Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
File: 065iZEnDqd0Od5i86Ly7OWYqJ_8.mft (raw, json)
Hash identifier: 6m0vdBto0drqe7yEwbhQfMwe5F/jqZPU6BMSWCkte44=
Subject key identifier: 66:9F:0E:D5:8B:63:64:7D:3D:E9:F5:71:2C:C0:7C:53:D7:A8:90:8A
Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF
Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
Manifest number: 0140
Signing time: Fri 31 Jan 2025 03:35:11 +0000
Manifest this update: Fri 31 Jan 2025 03:35:10 +0000
Manifest next update: Fri 07 Feb 2025 03:35:10 +0000
Files and hashes: 1: 065iZEnDqd0Od5i86Ly7OWYqJ_8.crl (hash: 1JFtrC0qz5+d2GjBouhmTtuZq5sUyYv7GLqlnM/bpUs=)
2: 52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (hash: Pxm4f7x+lDVGmZDDz1zwJyjk4SQINSwd/O+ak1CuE3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
Validity
Not Before: Jan 31 03:35:10 2025 GMT
Not After : Feb 7 03:35:10 2025 GMT
Subject: CN=679c44ef-8bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:44:13:c4:2a:92:35:2f:94:bd:27:0f:69:
9f:03:c6:db:a4:ee:3e:7d:c3:48:f9:9a:6f:f9:3b:
ed:1f:81:eb:16:23:70:9b:f0:15:f2:e2:60:da:07:
d5:e1:2d:38:35:5d:e4:b8:7e:b7:88:ea:de:92:68:
35:a1:cf:46:b8:ed:48:e1:3f:2b:de:78:13:a6:92:
4b:f9:6d:b5:72:e1:56:60:19:38:a6:5d:7e:ff:e0:
c5:44:22:f1:82:cd:43:aa:ec:29:b3:a2:ff:37:96:
7a:8a:eb:e8:7d:3f:05:2d:8d:e0:ec:70:6a:29:cc:
3f:c4:ba:da:7e:a5:71:9f:be:f7:f0:b5:39:ef:36:
ca:82:b4:38:17:e1:05:8a:14:0b:76:9e:74:f3:71:
b4:63:5e:5f:b9:a8:c0:3f:83:5e:bc:2a:bf:6f:3d:
83:69:91:7c:40:dd:79:3e:9d:86:ed:1f:50:ae:3b:
fc:99:5b:db:a2:e8:a2:20:83:6c:30:c4:3b:c4:87:
36:17:f3:80:e8:38:4e:49:8c:bc:85:16:dc:c8:64:
99:98:97:3d:ab:c7:0b:47:e4:4e:54:97:d2:27:b2:
7d:cc:57:9f:ee:49:63:dc:d3:83:57:86:9e:bc:42:
38:56:9d:11:2c:b3:7b:08:7e:5a:3b:9e:d1:32:78:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9F:0E:D5:8B:63:64:7D:3D:E9:F5:71:2C:C0:7C:53:D7:A8:90:8A
X509v3 Authority Key Identifier:
keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:bd:bc:59:c5:6d:bb:14:4d:be:44:57:fe:c9:7f:d8:7f:29:
1d:c7:1d:a4:1e:81:d6:bd:ba:f2:3c:34:68:a4:10:a0:b6:32:
7b:d2:20:c9:a8:17:7c:0d:b1:eb:65:f4:b3:22:d3:5b:2c:b5:
8e:b1:e7:ea:9a:31:f4:be:2d:53:f6:e6:9e:51:34:17:6f:83:
4b:b6:bb:12:bf:c2:29:80:76:c3:04:44:48:4a:d3:73:45:69:
a5:7a:3b:09:d3:06:fc:d1:ce:52:e3:39:9e:85:09:56:ee:a1:
39:0c:67:e9:e0:09:8c:81:fe:40:36:f7:ea:d1:f0:49:ea:3b:
51:c8:30:3a:89:ff:e2:0c:72:13:ff:fb:a7:bb:ba:3f:ee:03:
03:28:62:f2:2c:a0:8a:03:62:a6:f3:c6:63:f4:ef:cc:a3:7e:
00:6a:2b:4b:77:eb:1b:d7:67:39:2d:38:a1:23:7c:5b:f3:c9:
03:05:1e:e0:0e:fc:4f:fe:f9:e2:91:5f:2d:58:5e:3a:53:53:
90:c2:ee:94:1e:85:8f:7a:df:05:06:81:d4:a9:e7:e8:32:6a:
d5:65:c2:7a:30:27:6f:96:8c:5b:22:67:e0:c8:30:6e:71:de:
00:12:25:3a:04:77:0b:04:fb:d4:1a:62:91:6f:fd:d2:10:ba:
16:5d:7d:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjNCNjIxMTAvBgNVBAUTKEQzQUU2MjY0NDlDM0E5REQwRTc3OThCQ0U4QkNCQjM5
NjYyQTI3RkYwHhcNMjUwMTMxMDMzNTEwWhcNMjUwMjA3MDMzNTEwWjAYMRYwFAYD
VQQDEw02NzljNDRlZi04YmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmrhEE8QqkjUvlL0nD2mfA8bbpO4+fcNI+Zpv+TvtH4HrFiNwm/AV8uJg2gfV
4S04NV3kuH63iOrekmg1oc9GuO1I4T8r3ngTppJL+W21cuFWYBk4pl1+/+DFRCLx
gs1Dquwps6L/N5Z6iuvofT8FLY3g7HBqKcw/xLrafqVxn7738LU57zbKgrQ4F+EF
ihQLdp5083G0Y15fuajAP4NevCq/bz2DaZF8QN15Pp2G7R9Qrjv8mVvbouiiIINs
MMQ7xIc2F/OA6DhOSYy8hRbcyGSZmJc9q8cLR+ROVJfSJ7J9zFef7klj3NODV4ae
vEI4Vp0RLLN7CH5aO57RMnioHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGafDtWL
Y2R9Pen1cSzAfFPXqJCKMB8GA1UdIwQYMBaAFNOuYmRJw6ndDneYvOi8uzlmKif/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0I2Mi80RTlCNzZEMkZC
RDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFkME9kNWk4Nkx5N09XWXFK
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA2NWlaRW5EcWQwT2Q1aTg2THk3T1dZcUpfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
M0I2Mi80RTlCNzZEMkZCRDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFk
ME9kNWk4Nkx5N09XWXFKXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBovbxZxW27FE2+RFf+yX/Yfykdxx2kHoHWvbryPDRopBCgtjJ70iDJ
qBd8DbHrZfSzItNbLLWOsefqmjH0vi1T9uaeUTQXb4NLtrsSv8IpgHbDBERIStNz
RWmlejsJ0wb80c5S4zmehQlW7qE5DGfp4AmMgf5ANvfq0fBJ6jtRyDA6if/iDHIT
//unu7o/7gMDKGLyLKCKA2Km88Zj9O/Mo34AaitLd+sb12c5LTihI3xb88kDBR7g
DvxP/vnikV8tWF46U1OQwu6UHoWPet8FBoHUqefoMmrVZcJ6MCdvloxbImfgyDBu
cd4AEiU6BHcLBPvUGmKRb/3SELoWXX0r
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:51 2025 by rpki-client