Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
File: er7uZ6xhMToeH6izhl0_sfY090M.mft (raw, json)
Hash identifier: qb4bxmf/smc3jPYO7cmPVmtdiAI1+zR9mFXR6HTZ0uE=
Subject key identifier: FA:A1:09:65:C6:35:40:BB:F5:0D:7E:95:5E:D5:C2:E0:0D:62:13:3D
Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43
Certificate issuer: /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
Certificate serial: 045E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
Manifest number: 045A
Signing time: Fri 31 Jan 2025 00:13:41 +0000
Manifest this update: Fri 31 Jan 2025 00:13:40 +0000
Manifest next update: Fri 07 Feb 2025 00:13:40 +0000
Files and hashes: 1: er7uZ6xhMToeH6izhl0_sfY090M.crl (hash: pAA8GYcqyQff4DUcZ5HwwGJea//6COl3nOJ+2AtScFU=)
2: 449009F2387C11ECAE655C13C4F9AE02.roa (hash: LnHKmwGp8aCuXv2MpEec+GzNTX2xZYK5a57AEcKO+a0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118 (0x45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
Validity
Not Before: Jan 31 00:13:40 2025 GMT
Not After : Feb 7 00:13:40 2025 GMT
Subject: CN=679c15b5-03cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a2:94:9a:b8:eb:28:c3:36:bd:88:45:a9:40:
d4:d2:79:ff:68:d9:4a:81:02:a6:52:b4:7b:e7:20:
e3:33:9e:b0:01:f8:82:c3:01:f3:89:dc:ed:83:ed:
fd:cb:1b:15:4a:2f:d9:26:39:d5:16:93:db:f8:9e:
94:38:98:70:04:13:80:5e:1e:8d:f6:b8:01:f8:3a:
b3:3e:ec:b8:b3:1b:d8:e7:fe:94:ef:0a:ab:27:2e:
b0:01:d7:8a:b2:68:7a:10:f7:d6:c3:b6:c6:9f:fc:
60:9d:70:89:59:10:1a:52:26:68:d5:63:91:5d:f1:
a5:df:9b:a6:07:c2:34:21:92:a1:5d:ba:48:25:b8:
1d:76:56:f9:c0:46:20:bb:c0:f8:a5:5a:e8:22:20:
e0:91:08:44:5b:0e:37:ba:9b:07:f1:d2:14:50:b3:
19:94:2c:45:e8:7a:c8:4a:01:28:d4:8c:68:c2:02:
6a:f5:0c:7c:a4:bf:45:f3:eb:19:63:77:99:df:35:
e7:d2:f2:7e:0d:d6:97:2e:57:be:50:37:bf:28:41:
22:2d:64:74:b0:fb:21:1b:1d:d5:8d:a2:53:28:dd:
97:a1:2d:5b:e5:18:ed:09:db:81:d4:63:79:1a:dd:
39:6e:90:7c:3d:49:72:34:1b:42:f5:18:c9:f7:45:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A1:09:65:C6:35:40:BB:F5:0D:7E:95:5E:D5:C2:E0:0D:62:13:3D
X509v3 Authority Key Identifier:
keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:bf:71:27:66:3f:98:c7:1f:86:b8:aa:37:47:8c:d1:29:8e:
47:71:75:a4:20:19:d3:ab:7f:48:59:90:7a:67:30:67:5b:47:
30:2e:9f:97:40:79:55:2a:6a:e8:5e:0f:dd:68:81:29:f7:cf:
99:19:f4:55:1d:10:4f:17:c3:5b:dc:27:f5:0f:69:72:e7:f0:
97:15:c1:50:c0:c1:50:56:45:cf:44:1b:68:2a:52:ba:a4:54:
b5:f1:88:7f:6c:c5:d4:d2:9b:6f:3a:28:aa:6a:c8:bd:09:a1:
0a:97:3a:33:bf:d1:6e:fa:68:92:9c:a9:61:06:53:17:c0:0b:
49:5e:9a:12:22:ae:43:e4:79:1f:2b:c3:71:12:d7:ef:3e:16:
f4:9c:c3:e6:4b:51:02:63:c9:aa:d0:3c:b1:1f:a7:17:cd:82:
7f:30:1d:00:8d:ff:28:88:65:a3:ab:54:ac:99:dc:bd:6a:c0:
dd:d8:9c:c1:ce:26:32:5e:a7:9c:df:b0:0a:f3:51:93:3c:eb:
c6:ef:2a:3d:18:f0:71:33:bf:72:0b:87:39:53:3b:27:e9:94:
03:45:92:2b:46:f8:da:9b:5f:ac:0c:b8:c6:0f:7f:26:ab:6c:
4b:89:31:48:98:84:b0:32:a8:f0:d7:c0:a4:af:6a:6e:fb:01:
0f:01:5f:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURGQkQxMTAvBgNVBAUTKDdBQkVFRTY3QUM2MTMxM0ExRTFGQThCMzg2NUQzRkIx
RjYzNEY3NDMwHhcNMjUwMTMxMDAxMzQwWhcNMjUwMjA3MDAxMzQwWjAYMRYwFAYD
VQQDEw02NzljMTViNS0wM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2aKUmrjrKMM2vYhFqUDU0nn/aNlKgQKmUrR75yDjM56wAfiCwwHzidztg+39
yxsVSi/ZJjnVFpPb+J6UOJhwBBOAXh6N9rgB+DqzPuy4sxvY5/6U7wqrJy6wAdeK
smh6EPfWw7bGn/xgnXCJWRAaUiZo1WORXfGl35umB8I0IZKhXbpIJbgddlb5wEYg
u8D4pVroIiDgkQhEWw43upsH8dIUULMZlCxF6HrISgEo1IxowgJq9Qx8pL9F8+sZ
Y3eZ3zXn0vJ+DdaXLle+UDe/KEEiLWR0sPshGx3VjaJTKN2XoS1b5RjtCduB1GN5
Gt05bpB8PUlyNBtC9RjJ90U7kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqhCWXG
NUC79Q1+lV7VwuANYhM9MB8GA1UdIwQYMBaAFHq+7mesYTE6Hh+os4ZdP7H2NPdD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REZCRC9EMzRBNjgzMDM4
NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1Ub2VINml6aGwwX3NmWTA5
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VyN3VaNnhoTVRvZUg2aXpobDBfc2ZZMDkwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
REZCRC9EMzRBNjgzMDM4NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1U
b2VINml6aGwwX3NmWTA5ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlv3EnZj+Yxx+GuKo3R4zRKY5HcXWkIBnTq39IWZB6ZzBnW0cwLp+X
QHlVKmroXg/daIEp98+ZGfRVHRBPF8Nb3Cf1D2ly5/CXFcFQwMFQVkXPRBtoKlK6
pFS18Yh/bMXU0ptvOiiqasi9CaEKlzozv9Fu+miSnKlhBlMXwAtJXpoSIq5D5Hkf
K8NxEtfvPhb0nMPmS1ECY8mq0DyxH6cXzYJ/MB0Ajf8oiGWjq1Ssmdy9asDd2JzB
ziYyXqec37AK81GTPOvG7yo9GPBxM79yC4c5Uzsn6ZQDRZIrRvjam1+sDLjGD38m
q2xLiTFImISwMqjw18Ckr2pu+wEPAV+O
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:01 2025 by rpki-client