Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
File: A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json)
Hash identifier: 8LBkcGfwqF3rUfmQ24/jmQc0h0w8PrBmweE/YT4okn4=
Subject key identifier: 07:50:76:1A:2E:A4:43:48:B4:7F:99:A4:FC:25:A2:C0:ED:17:39:C9
Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
Certificate issuer: /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
Manifest number: 08
Signing time: Fri 31 Jan 2025 07:14:00 +0000
Manifest this update: Fri 31 Jan 2025 07:13:59 +0000
Manifest next update: Fri 07 Feb 2025 07:13:59 +0000
Files and hashes: 1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: WrIdq2e/V3XksK4dwvBn+B789U1255ju5v4cHDNhPHQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Validity
Not Before: Jan 31 07:13:59 2025 GMT
Not After : Feb 7 07:13:59 2025 GMT
Subject: CN=679c7838-440c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:e6:c4:81:34:3a:77:20:fd:14:27:0b:0b:
9b:48:38:0c:d3:ff:d6:b1:7c:57:16:69:f8:3e:62:
b2:6b:16:8e:bb:7c:19:3a:78:82:bb:07:e1:24:d4:
9d:9e:90:83:11:cf:02:10:a8:27:a6:a5:c1:98:05:
7e:a2:00:86:74:5f:2a:9f:14:2f:0d:06:1b:28:c1:
45:b9:e2:f4:2a:f7:4f:4b:e5:d1:47:d1:f5:b9:9d:
bc:c2:10:44:6a:e9:d0:b2:12:c0:1a:b8:dc:34:06:
a7:3c:b2:87:54:1d:bd:ad:67:c3:36:1a:da:28:4c:
b4:70:29:1d:d7:6a:f7:1a:90:66:a9:cd:ed:e8:ba:
3d:08:4c:6d:29:29:3f:d9:39:34:f0:02:5c:a7:1e:
d7:33:42:91:80:6e:65:5b:d1:d2:42:b3:12:e6:db:
cd:20:4f:4b:17:78:02:fe:81:cf:c8:90:ea:51:e6:
78:52:8f:aa:a5:e1:66:bb:09:6a:46:55:51:45:13:
b5:10:5b:04:e0:c4:15:69:03:b6:36:8e:09:9a:f7:
62:b1:58:58:c3:62:e9:aa:d1:a3:0b:5a:b6:16:59:
5b:d6:0d:8a:5b:83:75:7b:1f:e6:ae:ec:dc:e8:c3:
48:79:82:38:ff:a5:fe:94:c9:a0:f2:04:08:ba:4b:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:50:76:1A:2E:A4:43:48:B4:7F:99:A4:FC:25:A2:C0:ED:17:39:C9
X509v3 Authority Key Identifier:
keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:03:84:43:24:f5:a4:fd:45:7d:d1:c9:15:61:d8:16:88:dc:
1e:2c:5a:1f:23:c5:c1:85:80:a7:1b:8f:44:47:10:3c:fe:1a:
22:57:f9:24:32:04:9c:09:7e:d9:df:26:37:45:3e:fc:68:70:
5f:78:53:11:67:dc:2b:1a:39:08:63:f1:39:94:e9:f0:da:89:
a3:87:fa:9c:3c:82:a4:63:69:be:d5:a0:8c:93:3e:2f:fd:f2:
a4:60:74:70:4f:c5:a8:fa:58:99:e5:da:3e:73:31:4b:17:e5:
41:49:7c:31:4a:21:62:25:89:57:e9:df:21:f7:20:4d:a1:ff:
20:51:31:41:6f:8b:91:91:59:fa:1b:cc:eb:8a:77:e5:24:1b:
ed:61:c9:30:41:4e:0e:e2:03:b2:86:32:17:ba:7f:4b:57:3a:
bb:dc:51:b0:19:96:17:12:7b:cb:3d:e5:f5:99:8a:e8:a8:95:
28:b5:36:8a:36:4c:20:7b:d0:e3:68:7e:34:f7:20:d2:41:57:
73:80:61:5c:a6:84:1f:43:1d:23:63:d2:25:09:10:1b:3d:8e:
4c:54:7c:2b:95:49:ac:82:6d:2a:3d:0a:59:b8:f8:30:3b:88:
ea:56:d3:c4:9f:a6:07:1d:cf:11:cb:ee:bd:32:ab:e3:fa:9c:
61:64:f0:90
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RkREOTExMC8GA1UEBRMoMDM3ODhFRTJCQUU0RDgwNUVCQ0RDQTY2MThFMkVDMUEx
OEE1QzRFMjAeFw0yNTAxMzEwNzEzNTlaFw0yNTAyMDcwNzEzNTlaMBgxFjAUBgNV
BAMTDTY3OWM3ODM4LTQ0MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAb+bEgTQ6dyD9FCcLC5tIOAzT/9axfFcWafg+YrJrFo67fBk6eIK7B+Ek1J2e
kIMRzwIQqCempcGYBX6iAIZ0XyqfFC8NBhsowUW54vQq909L5dFH0fW5nbzCEERq
6dCyEsAauNw0Bqc8sodUHb2tZ8M2GtooTLRwKR3XavcakGapze3ouj0ITG0pKT/Z
OTTwAlynHtczQpGAbmVb0dJCsxLm280gT0sXeAL+gc/IkOpR5nhSj6ql4Wa7CWpG
VVFFE7UQWwTgxBVpA7Y2jgma92KxWFjDYumq0aMLWrYWWVvWDYpbg3V7H+au7Nzo
w0h5gjj/pf6UyaDyBAi6S8KNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB1B2Gi6k
Q0i0f5mk/CWiwO0XOckwHwYDVR0jBBgwFoAUA3iO4rrk2AXrzcpmGOLsGhilxOIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGREQ5L0JFN0NBQzEyRDZE
RTExRUZCMDQ3NEUxQkM0RjlBRTAyL0EzaU80cnJrMkFYcnpjcG1HT0xzR2hpbHhP
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQTNpTzRycmsyQVhyemNwbUdPTHNHaGlseE9JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG
REQ5L0JFN0NBQzEyRDZERTExRUZCMDQ3NEUxQkM0RjlBRTAyL0EzaU80cnJrMkFY
cnpjcG1HT0xzR2hpbHhPSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEgDhEMk9aT9RX3RyRVh2BaI3B4sWh8jxcGFgKcbj0RHEDz+GiJX+SQy
BJwJftnfJjdFPvxocF94UxFn3CsaOQhj8TmU6fDaiaOH+pw8gqRjab7VoIyTPi/9
8qRgdHBPxaj6WJnl2j5zMUsX5UFJfDFKIWIliVfp3yH3IE2h/yBRMUFvi5GRWfob
zOuKd+UkG+1hyTBBTg7iA7KGMhe6f0tXOrvcUbAZlhcSe8s95fWZiuiolSi1Noo2
TCB70ONofjT3INJBV3OAYVymhB9DHSNj0iUJEBs9jkxUfCuVSayCbSo9Clm4+DA7
iOpW08SfpgcdzxHL7r0yq+P6nGFk8JA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:10:37 2025 by rpki-client