
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft
File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json)
Hash identifier: 8I9zluhxvQ2XhiatWN9sXvcVYE2Hi067XFJF+zhebEc=
Subject key identifier: 42:DA:62:84:03:F2:34:F0:2D:B3:A8:FA:91:61:37:95:B5:FE:B0:05
Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4
Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft
Manifest number: 8B
Signing time: Fri 31 Jan 2025 05:37:18 +0000
Manifest this update: Fri 31 Jan 2025 05:37:18 +0000
Manifest next update: Fri 07 Feb 2025 05:37:18 +0000
Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: Q7QG59GhflXecIgJcfnEcg8BVm9+2R9EeCGhQyhYoWs=)
2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: I+MzgbGQV3Ix84rdhaAbWOK+GMavwSb8VU8kMKlSBXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4
Validity
Not Before: Jan 31 05:37:18 2025 GMT
Not After : Feb 7 05:37:18 2025 GMT
Subject: CN=679c618e-1a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:b7:2d:63:7f:a4:a1:0d:8c:7d:df:99:ed:
fa:58:6c:81:92:56:68:e6:4c:ac:d4:d4:ef:4f:94:
4a:98:84:2c:c4:32:d6:5a:ef:29:86:33:9c:e3:97:
66:7f:3f:db:23:e8:66:82:b8:fd:e8:7b:83:3a:d8:
52:26:5e:ff:bb:0e:c7:51:6f:7f:bd:f9:dc:44:5c:
e3:0c:fb:10:68:fa:e8:72:e1:22:cd:de:86:4a:5e:
32:d4:49:a6:c4:8c:26:3c:17:8a:d1:35:79:77:f0:
5f:b1:a3:3e:02:7e:01:82:94:29:cc:90:84:41:2c:
02:70:96:3f:ef:18:79:70:da:da:42:f5:71:3f:2b:
01:9f:ea:2f:9a:d7:e3:f4:08:1e:26:18:8e:dc:dc:
ea:41:d6:c4:0c:e6:db:b4:af:c6:f3:e8:1e:5c:a6:
b1:a5:44:33:6d:20:67:f6:af:d5:d2:e2:35:ef:dd:
16:61:d6:5a:6a:9a:75:18:d5:e3:85:97:97:81:05:
70:40:47:86:aa:84:4b:12:cf:1d:ae:97:a0:99:a9:
7a:ad:24:77:52:73:f5:46:44:d7:22:ad:1d:31:c8:
cb:38:3a:db:51:7b:d6:ac:40:01:d5:4c:18:fe:d2:
63:da:f2:72:80:30:6c:75:b1:d6:76:03:5c:ad:bf:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DA:62:84:03:F2:34:F0:2D:B3:A8:FA:91:61:37:95:B5:FE:B0:05
X509v3 Authority Key Identifier:
keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:95:d2:99:57:05:01:89:5f:23:74:b2:87:c8:cc:85:08:1c:
6b:63:c6:f9:45:34:66:23:33:08:f0:9c:9a:b1:c0:99:28:bf:
0f:3d:8d:4a:e4:16:05:d2:73:07:4d:21:5e:9c:b4:7c:f5:f4:
0d:83:c0:c0:8b:1c:d4:d0:dc:99:21:11:d3:0f:41:ab:09:b7:
6d:b2:76:5e:bd:b6:5f:b9:8c:ff:d3:a1:dc:60:b3:49:95:ce:
7a:8a:26:6b:fa:67:a1:fc:66:52:a0:4b:61:6b:35:46:cd:24:
42:71:33:db:55:f7:9b:fd:16:04:49:39:39:93:f1:c7:a9:2c:
86:ad:ba:71:c1:10:6d:3a:39:fe:7e:f3:ee:c7:29:85:8c:26:
fd:64:b9:ac:02:56:29:56:9e:25:7e:4e:fa:e1:a7:f0:38:8b:
b2:6b:9f:1d:c0:11:df:98:0c:9c:6f:0b:93:d0:82:53:a1:d6:
25:fb:a6:24:94:b7:19:96:64:78:3d:78:2e:22:71:97:9a:b5:
f7:a0:f9:b2:2b:22:14:1e:a7:fd:db:4c:5e:ae:bd:0d:4d:49:
99:f1:0e:ad:28:2d:c4:59:24:81:6a:9f:aa:0b:fb:10:ab:d5:
3b:9d:a3:43:7a:e5:aa:82:18:94:29:58:f3:4e:24:9c:73:db:
60:ae:1c:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2
NzFBQ0QyRjQwHhcNMjUwMTMxMDUzNzE4WhcNMjUwMjA3MDUzNzE4WjAYMRYwFAYD
VQQDEw02NzljNjE4ZS0xYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtxm3LWN/pKENjH3fme36WGyBklZo5kys1NTvT5RKmIQsxDLWWu8phjOc45dm
fz/bI+hmgrj96HuDOthSJl7/uw7HUW9/vfncRFzjDPsQaProcuEizd6GSl4y1Emm
xIwmPBeK0TV5d/BfsaM+An4BgpQpzJCEQSwCcJY/7xh5cNraQvVxPysBn+ovmtfj
9AgeJhiO3NzqQdbEDObbtK/G8+geXKaxpUQzbSBn9q/V0uI1790WYdZaapp1GNXj
hZeXgQVwQEeGqoRLEs8drpegmal6rSR3UnP1RkTXIq0dMcjLODrbUXvWrEAB1UwY
/tJj2vJygDBsdbHWdgNcrb/fdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELaYoQD
8jTwLbOo+pFhN5W1/rAFMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG
QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw
dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2
SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3ldKZVwUBiV8jdLKHyMyFCBxrY8b5RTRmIzMI8JyascCZKL8PPY1K
5BYF0nMHTSFenLR89fQNg8DAixzU0NyZIRHTD0GrCbdtsnZevbZfuYz/06HcYLNJ
lc56iiZr+meh/GZSoEthazVGzSRCcTPbVfeb/RYESTk5k/HHqSyGrbpxwRBtOjn+
fvPuxymFjCb9ZLmsAlYpVp4lfk764afwOIuya58dwBHfmAycbwuT0IJTodYl+6Yk
lLcZlmR4PXguInGXmrX3oPmyKyIUHqf920xerr0NTUmZ8Q6tKC3EWSSBap+qC/sQ
q9U7naNDeuWqghiUKVjzTiScc9tgrhxB
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:23 2025 by rpki-client