Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
File: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft (raw, json)
Hash identifier: u55Z+aCh98Mptc61uMHg+F24YJ9phMY8bfdIZtPZyGg=
Subject key identifier: AE:02:D3:9F:84:70:15:6B:D1:95:94:4F:75:6C:8D:77:B5:CE:C1:1F
Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
Certificate issuer: /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
Manifest number: 0187
Signing time: Fri 31 Jan 2025 03:04:47 +0000
Manifest this update: Fri 31 Jan 2025 03:04:47 +0000
Manifest next update: Fri 07 Feb 2025 03:04:47 +0000
Files and hashes: 1: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl (hash: s8vdbElVUsce27W2PK4mFgNC2p6xIQBj81canrCSQ6Q=)
2: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (hash: zDC4POi/dThAbHtgsplFEXgo+0R27HuDtCIu846C5u4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Validity
Not Before: Jan 31 03:04:47 2025 GMT
Not After : Feb 7 03:04:47 2025 GMT
Subject: CN=679c3dcf-da8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:33:a7:81:2a:ae:1f:92:65:17:70:43:5a:
a4:73:2d:88:78:48:cc:a0:36:89:3d:a1:c2:33:7d:
d2:58:e9:31:01:d6:95:0d:b7:fc:a5:99:dc:32:cf:
4e:72:87:e9:7f:8b:90:0c:23:39:6b:ee:a9:45:bd:
74:08:99:18:8a:88:4e:c0:3f:d0:ba:cb:bf:84:73:
37:18:ae:9b:9b:d1:05:a7:18:25:e4:62:52:a2:fd:
7c:62:c9:e4:dd:07:49:c6:07:5f:de:6b:43:32:86:
11:b3:1e:e7:a3:d2:32:ed:0e:f5:b1:23:58:0b:90:
56:4d:e1:38:72:ff:ca:6a:99:33:31:a1:6f:f8:1a:
45:62:01:66:52:92:b6:0c:aa:47:dd:75:f3:c4:99:
f4:3c:ea:0e:7b:1c:24:7f:f9:b5:52:0f:4c:36:25:
b4:39:10:93:4d:84:5d:38:5a:28:55:56:9e:33:51:
e9:6f:5a:d7:8a:d9:9b:0c:35:b5:84:b6:de:ac:79:
9c:a6:3e:d5:9c:ae:3c:f3:07:02:ab:b1:17:79:68:
36:0d:fa:ca:3d:c6:dd:b6:41:3a:af:a2:c3:78:8b:
0b:4b:ac:f9:2a:3b:5e:9a:b8:e0:ad:1f:bf:2d:01:
48:d1:a8:3f:89:f4:51:73:ea:1a:90:ec:9e:65:9d:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:02:D3:9F:84:70:15:6B:D1:95:94:4F:75:6C:8D:77:B5:CE:C1:1F
X509v3 Authority Key Identifier:
keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:16:ba:79:eb:43:50:8f:ce:44:f5:c0:cd:8d:f8:e8:84:7e:
3a:30:0a:96:ec:c5:06:83:d9:4e:17:7f:e9:82:46:ba:1e:df:
69:7f:92:95:15:29:46:71:09:57:2e:c1:60:ef:60:a7:35:4d:
c9:2d:ac:c6:79:53:1f:63:a1:47:bf:78:19:63:e5:f1:03:df:
40:26:2f:3d:d8:e9:10:11:6f:62:e9:27:02:53:14:83:f3:e8:
96:63:86:a8:f7:b6:26:48:53:05:11:d5:85:f9:ad:45:3e:0e:
9d:f4:bc:a4:75:72:bd:3d:e5:6a:75:d6:d7:c0:ad:07:c4:f6:
59:39:9e:99:2f:ac:7a:69:0d:a9:25:c0:62:23:91:a4:9b:8b:
7e:6c:a3:ad:45:0a:f7:c6:c3:9f:b7:df:4b:3d:fd:fb:91:93:
fd:e9:2c:c7:6d:63:86:d7:4f:02:4d:86:35:b2:98:9b:bd:36:
eb:50:bf:63:9f:25:2f:b5:d5:4f:09:a4:e4:77:e0:6d:b8:4f:
cd:b5:9f:67:e1:0a:70:4d:9e:37:38:af:cb:ce:8d:32:76:69:
a5:9c:10:f0:54:fe:ef:bd:21:42:02:59:8b:79:2f:a2:ce:61:
dc:d5:b2:0e:b8:a6:bf:4a:da:96:72:94:1f:a3:2d:28:1f:08:
7c:95:66:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JBOTcxMTAvBgNVBAUTKEFGRDk0M0U0QjE0Mjc2MzY1OUUwOEY4REJGNkNFN0U2
RDgwQ0M1MTcwHhcNMjUwMTMxMDMwNDQ3WhcNMjUwMjA3MDMwNDQ3WjAYMRYwFAYD
VQQDEw02NzljM2RjZi1kYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5G8zp4Eqrh+SZRdwQ1qkcy2IeEjMoDaJPaHCM33SWOkxAdaVDbf8pZncMs9O
cofpf4uQDCM5a+6pRb10CJkYiohOwD/Qusu/hHM3GK6bm9EFpxgl5GJSov18Ysnk
3QdJxgdf3mtDMoYRsx7no9Iy7Q71sSNYC5BWTeE4cv/KapkzMaFv+BpFYgFmUpK2
DKpH3XXzxJn0POoOexwkf/m1Ug9MNiW0ORCTTYRdOFooVVaeM1Hpb1rXitmbDDW1
hLberHmcpj7VnK488wcCq7EXeWg2DfrKPcbdtkE6r6LDeIsLS6z5KjtemrjgrR+/
LQFI0ag/ifRRc+oakOyeZZ2ZgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4C05+E
cBVr0ZWUT3VsjXe1zsEfMB8GA1UdIwQYMBaAFK/ZQ+SxQnY2WeCPjb9s5+bYDMUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkE5Ny9GMUZFQjFGRUFD
NEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2RqWlo0SS1OdjJ6bjV0Z014
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I5bEQ1TEZDZGpaWjRJLU52MnpuNXRnTXhSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkE5Ny9GMUZFQjFGRUFDNEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2Rq
Wlo0SS1OdjJ6bjV0Z014UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXFrp560NQj85E9cDNjfjohH46MAqW7MUGg9lOF3/pgka6Ht9pf5KV
FSlGcQlXLsFg72CnNU3JLazGeVMfY6FHv3gZY+XxA99AJi892OkQEW9i6ScCUxSD
8+iWY4ao97YmSFMFEdWF+a1FPg6d9LykdXK9PeVqddbXwK0HxPZZOZ6ZL6x6aQ2p
JcBiI5Gkm4t+bKOtRQr3xsOft99LPf37kZP96SzHbWOG108CTYY1spibvTbrUL9j
nyUvtdVPCaTkd+BtuE/NtZ9n4QpwTZ43OK/Lzo0ydmmlnBDwVP7vvSFCAlmLeS+i
zmHc1bIOuKa/StqWcpQfoy0oHwh8lWas
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:49 2025 by rpki-client