Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft
File: g8K1S2QeP_BuMaK0RQwVetrVm2g.mft (raw, json)
Hash identifier: 2JebU5m8cBE+ATZItwdla4WxPcr4oVf/WN0+mBpZVAw=
Subject key identifier: A5:6C:19:52:F4:70:C0:DF:23:5B:28:27:74:EC:4A:DD:09:8A:50:89
Authority key identifier: 83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68
Certificate issuer: /CN=A9137E5F/serialNumber=83C2B54B641E3FF06E31A2B4450C157ADAD59B68
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft
Manifest number: 52
Signing time: Fri 31 Jan 2025 06:17:50 +0000
Manifest this update: Fri 31 Jan 2025 06:17:50 +0000
Manifest next update: Fri 07 Feb 2025 06:17:50 +0000
Files and hashes: 1: g8K1S2QeP_BuMaK0RQwVetrVm2g.crl (hash: y4jvd4T3yNYY24ZrTBM13nPLgrwGHk1aYm7NhvwGi00=)
2: 7114716A653911EFB61F430DC4F9AE02.roa (hash: bO/gfY3HBbGIQDRrLWr0PVEzkY2zoAiDv4q0XXDREo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137E5F/serialNumber=83C2B54B641E3FF06E31A2B4450C157ADAD59B68
Validity
Not Before: Jan 31 06:17:50 2025 GMT
Not After : Feb 7 06:17:50 2025 GMT
Subject: CN=679c6b0e-14c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:23:e2:15:df:11:08:8c:cd:3d:f3:05:0f:
b2:22:f6:3e:ad:13:4a:95:df:de:2b:c6:3d:6f:c2:
d4:3d:48:ea:5d:4c:67:fb:09:a3:a6:95:b9:b6:0b:
02:87:d5:8f:b4:1a:bb:66:66:ad:dd:cc:61:74:88:
c5:10:27:2e:06:bd:91:62:58:81:39:c2:93:36:69:
85:1c:01:04:20:ad:a0:54:b1:14:a3:f2:d5:24:34:
8d:cd:e7:a5:89:d2:59:75:2e:ce:9e:76:e9:ec:93:
78:c1:e7:63:96:e8:40:e9:86:03:8b:d3:d9:ee:bf:
ee:0e:da:ea:78:0e:2d:ed:c9:43:9e:fd:76:47:7a:
17:c0:25:b2:a9:ca:95:8c:23:b1:11:45:fc:81:10:
5c:5c:42:c4:02:5d:a6:13:02:41:d8:bf:b3:3b:6a:
d9:50:80:a6:67:e7:18:54:a9:07:bb:91:c7:36:ad:
1f:b4:e0:a6:1a:1d:cc:c8:1e:cd:23:a5:c3:33:40:
be:20:7c:58:90:15:54:50:08:f6:d2:46:1f:1e:6b:
8d:58:f9:79:50:20:1c:02:b6:24:1d:b3:a4:34:8f:
02:e7:e9:16:05:5d:db:56:a7:ed:1c:ab:8e:84:fc:
13:84:4f:f2:8b:80:a1:27:eb:df:d2:e5:89:0c:90:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6C:19:52:F4:70:C0:DF:23:5B:28:27:74:EC:4A:DD:09:8A:50:89
X509v3 Authority Key Identifier:
keyid:83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:86:42:ed:2f:3e:e8:9b:69:b3:72:01:63:c4:23:15:0b:6a:
f2:75:b1:5d:ab:62:86:90:02:5a:d4:74:7e:c3:7e:84:01:71:
a5:29:39:0c:f6:e1:06:4b:f5:90:57:99:a3:dd:47:8c:3e:0b:
64:6a:c1:6f:8f:bc:40:2d:b1:8a:65:57:3c:e8:cb:36:8d:60:
2b:46:df:0a:b5:03:50:f2:55:84:ed:7f:f9:b5:db:6a:5b:7a:
2c:49:43:f6:1b:3c:9e:39:1c:ca:48:84:c3:69:ec:1e:bd:93:
0e:a1:d9:92:cc:70:e3:00:27:08:1e:61:9b:df:4c:93:b6:01:
f8:ae:86:8a:89:b5:50:a2:6c:97:70:0b:fb:fc:45:5e:31:bb:
fe:ef:52:76:f5:58:6f:15:be:52:65:58:cc:03:b2:ce:b7:de:
69:ce:ac:dc:40:8c:55:3a:f3:a5:5a:22:04:eb:8b:0e:db:c5:
2c:04:1c:20:22:d4:42:c5:af:3e:5b:32:87:7a:cd:ad:26:ca:
cf:ee:be:de:82:03:3d:e8:80:e9:c7:57:bb:47:1f:ae:57:c3:
85:95:33:63:4b:dd:ac:62:8f:44:80:27:a0:36:bb:40:67:11:
bc:7e:43:67:25:44:9b:c9:16:2a:f3:50:90:1d:70:eb:70:09:
eb:ee:a4:6f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
N0U1RjExMC8GA1UEBRMoODNDMkI1NEI2NDFFM0ZGMDZFMzFBMkI0NDUwQzE1N0FE
QUQ1OUI2ODAeFw0yNTAxMzEwNjE3NTBaFw0yNTAyMDcwNjE3NTBaMBgxFjAUBgNV
BAMTDTY3OWM2YjBlLTE0YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCy1CPiFd8RCIzNPfMFD7Ii9j6tE0qV394rxj1vwtQ9SOpdTGf7CaOmlbm2CwKH
1Y+0GrtmZq3dzGF0iMUQJy4GvZFiWIE5wpM2aYUcAQQgraBUsRSj8tUkNI3N56WJ
0ll1Ls6edunsk3jB52OW6EDphgOL09nuv+4O2up4Di3tyUOe/XZHehfAJbKpypWM
I7ERRfyBEFxcQsQCXaYTAkHYv7M7atlQgKZn5xhUqQe7kcc2rR+04KYaHczIHs0j
pcMzQL4gfFiQFVRQCPbSRh8ea41Y+XlQIBwCtiQds6Q0jwLn6RYFXdtWp+0cq46E
/BOET/KLgKEn69/S5YkMkGRPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpWwZUvRw
wN8jWygndOxK3QmKUIkwHwYDVR0jBBgwFoAUg8K1S2QeP/BuMaK0RQwVetrVm2gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3RTVGLzgwQzRCMzAwNjUz
ODExRUY4QjQ2ODk2RUM0RjlBRTAyL2c4SzFTMlFlUF9CdU1hSzBSUXdWZXRyVm0y
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZzhLMVMyUWVQX0J1TWFLMFJRd1ZldHJWbTJnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3
RTVGLzgwQzRCMzAwNjUzODExRUY4QjQ2ODk2RUM0RjlBRTAyL2c4SzFTMlFlUF9C
dU1hSzBSUXdWZXRyVm0yZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADqGQu0vPuibabNyAWPEIxULavJ1sV2rYoaQAlrUdH7DfoQBcaUpOQz2
4QZL9ZBXmaPdR4w+C2RqwW+PvEAtsYplVzzoyzaNYCtG3wq1A1DyVYTtf/m122pb
eixJQ/YbPJ45HMpIhMNp7B69kw6h2ZLMcOMAJwgeYZvfTJO2AfiuhoqJtVCibJdw
C/v8RV4xu/7vUnb1WG8VvlJlWMwDss633mnOrNxAjFU686VaIgTriw7bxSwEHCAi
1ELFrz5bMod6za0mys/uvt6CAz3ogOnHV7tHH65Xw4WVM2NL3axij0SAJ6A2u0Bn
Ebx+Q2clRJvJFirzUJAdcOtwCevupG8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:54 2025 by rpki-client