Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
File: RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft (raw, json)
Hash identifier: UmGzC290V3cMtdpLUfAjqfYCwkLfNM1uyVCQA2GpYYA=
Subject key identifier: 8A:64:EE:12:D1:1D:03:B1:B8:33:DF:AF:09:2E:75:33:C7:56:54:06
Authority key identifier: 46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D
Certificate issuer: /CN=A913647F/serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
Manifest number: 3D
Signing time: Fri 31 Jan 2025 06:33:34 +0000
Manifest this update: Fri 31 Jan 2025 06:33:33 +0000
Manifest next update: Fri 07 Feb 2025 06:33:33 +0000
Files and hashes: 1: RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl (hash: 5v5wuvk3V6+cuOTwpcDXKttHqNvRC3GXHk1LSXm3oyc=)
2: 88A6DB9086E211EF82ACA725C4F9AE02.roa (hash: Yh+9ZtLGM0yeId0yqsUGDk1PUuIX4Mo5I7LLnDotARk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913647F/serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
Validity
Not Before: Jan 31 06:33:33 2025 GMT
Not After : Feb 7 06:33:33 2025 GMT
Subject: CN=679c6ebe-16dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:b8:0f:8f:b8:fe:0b:0b:50:95:b2:e8:3f:
16:f3:e0:f9:6b:21:2f:b3:52:00:eb:1a:3c:01:5b:
4d:13:88:2b:0a:19:4a:0a:2f:2f:71:7a:20:f6:38:
b9:61:7d:b1:aa:38:8f:34:a8:68:ff:34:32:5b:12:
1a:a2:57:d4:76:dc:18:22:fd:3c:5b:82:13:03:e7:
2c:2e:f4:e3:76:c7:36:e4:64:3b:14:dc:72:89:04:
22:ae:2d:36:b9:3b:01:3f:0d:bb:3d:23:31:22:8e:
28:52:7d:71:60:5d:ac:0b:ef:aa:28:c8:2a:7a:b7:
80:bf:21:c1:08:bb:85:86:33:c4:bb:81:8a:1c:c9:
82:bb:90:20:45:11:39:fc:91:16:2c:13:7a:e9:9d:
b3:d7:16:51:23:ca:9d:77:f2:d7:af:50:2c:d7:56:
be:72:a2:ea:71:76:47:44:c2:89:28:c2:7f:34:c4:
18:91:3c:bc:82:0a:70:9c:de:4c:03:f5:17:6f:14:
d7:61:18:4d:9a:0f:da:a2:23:3e:8f:33:eb:e5:df:
8c:5d:f6:3b:95:17:74:01:73:71:3d:ca:9c:24:76:
db:8e:7b:5d:22:d8:fc:fb:9d:25:05:61:25:4f:44:
09:01:5a:fc:fd:34:ce:ec:5d:29:09:81:86:a4:d4:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:64:EE:12:D1:1D:03:B1:B8:33:DF:AF:09:2E:75:33:C7:56:54:06
X509v3 Authority Key Identifier:
keyid:46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:4e:e8:ea:d7:97:42:39:9a:9c:de:23:aa:86:08:9d:c8:7d:
66:00:70:ba:9a:21:db:ff:32:71:1a:af:90:26:bc:45:e2:e1:
8f:5a:18:f5:ea:0f:e0:41:5e:e6:ac:f7:fd:d0:40:59:b8:25:
a5:90:18:1b:ad:12:49:dc:d0:ff:cc:6d:ee:35:f4:a1:e7:d6:
3c:46:9b:a4:f1:b9:64:a9:22:e4:e7:58:23:ed:34:6c:28:de:
a5:21:6b:b5:4f:f3:8b:87:de:4d:47:88:d5:59:45:be:11:53:
c3:d4:63:da:b0:90:45:d6:ee:8a:a6:cb:af:58:ec:52:16:3b:
ba:9a:18:22:29:40:6f:31:b2:c7:3d:3a:75:bb:d3:f6:98:78:
83:66:4b:14:0e:bf:1c:40:15:70:16:81:c7:ee:44:38:6d:c3:
cc:bf:63:6a:a8:db:17:60:8a:59:e2:0b:24:8a:95:6b:aa:d3:
65:dc:c9:d7:6a:3b:f7:cc:f8:5f:92:c8:d4:dc:b3:2b:7d:ae:
80:7b:be:8c:c1:72:54:06:ea:3b:fc:3e:ae:b2:40:da:08:2e:
c3:d3:02:24:f7:ee:aa:a3:b4:b6:66:20:1c:92:76:1e:17:6d:
76:ab:72:eb:6d:1b:71:c6:15:19:da:1a:17:1f:cf:98:51:a1:
fc:bd:0e:e7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NjQ3RjExMC8GA1UEBRMoNDY0MTkwN0ZFNUY0NzNGMTg5MDZENDZBQTIwMzA3RURF
REExOUM5RDAeFw0yNTAxMzEwNjMzMzNaFw0yNTAyMDcwNjMzMzNaMBgxFjAUBgNV
BAMTDTY3OWM2ZWJlLTE2ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxLLgPj7j+CwtQlbLoPxbz4PlrIS+zUgDrGjwBW00TiCsKGUoKLy9xeiD2OLlh
fbGqOI80qGj/NDJbEhqiV9R23Bgi/TxbghMD5ywu9ON2xzbkZDsU3HKJBCKuLTa5
OwE/Dbs9IzEijihSfXFgXawL76ooyCp6t4C/IcEIu4WGM8S7gYocyYK7kCBFETn8
kRYsE3rpnbPXFlEjyp138tevUCzXVr5youpxdkdEwokown80xBiRPLyCCnCc3kwD
9RdvFNdhGE2aD9qiIz6PM+vl34xd9juVF3QBc3E9ypwkdtuOe10i2Pz7nSUFYSVP
RAkBWvz9NM7sXSkJgYak1EEBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUimTuEtEd
A7G4M9+vCS51M8dWVAYwHwYDVR0jBBgwFoAURkGQf+X0c/GJBtRqogMH7e2hnJ0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2NDdGL0I5MUFBQTc0ODZE
QjExRUZCQTRENUYyNkM0RjlBRTAyL1JrR1FmLVgwY19HSkJ0UnFvZ01IN2UyaG5K
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUmtHUWYtWDBjX0dKQnRScW9nTUg3ZTJobkowLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2
NDdGL0I5MUFBQTc0ODZEQjExRUZCQTRENUYyNkM0RjlBRTAyL1JrR1FmLVgwY19H
SkJ0UnFvZ01IN2UyaG5KMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJZO6OrXl0I5mpzeI6qGCJ3IfWYAcLqaIdv/MnEar5AmvEXi4Y9aGPXq
D+BBXuas9/3QQFm4JaWQGButEknc0P/Mbe419KHn1jxGm6TxuWSpIuTnWCPtNGwo
3qUha7VP84uH3k1HiNVZRb4RU8PUY9qwkEXW7oqmy69Y7FIWO7qaGCIpQG8xssc9
OnW70/aYeINmSxQOvxxAFXAWgcfuRDhtw8y/Y2qo2xdgilniCySKlWuq02Xcyddq
O/fM+F+SyNTcsyt9roB7vozBclQG6jv8Pq6yQNoILsPTAiT37qqjtLZmIBySdh4X
bXarcuttG3HGFRnaGhcfz5hRofy9Duc=
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:10:39 2025 by rpki-client