Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier: vvkx0ahUuUwdhbcGyKm4LVUG3CArHj+iM+EV+QJSmqY=
Subject key identifier: D4:CB:35:88:BC:93:58:F7:DB:07:5D:AE:29:7D:9C:E8:DB:6A:96:15
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial: 04BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number: 04AD
Signing time: Fri 31 Jan 2025 00:01:57 +0000
Manifest this update: Fri 31 Jan 2025 00:01:57 +0000
Manifest next update: Fri 07 Feb 2025 00:01:57 +0000
Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: Y1GKujShOyGNUEBh7AGwfT1QBiRH5HSIhJrLwS+GxZM=)
2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: bWFskxvhi7CkjX9KQtUg/L6OTceIBUoGJSArRRh8yOc=)
3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: TEWGyyYFx9ktn3pEsyb60J6bTDtXfXp/IzUXg77M9qA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Validity
Not Before: Jan 31 00:01:57 2025 GMT
Not After : Feb 7 00:01:57 2025 GMT
Subject: CN=679c12f5-d0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:88:96:74:39:77:58:c0:01:3d:9e:92:2f:
95:a7:fd:fb:19:e4:16:cb:b1:f0:c6:c7:ab:8a:a1:
d9:56:11:26:89:a9:b6:6a:52:b6:e7:1c:f2:0a:46:
2c:ac:ad:94:01:5e:dc:0e:8e:b5:d7:71:47:3e:22:
19:41:5b:ff:1e:8d:35:66:af:dc:a1:1f:24:56:fb:
a4:aa:8b:bc:85:49:e8:d9:d9:4b:8d:48:72:f4:fd:
ab:70:09:a7:88:c7:68:fd:92:03:08:12:ae:6b:82:
10:b7:5c:34:3a:6f:ad:e2:6e:8a:00:fc:bd:61:d0:
b3:a8:d7:2c:8c:91:7f:c0:81:31:0a:0f:08:57:95:
c1:0d:83:11:59:3b:24:e4:2f:3d:c0:b1:7c:84:cc:
6d:42:d5:d3:28:be:a8:1f:ab:f3:49:2d:48:bc:d8:
0e:9c:9e:8e:48:80:35:30:1c:fb:38:f5:89:bb:01:
bc:8d:94:b2:98:ed:43:32:05:88:7b:cb:b9:91:df:
0c:76:19:00:58:3e:e3:ee:a8:22:35:fc:71:3e:d5:
97:ca:ac:86:7f:3b:e6:7e:ae:1e:fe:8e:d4:29:08:
09:62:14:96:7b:51:a4:64:d4:96:ef:5d:e6:02:b1:
13:90:e1:6d:86:66:1d:b4:51:0b:bf:28:9d:70:76:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:35:88:BC:93:58:F7:DB:07:5D:AE:29:7D:9C:E8:DB:6A:96:15
X509v3 Authority Key Identifier:
keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:13:8a:7e:74:14:db:46:4f:81:82:09:fb:53:ce:b2:0e:70:
e3:9c:91:81:a6:37:76:07:4e:3b:2f:de:c6:f1:a2:22:ac:8f:
56:b2:87:aa:d3:93:34:99:e3:38:f2:ea:92:f1:ad:81:92:b6:
c5:d7:7b:df:c3:74:32:a4:35:d9:ee:50:78:48:50:2c:2c:3d:
6d:8b:e1:ae:4e:77:ae:9c:15:49:97:95:8b:e1:4f:e3:83:9e:
ef:f2:53:0d:fe:e8:f0:87:f9:5a:f2:f9:08:5c:9a:a2:91:d2:
80:a0:83:1b:d7:10:3d:0a:2f:26:47:d9:0f:e3:68:66:19:3b:
2d:f9:3f:20:9c:20:c8:e4:b8:e2:40:06:75:53:33:36:1d:6b:
ac:b1:01:d9:57:e4:ab:df:f7:d0:2e:70:7c:fb:29:53:64:91:
54:83:d9:9c:25:5e:3f:a1:7a:b9:05:a7:b4:be:d9:1b:12:d9:
45:3c:5a:00:18:9e:e8:6a:5f:f5:e6:b0:da:59:68:73:be:d4:
89:69:18:c5:a9:96:85:00:ce:94:ca:9c:ea:e6:3e:76:b8:db:
9d:f9:df:54:41:8b:77:d3:1f:3a:61:c9:a3:8a:13:c5:c1:28:
c3:2a:46:00:13:f5:16:71:f5:1d:6e:22:60:7c:aa:65:20:20:
0e:19:47:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3
OTI5Mzc2N0EwHhcNMjUwMTMxMDAwMTU3WhcNMjUwMjA3MDAwMTU3WjAYMRYwFAYD
VQQDEw02NzljMTJmNS1kMGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqKIlnQ5d1jAAT2eki+Vp/37GeQWy7HwxseriqHZVhEmiam2alK25xzyCkYs
rK2UAV7cDo6113FHPiIZQVv/Ho01Zq/coR8kVvukqou8hUno2dlLjUhy9P2rcAmn
iMdo/ZIDCBKua4IQt1w0Om+t4m6KAPy9YdCzqNcsjJF/wIExCg8IV5XBDYMRWTsk
5C89wLF8hMxtQtXTKL6oH6vzSS1IvNgOnJ6OSIA1MBz7OPWJuwG8jZSymO1DMgWI
e8u5kd8MdhkAWD7j7qgiNfxxPtWXyqyGfzvmfq4e/o7UKQgJYhSWe1GkZNSW713m
ArETkOFthmYdtFELvyidcHbTfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTLNYi8
k1j32wddril9nOjbapYVMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx
MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp
SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA0E4p+dBTbRk+Bggn7U86yDnDjnJGBpjd2B047L97G8aIirI9Wsoeq
05M0meM48uqS8a2BkrbF13vfw3QypDXZ7lB4SFAsLD1ti+GuTneunBVJl5WL4U/j
g57v8lMN/ujwh/la8vkIXJqikdKAoIMb1xA9Ci8mR9kP42hmGTst+T8gnCDI5Lji
QAZ1UzM2HWussQHZV+Sr3/fQLnB8+ylTZJFUg9mcJV4/oXq5Bae0vtkbEtlFPFoA
GJ7oal/15rDaWWhzvtSJaRjFqZaFAM6Uypzq5j52uNud+d9UQYt30x86YcmjihPF
wSjDKkYAE/UWcfUdbiJgfKplICAOGUdc
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:47:26 2025 by rpki-client