Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json)
Hash identifier: cYoSYi8y5p7eUN/Dh8zdbs7XJ9PDHBgYhhuyvuWAGFs=
Subject key identifier: D8:23:0A:3A:FE:E0:53:5B:0B:2C:6D:5F:68:0C:28:2F:B2:E4:72:91
Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Certificate serial: 0C4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
Manifest number: 0C1E
Signing time: Fri 31 Jan 2025 18:34:11 +0000
Manifest this update: Fri 31 Jan 2025 18:34:10 +0000
Manifest next update: Fri 07 Feb 2025 18:34:10 +0000
Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: w9KZ1ukHAkZk9jP96CeDR2whBtsm+8PXh01Q70bonn0=)
2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: PHT0R0By0KnpLrMi3zP82mzv8fIUmcYHPXXMUoRy514=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3148 (0xc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Validity
Not Before: Jan 31 18:34:10 2025 GMT
Not After : Feb 7 18:34:10 2025 GMT
Subject: CN=679d17a3-4fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:b6:1a:eb:a9:cb:c6:7d:e0:ae:70:f7:61:
76:65:1b:f0:0d:d8:ea:0e:6a:3f:eb:99:04:26:07:
c5:00:b6:5f:2c:e2:04:0f:1c:03:6a:21:ee:9e:67:
21:0c:8c:30:3e:2c:d1:14:f3:96:d9:5b:78:fc:05:
c9:b4:c7:d7:90:b6:b5:58:72:1d:71:1e:8c:83:8f:
c0:7b:2a:c2:25:2c:88:5d:c7:48:ef:12:a2:4d:e2:
af:7b:90:35:fc:9f:f7:dc:0d:bf:ee:36:2b:79:40:
3b:09:27:45:6d:ff:1d:6c:a2:d1:e8:6a:ff:dd:78:
0a:3a:e2:1a:f5:11:12:06:ce:03:0c:07:a3:0b:d7:
e3:03:49:6b:76:cc:dc:db:e8:82:ea:cc:b1:8a:43:
5d:1d:20:7f:7d:2d:7a:dd:1c:09:ff:c4:85:3a:ab:
b5:09:f4:c2:c5:91:50:bd:88:48:b1:fb:29:40:ab:
97:9f:17:05:85:2b:34:57:b9:5a:09:37:71:ee:45:
db:67:ce:61:68:ff:01:8f:a8:bb:0c:64:b1:a0:5e:
97:95:91:2d:b2:26:2e:83:31:46:aa:68:05:3a:e2:
85:28:d6:3b:66:5e:6f:f1:01:97:20:00:1d:32:f7:
a4:6c:68:90:92:fb:b0:cb:95:95:45:2f:fa:29:e9:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:0A:3A:FE:E0:53:5B:0B:2C:6D:5F:68:0C:28:2F:B2:E4:72:91
X509v3 Authority Key Identifier:
keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:f5:99:47:66:d0:58:7e:18:f2:60:f0:fe:07:a7:fb:66:45:
16:7b:02:bd:50:d1:3c:41:0c:84:4d:d1:88:27:e3:1b:eb:d2:
16:b9:3c:59:a5:c8:3a:9b:7d:4b:58:a7:00:6f:b6:69:31:34:
27:25:1e:2c:f1:2a:33:03:7f:9c:28:c5:76:2a:ef:cc:c8:c1:
af:c4:ed:25:56:ce:99:51:51:dd:1c:2f:0f:a3:86:5d:3c:f8:
5e:38:c4:16:0b:5e:7d:46:34:6f:a2:fe:97:26:47:f5:42:05:
ce:e9:55:db:91:88:c1:b9:14:ea:9a:a7:2e:f9:ae:a2:6f:1d:
57:02:e9:a6:ec:aa:61:75:da:46:ae:1d:5e:21:53:36:38:f5:
d0:3f:93:94:6a:96:b0:d7:19:60:cb:ce:6e:eb:61:be:5e:2e:
13:99:1e:0e:fd:63:c3:db:54:79:a0:91:a4:61:a2:63:ad:89:
a4:c7:d2:c1:8a:e3:f3:39:b1:43:99:9d:98:2c:fb:73:f7:2c:
ce:d8:1a:bf:61:ce:6b:3d:73:2c:67:5f:43:cb:a6:f0:37:4e:
0f:76:2e:75:e8:8c:ce:f8:cc:0f:71:3a:e6:af:aa:ff:f7:44:
34:b1:32:05:10:99:7b:bc:1e:b9:ec:eb:1f:09:c8:39:27:e3:
42:38:b0:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz
NkREOENBMzQwHhcNMjUwMTMxMTgzNDEwWhcNMjUwMjA3MTgzNDEwWjAYMRYwFAYD
VQQDEw02NzlkMTdhMy00ZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1a22Guupy8Z94K5w92F2ZRvwDdjqDmo/65kEJgfFALZfLOIEDxwDaiHunmch
DIwwPizRFPOW2Vt4/AXJtMfXkLa1WHIdcR6Mg4/AeyrCJSyIXcdI7xKiTeKve5A1
/J/33A2/7jYreUA7CSdFbf8dbKLR6Gr/3XgKOuIa9RESBs4DDAejC9fjA0lrdszc
2+iC6syxikNdHSB/fS163RwJ/8SFOqu1CfTCxZFQvYhIsfspQKuXnxcFhSs0V7la
CTdx7kXbZ85haP8Bj6i7DGSxoF6XlZEtsiYugzFGqmgFOuKFKNY7Zl5v8QGXIAAd
MvekbGiQkvuwy5WVRS/6KelXoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgjCjr+
4FNbCyxtX2gMKC+y5HKRMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5
NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo
cThqNHo5YjJZaWMyM1l5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBW9ZlHZtBYfhjyYPD+B6f7ZkUWewK9UNE8QQyETdGIJ+Mb69IWuTxZ
pcg6m31LWKcAb7ZpMTQnJR4s8SozA3+cKMV2Ku/MyMGvxO0lVs6ZUVHdHC8Po4Zd
PPheOMQWC159RjRvov6XJkf1QgXO6VXbkYjBuRTqmqcu+a6ibx1XAumm7KphddpG
rh1eIVM2OPXQP5OUapaw1xlgy85u62G+Xi4TmR4O/WPD21R5oJGkYaJjrYmkx9LB
iuPzObFDmZ2YLPtz9yzO2Bq/Yc5rPXMsZ19Dy6bwN04Pdi516IzO+MwPcTrmr6r/
90Q0sTIFEJl7vB657OsfCcg5J+NCOLDU
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:41 2025 by rpki-client