Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File: FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier: zhErSkyhl+p8cXTyiz9zDx37R5xHIv5ZsmW2g/iZ0ck=
Subject key identifier: DD:15:56:E4:02:8D:4D:7A:8C:92:6A:9F:68:FB:ED:56:35:8F:49:AB
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer: /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial: 0B7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number: 0B75
Signing time: Thu 30 Jan 2025 19:05:31 +0000
Manifest this update: Thu 30 Jan 2025 19:05:31 +0000
Manifest next update: Thu 06 Feb 2025 19:05:31 +0000
Files and hashes: 1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: vwphTWZLJYyoMaii2GEOIOZTvTjkr4DEvoH8rSnenSA=)
2: FC90C520213411EA8D675645C4F9AE02.roa (hash: bfvf5p0RJyl+DBh15oeIU1R+cb9fxOcLHABt0IlZccM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2940 (0xb7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Validity
Not Before: Jan 30 19:05:31 2025 GMT
Not After : Feb 6 19:05:31 2025 GMT
Subject: CN=679bcd7b-4766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:0f:b9:a0:6d:d3:fd:98:c3:fe:06:5a:e3:
f4:5d:60:ea:9c:01:f7:6c:95:ed:85:cd:bf:c3:2a:
a5:19:33:98:2d:f2:17:01:45:fc:4f:20:ff:bd:50:
bf:4f:aa:b7:38:fa:8f:9c:25:30:9e:68:b4:65:60:
0c:0b:6d:dd:17:70:af:9a:00:e4:a9:3e:86:7b:a6:
6a:5a:6b:e1:04:fe:fa:b2:ca:8d:1a:b3:83:b9:59:
9d:73:01:c0:d6:4a:86:95:00:56:e3:d6:7b:94:5b:
b1:bb:cb:c5:c8:98:06:81:f4:dd:4a:20:d8:ce:95:
7b:3a:b0:98:fb:0a:c8:99:49:2a:c3:7e:f6:a2:65:
eb:b8:2d:ec:23:b5:87:05:98:6f:c2:8d:b9:f4:01:
32:be:a4:50:4b:4c:7f:e3:10:48:d5:4a:c9:8d:39:
5c:c5:21:49:92:5c:42:94:25:1e:be:6b:f7:06:5c:
81:3c:2e:58:b4:6a:03:ca:d2:30:dd:18:c0:e6:bd:
1d:b8:bb:47:ae:56:3b:d5:e3:73:e4:e4:97:ac:93:
6f:51:01:20:f1:73:93:b0:1d:db:33:70:67:1e:11:
7c:3e:90:7b:20:6c:e0:40:c2:62:ee:60:cd:0f:99:
72:ed:d0:8b:4d:b7:44:fa:1d:6e:09:83:55:89:f7:
b5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:15:56:E4:02:8D:4D:7A:8C:92:6A:9F:68:FB:ED:56:35:8F:49:AB
X509v3 Authority Key Identifier:
keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:5f:6d:45:e7:0f:fc:0a:4a:0f:54:60:b2:3a:e1:92:49:07:
7e:8b:0f:75:4b:f4:88:52:cc:78:67:f2:76:1d:e0:9c:66:8a:
a6:d8:6f:b7:70:a2:ab:69:26:e2:75:d1:cc:ae:5e:24:17:eb:
72:ea:66:20:52:9b:6e:79:54:43:36:08:c8:33:0a:7a:a7:bb:
85:fa:ae:86:0e:9a:d3:7d:a2:33:0e:83:bf:a5:6b:c5:f8:26:
c9:a5:1f:c9:60:0e:b7:99:31:d4:c5:28:d5:d5:b3:9d:e1:0f:
42:79:5d:c0:f2:18:b3:78:bc:4e:19:63:cc:14:15:f0:22:74:
3a:38:0c:f1:04:c4:bd:b8:2a:be:db:3d:f8:fe:08:a4:42:38:
3d:0f:31:97:d9:58:bf:c7:73:0d:d8:a1:31:6c:ce:89:f2:9e:
47:d7:49:cf:3a:9e:a8:3e:6d:09:ac:eb:da:35:04:4a:0a:8c:
b5:66:f6:70:08:8e:d3:a0:53:a6:3d:e0:10:d6:1f:00:3f:a6:
00:23:66:c6:2d:72:80:1a:aa:8d:b5:62:a6:b8:55:87:61:5c:
60:7b:f9:ea:52:7f:ce:dd:58:25:7f:59:bf:4b:98:2b:f0:4e:
81:88:0f:32:41:bf:ad:b5:db:62:f6:e1:f0:43:68:12:77:20:
3d:9f:42:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3
NzU4MzAwRjkwHhcNMjUwMTMwMTkwNTMxWhcNMjUwMjA2MTkwNTMxWjAYMRYwFAYD
VQQDEw02NzliY2Q3Yi00NzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1APuaBt0/2Yw/4GWuP0XWDqnAH3bJXthc2/wyqlGTOYLfIXAUX8TyD/vVC/
T6q3OPqPnCUwnmi0ZWAMC23dF3CvmgDkqT6Ge6ZqWmvhBP76ssqNGrODuVmdcwHA
1kqGlQBW49Z7lFuxu8vFyJgGgfTdSiDYzpV7OrCY+wrImUkqw372omXruC3sI7WH
BZhvwo259AEyvqRQS0x/4xBI1UrJjTlcxSFJklxClCUevmv3BlyBPC5YtGoDytIw
3RjA5r0duLtHrlY71eNz5OSXrJNvUQEg8XOTsB3bM3BnHhF8PpB7IGzgQMJi7mDN
D5ly7dCLTbdE+h1uCYNVife1sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0VVuQC
jU16jJJqn2j77VY1j0mrMB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx
MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDNCQi80NzI1RkM3ODIxMkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZF
YlVVNFVTWG91MEozV0RBUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASX21F5w/8CkoPVGCyOuGSSQd+iw91S/SIUsx4Z/J2HeCcZoqm2G+3
cKKraSbiddHMrl4kF+ty6mYgUptueVRDNgjIMwp6p7uF+q6GDprTfaIzDoO/pWvF
+CbJpR/JYA63mTHUxSjV1bOd4Q9CeV3A8hizeLxOGWPMFBXwInQ6OAzxBMS9uCq+
2z34/gikQjg9DzGX2Vi/x3MN2KExbM6J8p5H10nPOp6oPm0JrOvaNQRKCoy1ZvZw
CI7ToFOmPeAQ1h8AP6YAI2bGLXKAGqqNtWKmuFWHYVxge/nqUn/O3Vglf1m/S5gr
8E6BiA8yQb+ttdti9uHwQ2gSdyA9n0Il
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:13:04 2025 by rpki-client