Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json)
Hash identifier: SkEhdjGubLqF1niIiR0ZrZKq3Ay/EWxkSMS/8owLhoQ=
Subject key identifier: 8C:73:D4:9A:AB:AF:EF:90:51:C0:5B:C7:3D:D0:0F:2A:71:21:11:71
Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
Manifest number: 0132
Signing time: Fri 31 Jan 2025 03:41:07 +0000
Manifest this update: Fri 31 Jan 2025 03:41:06 +0000
Manifest next update: Fri 07 Feb 2025 03:41:06 +0000
Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: Xv/Vu1LqIQQWNAzqmrN6S7dFJvCdmcBZ1R6EsWPj/vA=)
2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /g02epL+NyCJaEeLF1U/HHteqWgxtq7I5NLpXCZSdQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Validity
Not Before: Jan 31 03:41:06 2025 GMT
Not After : Feb 7 03:41:06 2025 GMT
Subject: CN=679c4653-28a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:cc:5f:9e:27:a2:db:a9:07:cd:a8:1d:ec:
d2:99:be:36:ad:f8:58:70:20:5e:62:09:9b:c6:d8:
29:1f:8c:19:4b:0c:df:63:d7:c7:db:6a:18:d0:f0:
f6:5b:25:06:5c:04:e0:f6:44:b3:d4:e4:c2:1e:dc:
d0:83:84:fa:df:6b:50:0d:ac:97:49:5f:89:53:28:
fd:6c:eb:c6:ce:d6:2a:72:d1:54:91:c1:e5:f0:d3:
07:c3:d5:ef:56:0f:49:c2:fd:35:e5:20:5a:9a:68:
85:27:30:81:93:23:48:8e:7f:d9:52:9f:32:76:02:
fe:88:10:b4:ae:72:e2:80:ec:a1:be:2f:cb:1e:90:
54:b3:6e:7c:bc:7b:28:55:ec:14:7e:f8:30:01:57:
8f:4c:5a:5a:01:00:4b:25:96:4a:5b:e4:d5:c1:27:
6c:bd:7c:bb:a6:d5:c5:1a:e8:d5:5d:a0:1c:5d:6d:
04:39:1c:df:d9:f1:f9:23:14:c8:ff:f3:36:1e:73:
ca:0f:27:d3:a9:d0:bb:1f:ab:bf:82:25:ba:da:96:
f1:d3:9f:8d:24:ed:71:14:a1:73:48:92:7c:58:93:
3b:a4:47:b1:1e:99:18:17:42:1c:ea:ec:03:46:33:
8a:3c:73:31:5c:76:c0:60:6c:31:37:fc:88:8e:90:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:73:D4:9A:AB:AF:EF:90:51:C0:5B:C7:3D:D0:0F:2A:71:21:11:71
X509v3 Authority Key Identifier:
keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:58:22:74:73:48:cc:95:58:7d:90:2e:b9:48:7e:56:9f:0b:
95:ac:9b:60:4a:de:3d:05:a2:1b:a2:db:d9:3a:a6:14:56:c4:
8d:f6:dc:46:95:df:05:c4:42:73:46:47:b6:85:82:6b:84:fa:
bf:d6:73:6d:c5:9a:6f:2a:dc:16:49:68:13:56:37:e4:dc:7b:
15:22:9d:e1:d6:f3:99:7f:73:e2:88:74:a8:e3:e5:55:94:e8:
f1:89:19:f1:35:06:2d:c9:2a:51:95:ed:6f:ba:e8:b4:0e:bc:
90:00:f1:95:89:37:2d:92:40:d1:60:83:17:3e:30:be:b6:d0:
78:29:0b:97:37:df:31:74:86:59:49:11:72:96:1e:cc:2d:60:
dd:fc:94:da:87:9a:de:c6:f1:b5:2f:83:af:c9:ec:62:ba:4c:
97:7e:38:8b:d2:79:30:d3:e9:bf:10:90:b9:c2:68:eb:a2:2f:
a1:c5:b0:fa:83:16:03:0d:06:e8:93:22:70:07:bd:a6:5e:f9:
6b:8a:06:21:08:18:89:4a:a9:49:e6:8e:ca:6c:06:e9:74:d6:
13:93:b7:18:81:69:ae:a5:0d:df:c2:57:75:32:ed:06:81:35:
1d:3c:86:e4:aa:7a:35:6c:2a:15:be:f3:eb:90:51:3d:6a:b8:
2e:e3:2c:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC
NkE5MDU4MEQwHhcNMjUwMTMxMDM0MTA2WhcNMjUwMjA3MDM0MTA2WjAYMRYwFAYD
VQQDEw02NzljNDY1My0yOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAykbMX54notupB82oHezSmb42rfhYcCBeYgmbxtgpH4wZSwzfY9fH22oY0PD2
WyUGXATg9kSz1OTCHtzQg4T632tQDayXSV+JUyj9bOvGztYqctFUkcHl8NMHw9Xv
Vg9Jwv015SBammiFJzCBkyNIjn/ZUp8ydgL+iBC0rnLigOyhvi/LHpBUs258vHso
VewUfvgwAVePTFpaAQBLJZZKW+TVwSdsvXy7ptXFGujVXaAcXW0EORzf2fH5IxTI
//M2HnPKDyfTqdC7H6u/giW62pbx05+NJO1xFKFzSJJ8WJM7pEexHpkYF0Ic6uwD
RjOKPHMxXHbAYGwxN/yIjpC5HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxz1Jqr
r++QUcBbxz3QDypxIRFxMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB
RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX
QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi
YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARWCJ0c0jMlVh9kC65SH5WnwuVrJtgSt49BaIbotvZOqYUVsSN9txG
ld8FxEJzRke2hYJrhPq/1nNtxZpvKtwWSWgTVjfk3HsVIp3h1vOZf3PiiHSo4+VV
lOjxiRnxNQYtySpRle1vuui0DryQAPGViTctkkDRYIMXPjC+ttB4KQuXN98xdIZZ
SRFylh7MLWDd/JTah5rexvG1L4OvyexiukyXfjiL0nkw0+m/EJC5wmjroi+hxbD6
gxYDDQbokyJwB72mXvlrigYhCBiJSqlJ5o7KbAbpdNYTk7cYgWmupQ3fwld1Mu0G
gTUdPIbkqno1bCoVvvPrkFE9argu4yxo
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:40 2025 by rpki-client