Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft
File: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft (raw, json)
Hash identifier: Yjrm8qvk6v9VYEvI3se8KGAGYKsUs1wy6ZiEsRyYMqo=
Subject key identifier: 77:8D:5A:97:34:EB:48:48:01:F1:82:23:27:EA:14:FF:C0:16:12:6C
Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82
Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182
Certificate serial: 0360
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft
Manifest number: 0357
Signing time: Fri 31 Jan 2025 01:01:46 +0000
Manifest this update: Fri 31 Jan 2025 01:01:45 +0000
Manifest next update: Fri 07 Feb 2025 01:01:45 +0000
Files and hashes: 1: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl (hash: 3peQ9DNmgb9Cns3eHxPmYdrjFHBfm8sXAFHE5aHiBeg=)
2: 688C6AC29D9D11EC958A216AC4F9AE02.roa (hash: UVjSmdKortc7xXR2V1ZwcpHYtGMB4B0YpUSbuXMU18w=)
3: 854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa (hash: u4ixDiIah0HRlbgq6Gff8MvIftonQjJ2hGXt/sRAB/s=)
4: 695DB5289D9D11EC958A216AC4F9AE02.roa (hash: SaFx1B9LN0ZyNkvHhJEWt5kJgn2PgssQSYvBTUpmMDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864 (0x360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182
Validity
Not Before: Jan 31 01:01:45 2025 GMT
Not After : Feb 7 01:01:45 2025 GMT
Subject: CN=679c20fa-4a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:10:e2:93:ff:3e:84:29:f1:b9:63:b5:a5:
3d:24:1d:46:ce:38:a4:95:5a:38:24:98:13:70:1a:
fb:29:41:be:85:76:7d:ef:8c:51:25:84:ba:96:ea:
e7:56:a2:30:a8:91:d5:33:01:85:d1:82:cc:a0:64:
3b:c7:29:b5:58:cb:e6:4a:60:27:2f:33:88:42:1e:
b0:07:e4:ad:b7:2f:28:18:08:a2:ae:83:c4:d3:3b:
b5:9f:0f:bf:21:4e:12:bf:19:b2:4e:16:14:9b:06:
09:dc:22:95:38:cd:5d:71:45:47:1b:1c:76:c3:91:
64:29:af:c1:8c:49:1c:73:a6:62:73:f8:89:f6:f3:
84:44:b1:65:dc:8c:67:9c:14:3b:3b:69:06:bd:d1:
b4:1c:db:0a:ec:29:f2:d2:2e:d6:33:b4:8f:95:69:
ae:51:8c:be:b8:07:e8:66:2a:08:2b:ed:0c:e4:6e:
96:e7:19:12:05:18:4b:26:23:90:f5:6e:5b:9c:b7:
71:d2:bf:5e:57:98:68:03:de:9b:91:af:83:86:f7:
e9:94:2e:d3:07:28:de:26:4a:5c:40:bb:51:37:b6:
66:91:08:d6:d8:87:f0:f4:e6:3c:08:36:6b:95:cb:
bf:08:62:b3:cc:51:6a:f5:df:1e:e6:26:35:a7:9e:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8D:5A:97:34:EB:48:48:01:F1:82:23:27:EA:14:FF:C0:16:12:6C
X509v3 Authority Key Identifier:
keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:05:bf:3b:a9:c9:cb:d7:f6:70:6c:56:8a:ab:a5:05:64:20:
a3:e2:c1:c0:15:0f:a9:c8:85:20:3e:41:77:a0:82:f4:05:5b:
e8:71:c7:06:28:43:0d:b7:97:b1:89:2e:7e:61:d7:cb:95:10:
53:f2:57:66:c4:d3:77:03:3e:25:6e:60:92:0c:62:0d:de:29:
c2:ec:83:91:b5:1c:29:74:68:a2:af:8b:4d:ae:f8:ab:dd:a3:
8c:7b:34:7f:25:77:50:15:cf:c4:65:4f:82:3b:8a:7c:f7:28:
77:8b:dd:d1:5d:c9:ad:67:69:8f:c1:57:8e:b0:19:f1:d1:82:
31:22:bf:8a:1d:33:f6:06:6e:f9:09:9e:11:95:58:34:0b:72:
04:31:74:6a:f1:ad:5b:44:4b:9b:42:da:04:31:ba:4f:58:3c:
3f:64:a5:cd:94:01:c5:91:25:98:77:0e:ad:36:87:54:5f:13:
0b:4f:f0:2a:1f:04:40:e2:4d:a7:90:91:7d:12:bf:23:73:2a:
79:4e:26:43:24:dd:e4:3c:25:34:ca:25:06:c6:c6:c4:55:8f:
70:d6:e9:ec:6e:b6:54:c2:7c:c6:8b:12:d9:d4:df:3c:6c:fb:
04:6c:54:95:ab:9b:81:a2:df:34:82:bf:f7:96:e2:3d:42:91:
b9:71:27:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3
QjMwMzgxODIwHhcNMjUwMTMxMDEwMTQ1WhcNMjUwMjA3MDEwMTQ1WjAYMRYwFAYD
VQQDEw02NzljMjBmYS00YTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1UQ4pP/PoQp8bljtaU9JB1GzjiklVo4JJgTcBr7KUG+hXZ974xRJYS6lurn
VqIwqJHVMwGF0YLMoGQ7xym1WMvmSmAnLzOIQh6wB+Stty8oGAiiroPE0zu1nw+/
IU4SvxmyThYUmwYJ3CKVOM1dcUVHGxx2w5FkKa/BjEkcc6Zic/iJ9vOERLFl3Ixn
nBQ7O2kGvdG0HNsK7Cny0i7WM7SPlWmuUYy+uAfoZioIK+0M5G6W5xkSBRhLJiOQ
9W5bnLdx0r9eV5hoA96bka+DhvfplC7TByjeJkpcQLtRN7ZmkQjW2Ifw9OY8CDZr
lcu/CGKzzFFq9d8e5iY1p57l7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeNWpc0
60hIAfGCIyfqFP/AFhJsMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE
OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NkRCNC9FODREQjk4QTlEOUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFp
Ymp4WVNuQ3JQbEo3TURnWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbBb87qcnL1/ZwbFaKq6UFZCCj4sHAFQ+pyIUgPkF3oIL0BVvocccG
KEMNt5exiS5+YdfLlRBT8ldmxNN3Az4lbmCSDGIN3inC7IORtRwpdGiir4tNrvir
3aOMezR/JXdQFc/EZU+CO4p89yh3i93RXcmtZ2mPwVeOsBnx0YIxIr+KHTP2Bm75
CZ4RlVg0C3IEMXRq8a1bREubQtoEMbpPWDw/ZKXNlAHFkSWYdw6tNodUXxMLT/Aq
HwRA4k2nkJF9Er8jcyp5TiZDJN3kPCU0yiUGxsbEVY9w1unsbrZUwnzGixLZ1N88
bPsEbFSVq5uBot80gr/3luI9QpG5cSe5
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:35 2025 by rpki-client