Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft
File: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft (raw, json)
Hash identifier: aZLDae9QiD5jJvREgeTG6EL/IDy4F48QJ/3pSnYMt0I=
Subject key identifier: CA:22:B8:A5:B4:60:8A:9F:6E:83:50:65:F6:99:F1:51:BE:BD:CC:AF
Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B
Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft
Manifest number: 0167
Signing time: Fri 31 Jan 2025 03:11:47 +0000
Manifest this update: Fri 31 Jan 2025 03:11:47 +0000
Manifest next update: Fri 07 Feb 2025 03:11:47 +0000
Files and hashes: 1: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl (hash: bOT2Y7UMHb3PONiEc2PBHkZEDS+7XQRQvo2WyJLoEj0=)
2: EA5A9A32BDAA11ED92995562C4F9AE02.roa (hash: la16kPDMZ0PGNGFfbiOJE4nU4r91VONeRM7xfP7lGe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B
Validity
Not Before: Jan 31 03:11:47 2025 GMT
Not After : Feb 7 03:11:47 2025 GMT
Subject: CN=679c3f73-7f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:73:e4:7a:28:60:0f:30:aa:43:ec:0a:c9:
76:9a:e7:0c:aa:ed:fa:6a:0a:33:08:8d:f0:d4:4c:
98:48:72:c0:3b:e5:d2:9b:d5:9a:1c:6b:ed:20:91:
f5:bf:f2:f9:20:36:a5:b4:c1:64:3f:42:4d:b9:07:
7b:c4:50:5b:8b:9c:ff:d1:4f:d3:8f:bc:36:f8:63:
9c:0d:eb:f7:01:33:d0:e6:51:0a:eb:7c:51:8f:82:
b0:95:42:ff:1a:8f:c7:2d:11:35:1b:23:c3:01:50:
e6:3b:d5:08:ce:08:d9:88:a3:8d:3a:c7:5d:4f:f2:
83:9b:3a:ec:8e:f4:61:ef:93:43:5c:7b:67:b4:37:
3e:86:7f:30:4d:de:20:49:f8:29:15:17:8c:b5:41:
a8:6a:ee:66:49:b9:8f:87:28:06:91:45:17:c3:16:
d2:4c:59:0e:96:a8:03:70:5a:1e:a7:16:63:5d:cb:
ad:38:62:95:61:22:f5:48:63:b6:19:19:3d:6e:cc:
7c:53:40:0d:c1:35:ba:6f:0a:75:5c:b2:97:f3:e1:
c0:91:60:63:d6:76:c1:51:b9:3f:00:37:74:f4:b1:
0d:1e:cf:bb:9e:e3:07:01:bd:13:7e:3d:28:16:8e:
fd:75:c5:d7:b0:4e:b7:94:71:1e:57:43:43:08:ce:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:22:B8:A5:B4:60:8A:9F:6E:83:50:65:F6:99:F1:51:BE:BD:CC:AF
X509v3 Authority Key Identifier:
keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:12:1b:a7:2c:b5:29:76:46:7a:68:c5:70:c5:ca:c4:9a:c3:
52:66:b4:f7:1d:d2:20:d4:75:96:9b:5e:aa:e8:5b:15:68:76:
e9:b3:14:a6:97:7a:f8:8f:fd:3b:c6:a1:de:70:68:c2:3a:51:
5d:88:61:59:ed:b8:98:16:96:c8:d9:0b:4b:db:72:e8:e2:8b:
94:00:8a:46:73:b1:b2:79:f2:ff:b5:58:1f:f1:2b:a4:dd:5e:
19:82:18:cf:f5:d0:98:1d:19:ed:6e:49:cc:0f:7e:e9:0a:43:
da:cb:30:9d:e1:97:41:62:a9:8f:12:89:42:b3:55:e9:54:a2:
6f:76:b4:6b:1c:63:c1:62:2f:26:22:28:a4:43:78:54:93:84:
e2:d1:17:6b:75:a8:9f:cc:57:55:91:d8:5b:21:cb:16:00:39:
b6:8f:69:0f:a2:f7:87:d1:db:b1:97:e4:1a:21:0a:56:0e:00:
a6:de:b3:d3:6d:e4:bc:71:3a:f9:a3:ab:2c:c8:7b:7a:c3:01:
c7:11:32:55:b1:9b:40:87:54:27:6e:ce:08:d7:a0:a4:8a:2d:
5f:16:c0:97:95:ae:5d:2f:ff:46:f6:1b:e4:bb:2b:7f:59:84:
6d:72:b0:c2:7c:b9:a1:e0:4c:85:3d:bd:b9:a8:f8:10:18:9f:
ab:8a:d2:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg2NTAxMTAvBgNVBAUTKDI4MTdENEE4NjQ0QUVDNDE5QURDQ0VFMzBDNEU4N0Ey
NEQyRkY1N0IwHhcNMjUwMTMxMDMxMTQ3WhcNMjUwMjA3MDMxMTQ3WjAYMRYwFAYD
VQQDEw02NzljM2Y3My03ZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBFz5HooYA8wqkPsCsl2mucMqu36agozCI3w1EyYSHLAO+XSm9WaHGvtIJH1
v/L5IDaltMFkP0JNuQd7xFBbi5z/0U/Tj7w2+GOcDev3ATPQ5lEK63xRj4KwlUL/
Go/HLRE1GyPDAVDmO9UIzgjZiKONOsddT/KDmzrsjvRh75NDXHtntDc+hn8wTd4g
SfgpFReMtUGoau5mSbmPhygGkUUXwxbSTFkOlqgDcFoepxZjXcutOGKVYSL1SGO2
GRk9bsx8U0ANwTW6bwp1XLKX8+HAkWBj1nbBUbk/ADd09LENHs+7nuMHAb0Tfj0o
Fo79dcXXsE63lHEeV0NDCM4+twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoiuKW0
YIqfboNQZfaZ8VG+vcyvMB8GA1UdIwQYMBaAFCgX1KhkSuxBmtzO4wxOh6JNL/V7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY1MC83NzU4RDJDMkJE
QTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdFR2EzTTdqREU2SG9rMHY5
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tCZlVxR1JLN0VHYTNNN2pERTZIb2swdjlYcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODY1MC83NzU4RDJDMkJEQTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdF
R2EzTTdqREU2SG9rMHY5WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5EhunLLUpdkZ6aMVwxcrEmsNSZrT3HdIg1HWWm16q6FsVaHbpsxSm
l3r4j/07xqHecGjCOlFdiGFZ7biYFpbI2QtL23Lo4ouUAIpGc7GyefL/tVgf8Suk
3V4ZghjP9dCYHRntbknMD37pCkPayzCd4ZdBYqmPEolCs1XpVKJvdrRrHGPBYi8m
IiikQ3hUk4Ti0RdrdaifzFdVkdhbIcsWADm2j2kPoveH0duxl+QaIQpWDgCm3rPT
beS8cTr5o6ssyHt6wwHHETJVsZtAh1Qnbs4I16Ckii1fFsCXla5dL/9G9hvkuyt/
WYRtcrDCfLmh4EyFPb25qPgQGJ+ritID
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:44:48 2025 by rpki-client