ca:c5:
9b:fa:b4:aa:55:72:0f:ad:0e:96:a0:62:63:ce:0f:e7:53:69:
14:ce:bb:51:e9:10:14:37:00:6f:80:a2:ac:2c:79:01:fe:28:
0e:36:4d:0d:ef:66:6b:2b:64:42:f0:c8:74:99:24:36:97:86:
ad:b0:d3:10:19:32:f0:19:1e:2e:1c:bc:c6:cb:55:77:94:54:
1a:93:c3:bb:7a:5d:8b:59:c3:ce:a3:d8:a3:0e:c9:36:ff:3b:
ce:37:89:d9:83:f0:7a:56:5c:a1:43:40:73:99:12:54:d1:b4:
03:e1:9a:2e:69:21:30:91:57:3e:08:8c:f3:f9:5c:ea:9d:af:
6e:b5:be:4e:3c:58:a3:f7:f8:32:f9:05:11:33:8e:1e:78:7f:
b8:e5:98:3d:d6:1d:e4:1d:b2:63:ea:d8:7f:d9:e8:60:28:15:
8b:36:ed:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2
Mjc1QjZBNTUwHhcNMjUwMTMxMDQ1OTMyWhcNMjUwMjA3MDQ1OTMyWjAYMRYwFAYD
VQQDEw02NzljNThiNS0zMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4XrH0TyRJN+oon5fEX3MJj1T1CBbhG4r6s1VISbQMusDkC51qfM1+PJkvzYh
tepccu1wT10lq2MSbKYKQl+iV4dl0fVFQqsOkM3WFxeBxa7HisCoBkz6r+viBZF1
R6cZGXAZirpijH5OVYmwg4cO2cBi536xBXbnvdobVoN9Ywom5ixezYBQF2gOH/Lv
6uScXTJev6qhoxanHmmrmlElQWf4fQZeKmVxYjET3CFp9EIFy+jeb2pTd2UnnB7z
6fp315tWx4fqGLQi/Czip0rpnaQSPS+0g7R5SS2sjLpHjXTPQrE5liW6v8hYEZOE
MOu8OfGUvftwq7b+jbEcCEpVtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDD28U/2
yy8VchpGOUUkW6yM2M0OMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB
NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p
YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHKE5mpcD5Qktxt/YCAmT25TTHsqwvP/esnKM5bxxXDR3LoGW7xXr6
Gz81jcipzxIXP7azPumt3E3BLf3wB6FiuGrpp9/DVQwihWjBYhAhsk4PUAiRDmgN
ysWb+rSqVXIPrQ6WoGJjzg/nU2kUzrtR6RAUNwBvgKKsLHkB/igONk0N72ZrK2RC
8Mh0mSQ2l4atsNMQGTLwGR4uHLzGy1V3lFQak8O7el2LWcPOo9ijDsk2/zvON4nZ
g/B6VlyhQ0BzmRJU0bQD4ZouaSEwkVc+CIzz+Vzqna9utb5OPFij9/gy+QURM44e
eH+45Zg91h3kHbJj6th/2ehgKBWLNu0O
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:33 2025 by rpki-client