Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json)
Hash identifier: /KQDHF7XxD0ZP/BK70VsiqoId1ihLaX0rYifzXk4+3c=
Subject key identifier: BD:73:CF:7B:9A:3E:89:C1:4E:D9:DC:B2:24:96:CC:E9:0C:4B:74:A1
Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36
Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236
Certificate serial: 1141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
Manifest number: 113C
Signing time: Fri 31 Jan 2025 17:15:10 +0000
Manifest this update: Fri 31 Jan 2025 17:15:09 +0000
Manifest next update: Fri 07 Feb 2025 17:15:09 +0000
Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: ib4k+GQQxQz/IyFEL7YA4YHoRZf8/XImnMF2D16/KAs=)
2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: n0eE4w1ioXiku75wdXVIUXgqTRR1ty++Snk078GZCnM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4417 (0x1141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236
Validity
Not Before: Jan 31 17:15:09 2025 GMT
Not After : Feb 7 17:15:09 2025 GMT
Subject: CN=679d051d-0546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:dd:9e:49:7c:a6:38:ac:c5:7e:3d:5a:11:
ae:92:f2:86:e2:dc:5f:e4:7a:48:68:f7:54:2b:1c:
56:8c:74:16:88:00:d6:85:0a:86:d2:4a:ad:ba:12:
a7:76:0b:34:cd:53:8f:63:5b:60:76:52:86:ab:85:
18:4d:20:f0:23:d0:41:bb:fe:65:e5:5f:28:ff:ff:
3d:eb:a9:7b:dd:dc:fb:e8:10:a2:a9:13:54:6c:61:
cc:53:41:61:54:13:c4:a2:71:0e:2d:59:cc:a1:f4:
9f:5b:48:ff:e6:7f:30:93:01:0d:e8:84:e4:f4:d6:
79:d5:e5:55:e5:ae:ab:54:31:1f:5e:51:06:b6:04:
54:f2:1b:97:3e:be:54:3b:74:35:b7:04:1e:39:b9:
3a:0e:57:2c:d9:35:f0:51:8e:f5:f4:78:2b:6a:65:
5a:a4:bc:db:34:3b:98:f9:b3:29:68:9a:01:f6:33:
3d:f4:76:4a:72:91:d0:30:64:ea:bd:a9:96:04:43:
e7:f8:34:06:71:c2:77:46:36:4b:16:99:89:c9:e2:
60:09:b9:79:11:58:af:76:6b:f4:18:b9:55:93:09:
70:66:aa:1d:ec:ad:87:63:b2:91:03:d2:38:26:eb:
58:7f:8c:d6:77:67:92:5a:93:7a:f4:50:92:8e:05:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:73:CF:7B:9A:3E:89:C1:4E:D9:DC:B2:24:96:CC:E9:0C:4B:74:A1
X509v3 Authority Key Identifier:
keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ce:dc:b5:88:69:e8:c6:3a:83:ee:72:43:86:2c:61:20:a9:
8e:8d:d2:7c:9e:4d:cb:7d:83:26:e1:17:3b:5a:f4:e1:8c:8d:
f0:34:41:cc:18:01:d6:2e:7e:cf:78:c6:87:6c:05:ca:a9:48:
b2:c0:3d:ad:a3:f5:99:7b:bb:1f:b7:89:e4:20:23:12:00:91:
91:af:92:72:5f:70:cc:0d:ff:a2:ff:f2:94:5f:00:a1:e7:a3:
5c:4d:75:fe:64:a3:46:e5:f3:d8:f0:38:34:b9:23:3f:6d:48:
1b:fc:37:37:c2:4d:af:28:e1:dc:18:60:8d:c2:e5:59:53:9c:
38:4b:f4:57:c0:02:fb:64:09:0c:32:bf:2e:d5:04:0f:b0:c2:
3c:db:4d:4a:0b:a5:49:a2:ad:5c:05:c6:86:ee:ac:87:c6:1b:
8a:f8:ae:8f:2e:c2:bc:e1:a5:4d:23:ee:0c:57:76:36:5c:52:
5b:c1:43:60:0b:d8:be:5c:d0:11:4a:6a:76:67:cc:b1:a2:c1:
9b:b7:eb:be:d1:c5:e2:64:6c:b4:50:95:64:aa:4a:b6:47:75:
42:51:b6:09:64:fe:27:cf:25:07:4e:c7:ec:ca:37:a6:a2:af:
f2:d0:e8:f9:a4:09:87:c6:34:6c:43:bb:ff:c7:d6:5a:2c:dd:
ba:ed:59:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx
RTQ1NEIyMzYwHhcNMjUwMTMxMTcxNTA5WhcNMjUwMjA3MTcxNTA5WjAYMRYwFAYD
VQQDEw02NzlkMDUxZC0wNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Lvdnkl8pjisxX49WhGukvKG4txf5HpIaPdUKxxWjHQWiADWhQqG0kqtuhKn
dgs0zVOPY1tgdlKGq4UYTSDwI9BBu/5l5V8o//8966l73dz76BCiqRNUbGHMU0Fh
VBPEonEOLVnMofSfW0j/5n8wkwEN6ITk9NZ51eVV5a6rVDEfXlEGtgRU8huXPr5U
O3Q1twQeObk6Dlcs2TXwUY719HgramVapLzbNDuY+bMpaJoB9jM99HZKcpHQMGTq
vamWBEPn+DQGccJ3RjZLFpmJyeJgCbl5EVivdmv0GLlVkwlwZqod7K2HY7KRA9I4
JutYf4zWd2eSWpN69FCSjgWdRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1zz3ua
PonBTtncsiSWzOkMS3ShMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE
RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85
RFFxZW8tTjBON2tlUlVzalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAszty1iGnoxjqD7nJDhixhIKmOjdJ8nk3LfYMm4Rc7WvThjI3wNEHM
GAHWLn7PeMaHbAXKqUiywD2to/WZe7sft4nkICMSAJGRr5JyX3DMDf+i//KUXwCh
56NcTXX+ZKNG5fPY8Dg0uSM/bUgb/Dc3wk2vKOHcGGCNwuVZU5w4S/RXwAL7ZAkM
Mr8u1QQPsMI8201KC6VJoq1cBcaG7qyHxhuK+K6PLsK84aVNI+4MV3Y2XFJbwUNg
C9i+XNARSmp2Z8yxosGbt+u+0cXiZGy0UJVkqkq2R3VCUbYJZP4nzyUHTsfsyjem
oq/y0Oj5pAmHxjRsQ7v/x9ZaLN267Vlm
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:48 2025 by rpki-client