Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier: +TpTYoaV/fM8N8ctUb0ygAxRxff4v1SXoJ5cg/i1vFU=
Subject key identifier: 2D:1D:6A:78:F6:A8:E7:86:6D:6C:75:53:C4:BC:B3:59:D9:E9:FC:1C
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number: B1
Signing time: Fri 31 Jan 2025 05:15:05 +0000
Manifest this update: Fri 31 Jan 2025 05:15:05 +0000
Manifest next update: Fri 07 Feb 2025 05:15:05 +0000
Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: XawQq3XpDF8XmEjWYA6Vfl37iHgvO6gJuaXNZWTPFhA=)
2: F6FCB8E21B5011EF8BF0AD17C4F9AE02.roa (hash: vl+0zKb6RC1QCG54t4yq7igHrF//hZvIU2iFdByDI9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Validity
Not Before: Jan 31 05:15:05 2025 GMT
Not After : Feb 7 05:15:05 2025 GMT
Subject: CN=679c5c59-1f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:e4:c1:3b:e0:c6:dd:83:e6:8b:96:c6:f5:
88:5d:5c:5d:e1:04:9c:96:53:77:d1:47:b0:9b:a2:
21:43:a0:ce:8f:c8:93:59:a3:c2:dc:b6:93:b6:ac:
7b:d5:1d:a9:a5:cd:cb:46:f9:1f:57:59:ed:1c:ca:
cf:98:03:b6:4f:9d:a7:7d:5d:45:fe:54:93:06:18:
94:28:d2:a9:2c:34:d6:1a:1e:23:91:b6:c3:64:82:
95:23:c1:de:68:11:e7:d8:72:42:f4:ec:52:fe:9e:
d0:a4:6d:00:20:49:9d:20:fd:a9:d7:fa:7c:da:6d:
4d:83:92:a3:eb:60:cc:34:66:d2:9b:6d:14:bb:aa:
ce:f0:bd:d4:6d:e8:8b:99:68:c3:82:bc:12:b2:3c:
57:8a:31:a8:d2:91:35:c9:9c:0b:95:dd:9c:9d:2a:
cb:c6:64:39:bb:4b:78:28:c9:54:41:bb:b5:34:b6:
45:0d:9c:ca:d0:76:74:31:e8:53:65:43:27:fd:07:
f3:f2:ca:9e:72:8f:4d:27:5f:6c:c2:54:b9:63:a0:
7f:7a:8b:83:8f:f0:b6:8c:c3:37:95:3a:d5:14:b8:
62:7b:53:9d:c5:4d:66:7c:b9:5b:2a:fb:cd:18:32:
59:b7:69:8c:37:9b:aa:07:3d:87:db:f9:63:a5:6c:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1D:6A:78:F6:A8:E7:86:6D:6C:75:53:C4:BC:B3:59:D9:E9:FC:1C
X509v3 Authority Key Identifier:
keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5d:af:74:11:95:34:de:f0:91:a9:b4:21:12:e5:da:c2:70:
e6:47:9e:af:7b:72:39:d0:c6:79:2c:26:42:50:2e:df:ea:4a:
48:ba:b2:25:1c:74:5a:f7:21:14:13:b9:f9:77:52:94:5d:6e:
24:47:27:04:de:53:a7:e9:da:48:e4:c8:75:03:97:9a:3f:87:
99:39:7b:7c:46:95:83:8d:bd:01:b8:ff:16:a6:35:eb:69:ac:
8a:c3:dd:05:26:74:6a:b5:c8:ee:e6:3e:2c:02:b5:27:1a:43:
9b:0c:99:47:a5:46:0b:2f:fa:bb:1e:e1:c7:5f:42:b1:9a:d4:
89:46:77:5c:b7:a2:c4:19:16:5d:67:51:6a:36:5f:97:cb:85:
57:7a:43:0a:56:5a:8b:cb:fb:18:d1:30:54:5a:21:97:42:6b:
a5:94:88:8b:32:a3:48:9c:8c:8a:33:8a:c3:6f:5d:19:66:0a:
0f:c5:17:4f:74:80:87:e4:af:7f:0f:b6:11:e2:cc:f3:d9:13:
39:31:c0:29:70:57:33:c7:48:57:b8:ae:27:0e:2a:ff:e3:df:
42:fd:d6:69:44:82:0b:99:09:7c:b8:37:fe:4b:ad:41:67:e9:
ca:20:7a:e1:a3:04:e6:48:bb:49:95:01:7c:92:d6:52:ee:da:
3b:1e:de:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB
QTczMUI1NTIwHhcNMjUwMTMxMDUxNTA1WhcNMjUwMjA3MDUxNTA1WjAYMRYwFAYD
VQQDEw02NzljNWM1OS0xZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssfkwTvgxt2D5ouWxvWIXVxd4QScllN30Uewm6IhQ6DOj8iTWaPC3LaTtqx7
1R2ppc3LRvkfV1ntHMrPmAO2T52nfV1F/lSTBhiUKNKpLDTWGh4jkbbDZIKVI8He
aBHn2HJC9OxS/p7QpG0AIEmdIP2p1/p82m1Ng5Kj62DMNGbSm20Uu6rO8L3UbeiL
mWjDgrwSsjxXijGo0pE1yZwLld2cnSrLxmQ5u0t4KMlUQbu1NLZFDZzK0HZ0MehT
ZUMn/Qfz8sqeco9NJ19swlS5Y6B/eouDj/C2jMM3lTrVFLhie1OdxU1mfLlbKvvN
GDJZt2mMN5uqBz2H2/ljpWysgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0danj2
qOeGbWx1U8S8s1nZ6fwcMB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5
RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx
VXg2VGF0c0cyNnlxY3h0VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbXa90EZU03vCRqbQhEuXawnDmR56ve3I50MZ5LCZCUC7f6kpIurIl
HHRa9yEUE7n5d1KUXW4kRycE3lOn6dpI5Mh1A5eaP4eZOXt8RpWDjb0BuP8WpjXr
aayKw90FJnRqtcju5j4sArUnGkObDJlHpUYLL/q7HuHHX0KxmtSJRndct6LEGRZd
Z1FqNl+Xy4VXekMKVlqLy/sY0TBUWiGXQmullIiLMqNInIyKM4rDb10ZZgoPxRdP
dICH5K9/D7YR4szz2RM5McApcFczx0hXuK4nDir/499C/dZpRIILmQl8uDf+S61B
Z+nKIHrhowTmSLtJlQF8ktZS7to7Ht6K
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:58:37 2025 by rpki-client