Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
File: An8FUlFPJEqU7j8GVypK9zNWVzc.mft (raw, json)
Hash identifier: BYlcboJJQP7cKUr8qA+e87XNyPFMkslP/WLmOsInpRo=
Subject key identifier: FC:20:F7:09:82:37:B3:91:B9:2E:94:BB:FB:8E:13:24:7B:1D:C3:F1
Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
Manifest number: 01C3
Signing time: Fri 31 Jan 2025 02:20:30 +0000
Manifest this update: Fri 31 Jan 2025 02:20:29 +0000
Manifest next update: Fri 07 Feb 2025 02:20:29 +0000
Files and hashes: 1: An8FUlFPJEqU7j8GVypK9zNWVzc.crl (hash: 89jmqtQ8CorC4mxxUSaeDDhYqxTDmB0ckxAKdJOvLaU=)
2: 7B00C6B83F1D11ED8A66DC5AC4F9AE02.roa (hash: 2Fh4hwQIdZbln/uQFk/hnm7n5pbTcIACPB8cEmZ2S3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Validity
Not Before: Jan 31 02:20:29 2025 GMT
Not After : Feb 7 02:20:29 2025 GMT
Subject: CN=679c336d-8b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:e0:33:14:67:4d:fc:b8:38:40:f8:aa:32:
a1:70:74:7c:ed:d6:eb:e6:04:6c:9b:ae:87:65:d3:
84:42:b4:06:d4:66:a9:64:30:42:87:c2:da:37:a8:
b6:23:a9:d4:73:6e:ca:81:27:f8:37:4a:8c:50:1f:
5e:df:99:f9:17:55:c2:44:76:7d:66:fe:a1:c4:09:
3e:8d:12:21:4e:51:42:57:12:f1:e7:ce:ea:f9:13:
a3:e7:d8:5e:75:de:1c:f2:45:72:a8:95:6c:bd:51:
6b:45:87:7b:6e:f9:d3:a9:ba:07:bf:6d:92:5f:56:
d3:5b:d3:bf:e6:9a:66:36:c3:ab:f6:15:47:a6:00:
6a:41:82:a7:d1:38:78:a3:38:4c:50:fb:f2:1f:ef:
63:e9:2c:17:55:ca:ba:e0:d1:4f:18:a7:4c:f0:d4:
d7:98:60:76:04:ac:dd:e6:68:59:03:49:e2:4d:37:
24:00:40:83:13:46:f4:1e:da:f9:2b:46:ae:6e:61:
07:8e:1e:1d:76:3d:59:75:c4:ac:03:c5:1f:68:9c:
28:8d:28:d5:be:bb:81:a7:92:d7:fa:70:7e:5f:57:
86:d5:64:6e:6c:0c:79:08:1e:bc:a8:6d:b6:a9:52:
57:01:cc:f6:58:9e:4d:ae:8a:d3:2e:66:b8:85:d3:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:20:F7:09:82:37:B3:91:B9:2E:94:BB:FB:8E:13:24:7B:1D:C3:F1
X509v3 Authority Key Identifier:
keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:2f:86:6a:d7:2a:35:70:cd:cd:3a:a0:3e:be:93:4b:b1:71:
12:29:aa:f7:f2:ca:61:1e:b8:ae:23:33:e7:9d:79:69:07:df:
36:d2:cc:da:f6:8d:02:3e:7d:f9:8f:30:ee:61:ae:3b:d3:ee:
2c:4c:04:59:62:5e:06:fb:d3:11:fa:47:08:bf:98:e9:96:8d:
0c:40:00:6e:69:0f:86:1b:d6:a5:cf:70:0c:ef:be:8a:6d:8a:
a6:87:b2:f0:be:6f:a9:c0:15:75:47:a6:72:26:f9:b1:7b:8b:
70:58:cd:db:69:11:a3:9c:fb:97:04:ce:65:8a:ce:83:63:fd:
d6:b2:47:b2:a2:ec:4a:56:18:34:01:5b:41:95:0c:26:a6:fc:
66:c1:1c:bb:42:52:f3:fb:d6:54:55:ec:92:58:a5:dc:a7:34:
51:b5:bf:13:48:1d:84:7f:4a:49:47:1c:df:9f:21:2d:e7:57:
a7:eb:2c:d7:dc:c9:3e:21:39:93:28:a2:6f:2a:3d:b8:77:cf:
26:56:6e:62:38:51:fd:42:c7:1a:36:7d:36:ec:4b:4c:39:d2:
56:9c:26:af:47:1b:fa:00:9e:be:f0:95:f9:2c:d7:7f:80:b4:
23:77:fc:94:b1:63:8f:e1:2d:29:00:ab:75:90:c5:c1:d2:be:
1a:b2:e9:5e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UwNDIxMTAvBgNVBAUTKDAyN0YwNTUyNTE0RjI0NEE5NEVFM0YwNjU3MkE0QUY3
MzM1NjU3MzcwHhcNMjUwMTMxMDIyMDI5WhcNMjUwMjA3MDIyMDI5WjAYMRYwFAYD
VQQDEw02NzljMzM2ZC04YjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3q7gMxRnTfy4OED4qjKhcHR87dbr5gRsm66HZdOEQrQG1GapZDBCh8LaN6i2
I6nUc27KgSf4N0qMUB9e35n5F1XCRHZ9Zv6hxAk+jRIhTlFCVxLx587q+ROj59he
dd4c8kVyqJVsvVFrRYd7bvnTqboHv22SX1bTW9O/5ppmNsOr9hVHpgBqQYKn0Th4
ozhMUPvyH+9j6SwXVcq64NFPGKdM8NTXmGB2BKzd5mhZA0niTTckAECDE0b0Htr5
K0aubmEHjh4ddj1ZdcSsA8UfaJwojSjVvruBp5LX+nB+X1eG1WRubAx5CB68qG22
qVJXAcz2WJ5NrorTLma4hdMu/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwg9wmC
N7ORuS6Uu/uOEyR7HcPxMB8GA1UdIwQYMBaAFAJ/BVJRTyRKlO4/BlcqSvczVlc3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA0Mi9BRTlCMUI2RTNF
NEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpFcVU3ajhHVnlwSzl6TldW
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FuOEZVbEZQSkVxVTdqOEdWeXBLOXpOV1Z6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTA0Mi9BRTlCMUI2RTNFNEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpF
cVU3ajhHVnlwSzl6TldWemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4L4Zq1yo1cM3NOqA+vpNLsXESKar38sphHriuIzPnnXlpB9820sza
9o0CPn35jzDuYa470+4sTARZYl4G+9MR+kcIv5jplo0MQABuaQ+GG9alz3AM776K
bYqmh7Lwvm+pwBV1R6ZyJvmxe4twWM3baRGjnPuXBM5lis6DY/3WskeyouxKVhg0
AVtBlQwmpvxmwRy7QlLz+9ZUVeySWKXcpzRRtb8TSB2Ef0pJRxzfnyEt51en6yzX
3Mk+ITmTKKJvKj24d88mVm5iOFH9QscaNn027EtMOdJWnCavRxv6AJ6+8JX5LNd/
gLQjd/yUsWOP4S0pAKt1kMXB0r4asule
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:32 2025 by rpki-client