Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json)
Hash identifier: QCAWgGHT1mAeTg2PJjct+DFiltz0+VPU0ULhUmrNRl8=
Subject key identifier: 2C:98:55:4D:DB:44:39:23:63:CB:F5:A3:1C:D2:F5:D1:AD:C7:DB:A6
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
Manifest number: E8
Signing time: Fri 31 Jan 2025 04:37:01 +0000
Manifest this update: Fri 31 Jan 2025 04:37:01 +0000
Manifest next update: Fri 07 Feb 2025 04:37:01 +0000
Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: 48DOhcEbjxe8J8iiDWWIYf+TaTy2QyBPi0ceZmeJLrM=)
2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: 1nis0P6SfwA6Mcq8SFQmwhxCRMw2QytQSM1sy/jc0jU=)
3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: KgYF6AgzMh0SR6YaAVsJGBjcvKCcJWg6gXxqQiLpD64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Validity
Not Before: Jan 31 04:37:01 2025 GMT
Not After : Feb 7 04:37:01 2025 GMT
Subject: CN=679c536d-8ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:0b:d9:e9:82:4f:a9:41:f1:bb:d9:29:e9:
1d:ac:c7:16:fb:c1:eb:f3:80:2b:e3:0c:f6:22:c7:
ca:7d:d2:e8:5e:21:fa:65:3d:5e:b1:e5:e7:9e:ab:
35:d4:57:73:f0:dd:66:b4:6f:b8:48:2f:c4:10:3f:
82:3a:c7:7a:04:46:77:7c:e6:b4:a2:b3:78:76:c9:
a5:f9:f1:96:e2:7e:30:6d:58:6a:a2:2d:3d:3c:de:
cd:a5:aa:14:1f:cf:d2:4a:26:85:f0:7b:67:75:b9:
21:bd:e9:8e:d3:16:39:c6:95:1a:8f:8c:44:42:c5:
50:d1:25:d4:49:62:8a:af:0c:ad:5b:9f:b0:2e:62:
03:e8:7f:e6:4b:d2:5f:ef:92:55:95:47:48:c3:d5:
ee:39:b7:03:56:76:b4:2b:f0:b3:4d:a1:aa:f5:1a:
56:db:c2:ab:ea:15:e0:d5:85:4c:56:d3:87:37:bd:
46:36:4e:72:ec:fb:7d:04:2e:dc:c1:79:4f:ed:84:
ae:ab:25:63:a4:10:0d:9f:60:22:0b:c8:8e:98:bf:
e2:12:0c:ec:22:ef:20:f3:7a:c4:28:94:53:64:8e:
c3:2c:7b:92:73:12:65:d4:72:9d:6e:67:c5:ae:4d:
79:82:1c:ff:18:8c:3c:44:59:91:cc:c9:c1:c3:28:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:98:55:4D:DB:44:39:23:63:CB:F5:A3:1C:D2:F5:D1:AD:C7:DB:A6
X509v3 Authority Key Identifier:
keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5e:67:fa:2c:84:6f:88:82:22:dc:25:bb:10:33:2b:64:bd:
b6:9b:63:d9:be:66:37:f3:e2:c6:76:38:b8:f4:14:49:5d:a3:
a9:12:c0:42:5f:c9:a8:50:16:d1:1f:41:a6:dd:2f:03:59:e3:
3e:b3:82:de:e3:eb:65:45:71:24:ba:df:17:a3:b3:7c:ee:27:
41:b3:f5:0a:ac:d3:9d:04:5b:74:ea:85:77:6a:c3:c4:b8:79:
9f:93:f2:f1:de:c3:4c:d0:f7:7e:5d:15:1a:46:de:94:1c:04:
d8:1a:99:72:08:2c:a6:b6:b1:91:f1:80:55:77:ab:4d:4b:66:
e5:95:d7:98:10:23:dc:70:0f:3a:9a:f6:3d:a1:26:26:25:03:
27:b5:bb:8e:d3:3a:14:d4:4a:91:61:16:cf:89:3a:13:0d:99:
a7:e8:98:aa:39:84:ce:75:e8:43:11:11:bd:88:2f:08:e2:c0:
43:6d:42:1d:2d:4c:d6:80:00:78:14:df:0c:f3:7b:5b:43:52:
dc:5a:cf:8b:78:01:15:ff:94:53:bf:84:00:f4:9e:80:80:1e:
25:a1:14:96:eb:fa:46:af:3e:cc:75:70:25:10:3a:b9:18:30:
51:0b:c5:c4:af:00:2c:41:96:cd:8c:01:d1:76:ee:99:55:c1:
db:a4:cd:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkzOUYxMTAvBgNVBAUTKDA3MUUyNTg1NUU2QTM1QjNEODA4RkY3QTYwQTA4Qjg3
ODEzNTYzNjIwHhcNMjUwMTMxMDQzNzAxWhcNMjUwMjA3MDQzNzAxWjAYMRYwFAYD
VQQDEw02NzljNTM2ZC04Y2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwDIL2emCT6lB8bvZKekdrMcW+8Hr84Ar4wz2IsfKfdLoXiH6ZT1eseXnnqs1
1Fdz8N1mtG+4SC/EED+COsd6BEZ3fOa0orN4dsml+fGW4n4wbVhqoi09PN7NpaoU
H8/SSiaF8HtndbkhvemO0xY5xpUaj4xEQsVQ0SXUSWKKrwytW5+wLmID6H/mS9Jf
75JVlUdIw9XuObcDVna0K/CzTaGq9RpW28Kr6hXg1YVMVtOHN71GNk5y7Pt9BC7c
wXlP7YSuqyVjpBANn2AiC8iOmL/iEgzsIu8g83rEKJRTZI7DLHuScxJl1HKdbmfF
rk15ghz/GIw8RFmRzMnBwyjuDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyYVU3b
RDkjY8v1oxzS9dGtx9umMB8GA1UdIwQYMBaAFAceJYVeajWz2Aj/emCgi4eBNWNi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTM5Ri8yMkU1RjY1NjhB
QzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5iUFlDUDk2WUtDTGg0RTFZ
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVkySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTM5Ri8yMkU1RjY1NjhBQzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5i
UFlDUDk2WUtDTGg0RTFZMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfXmf6LIRviIIi3CW7EDMrZL22m2PZvmY38+LGdji49BRJXaOpEsBC
X8moUBbRH0Gm3S8DWeM+s4Le4+tlRXEkut8Xo7N87idBs/UKrNOdBFt06oV3asPE
uHmfk/Lx3sNM0Pd+XRUaRt6UHATYGplyCCymtrGR8YBVd6tNS2blldeYECPccA86
mvY9oSYmJQMntbuO0zoU1EqRYRbPiToTDZmn6JiqOYTOdehDERG9iC8I4sBDbUId
LUzWgAB4FN8M83tbQ1LcWs+LeAEV/5RTv4QA9J6AgB4loRSW6/pGrz7MdXAlEDq5
GDBRC8XErwAsQZbNjAHRdu6ZVcHbpM3Q
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:19 2025 by rpki-client