Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json)
Hash identifier: KPxOvZ7XooDtmjGvAQ061ptqE4sTHzf/aDMYoaPsxto=
Subject key identifier: 4D:E9:64:79:E8:3D:2B:1D:37:FE:6C:8A:B4:1B:50:5D:73:79:5A:D6
Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Certificate serial: 0342
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
Manifest number: 0339
Signing time: Fri 31 Jan 2025 01:09:43 +0000
Manifest this update: Fri 31 Jan 2025 01:09:43 +0000
Manifest next update: Fri 07 Feb 2025 01:09:43 +0000
Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: s9f49rv9huBy2CwCOVCa7mGmFJ9eE+CU8xknap1kcH0=)
2: AC75DD32AD1411EC91F4E20FC4F9AE02.roa (hash: p0fNzPOpORUUvFGy0TxTI3sFhmvGJV0GSbHaYSRfDAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Validity
Not Before: Jan 31 01:09:43 2025 GMT
Not After : Feb 7 01:09:43 2025 GMT
Subject: CN=679c22d7-aea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:93:74:71:2a:73:13:a8:9d:55:fa:b6:20:
c0:f2:e6:c6:aa:42:88:d5:fb:1d:09:33:a2:c1:af:
45:ec:50:b4:d0:15:31:f5:9c:2d:b2:d6:ba:e8:95:
ef:e7:57:81:a4:3a:e5:b3:3b:5a:43:62:c9:8e:6b:
b6:78:70:7d:0d:83:e2:e0:da:42:77:e2:47:d0:a1:
cf:ce:5a:a2:3e:5d:01:62:47:e7:25:8f:27:02:d0:
19:db:70:04:e5:3c:e2:8c:74:63:01:99:64:10:39:
43:da:82:f4:4c:29:6c:77:17:47:fd:96:dd:52:1b:
a5:72:57:53:ea:7c:f3:0e:bb:ed:a5:11:4b:29:c5:
18:6b:20:bd:42:6d:f9:05:a5:e1:44:6b:ea:2a:3f:
39:95:49:70:be:d1:1e:87:5f:bc:d0:31:3b:6f:84:
5f:82:1a:67:cc:79:22:59:db:88:56:17:a2:e9:52:
d5:0e:17:80:fd:22:38:50:e8:bd:34:e2:1b:aa:46:
df:3e:8e:61:3c:03:d7:69:c5:c1:d3:f7:50:6a:47:
d7:3a:97:05:34:82:5b:2c:86:dc:b8:8a:08:52:a3:
4e:dc:a5:14:df:cc:f4:bb:18:9a:7d:42:ba:05:c4:
b7:56:ab:75:7d:05:3d:f4:78:88:bd:92:3d:9c:c5:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E9:64:79:E8:3D:2B:1D:37:FE:6C:8A:B4:1B:50:5D:73:79:5A:D6
X509v3 Authority Key Identifier:
keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ab:cb:72:5d:33:61:ca:8e:6a:71:82:c5:f2:1d:df:d7:7b:
51:59:45:53:97:dd:8d:f2:82:ab:bd:49:96:fb:7c:93:8b:23:
75:f3:f4:d9:25:26:16:86:97:5f:3f:1e:7c:9f:91:42:11:36:
99:29:ed:0b:9d:f1:4b:6c:74:a2:10:c7:49:b4:bb:90:55:d8:
5a:a2:e7:3b:64:fc:94:84:fe:78:ef:8f:05:8b:8a:09:9e:87:
53:0f:49:57:2a:aa:a1:ec:00:bd:7e:09:0a:1a:5b:38:b0:93:
36:9e:25:9b:53:8c:fd:5c:ff:8d:31:6b:de:6b:b9:23:e8:22:
41:6a:9a:c0:28:d3:5e:52:6e:bc:d5:1a:08:21:97:a5:c2:0a:
1b:7f:02:33:03:b4:b5:2e:1a:82:71:ab:98:99:c1:ae:3a:09:
5f:bc:a9:9f:6c:cf:1e:6a:c9:e2:b7:f4:56:ad:fd:c7:cd:82:
fb:9e:15:af:1e:54:37:8c:69:fe:9e:0a:87:6e:7a:cf:72:b8:
c1:a9:69:3c:06:6b:9c:96:59:7d:01:c3:61:cf:a3:32:35:53:
b2:7c:5a:6e:b9:cc:c6:4c:92:43:f5:d3:71:60:e7:c9:94:0d:
0b:c7:d3:54:9e:45:e4:5d:5e:d7:96:da:6f:6d:80:3d:94:84:
5c:5a:ea:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0
QUZDNjI2Q0UwHhcNMjUwMTMxMDEwOTQzWhcNMjUwMjA3MDEwOTQzWjAYMRYwFAYD
VQQDEw02NzljMjJkNy1hZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudmTdHEqcxOonVX6tiDA8ubGqkKI1fsdCTOiwa9F7FC00BUx9Zwtsta66JXv
51eBpDrlsztaQ2LJjmu2eHB9DYPi4NpCd+JH0KHPzlqiPl0BYkfnJY8nAtAZ23AE
5TzijHRjAZlkEDlD2oL0TClsdxdH/ZbdUhulcldT6nzzDrvtpRFLKcUYayC9Qm35
BaXhRGvqKj85lUlwvtEeh1+80DE7b4RfghpnzHkiWduIVhei6VLVDheA/SI4UOi9
NOIbqkbfPo5hPAPXacXB0/dQakfXOpcFNIJbLIbcuIoIUqNO3KUU38z0uxiafUK6
BcS3Vqt1fQU99HiIvZI9nMVtnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3pZHno
PSsdN/5sirQbUF1zeVrWMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE
MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK
czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm
OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoq8tyXTNhyo5qcYLF8h3f13tRWUVTl92N8oKrvUmW+3yTiyN18/TZ
JSYWhpdfPx58n5FCETaZKe0LnfFLbHSiEMdJtLuQVdhaouc7ZPyUhP54748Fi4oJ
nodTD0lXKqqh7AC9fgkKGls4sJM2niWbU4z9XP+NMWvea7kj6CJBaprAKNNeUm68
1RoIIZelwgobfwIzA7S1LhqCcauYmcGuOglfvKmfbM8easnit/RWrf3HzYL7nhWv
HlQ3jGn+ngqHbnrPcrjBqWk8Bmuclll9AcNhz6MyNVOyfFpuuczGTJJD9dNxYOfJ
lA0Lx9NUnkXkXV7XltpvbYA9lIRcWurp
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:24 2025 by rpki-client