Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.mft
File: j4I4DlgkXscVMN6F0qxrnyCUdvM.mft (raw, json)
Hash identifier: DazO4tRjcPdPi4Yub3rQCEX4Y7emi49BDw6damW+75Y=
Subject key identifier: BA:B9:D6:DC:F2:FD:FC:99:A5:8D:D5:E7:05:A3:C6:B4:12:4C:1B:DC
Authority key identifier: 8F:82:38:0E:58:24:5E:C7:15:30:DE:85:D2:AC:6B:9F:20:94:76:F3
Certificate issuer: /CN=A916A1E1/serialNumber=8F82380E58245EC71530DE85D2AC6B9F209476F3
Certificate serial: 0295
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4I4DlgkXscVMN6F0qxrnyCUdvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.mft
Manifest number: 0290
Signing time: Fri 31 Jan 2025 01:39:01 +0000
Manifest this update: Fri 31 Jan 2025 01:39:00 +0000
Manifest next update: Fri 07 Feb 2025 01:39:00 +0000
Files and hashes: 1: j4I4DlgkXscVMN6F0qxrnyCUdvM.crl (hash: sT9X0Hqjx1qLMj8Pg4eV+8F5a5R20ALiJQRw90eiVnM=)
2: 94312504EC3B11ECB0BAF26DC4F9AE02.roa (hash: 3OKWgrqps6SAA2I3eEROFil03NKxIgLu8qYo+gr6w50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A1E1/serialNumber=8F82380E58245EC71530DE85D2AC6B9F209476F3
Validity
Not Before: Jan 31 01:39:00 2025 GMT
Not After : Feb 7 01:39:00 2025 GMT
Subject: CN=679c29b5-53f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:09:cb:cd:1a:c6:d3:5c:65:4e:49:30:4c:
6b:d9:09:e8:05:0f:f8:31:3c:b2:32:32:55:c9:3b:
12:0d:d1:4a:a3:db:59:05:fa:5b:b6:a5:6b:55:29:
5c:cb:cd:28:b5:5c:aa:2a:8e:d1:bb:6a:e1:b5:f8:
a6:a9:b9:29:b2:ee:f8:5d:5e:bf:c9:7a:6f:60:cd:
32:8f:0e:33:d0:58:d3:2b:71:ca:bf:29:e1:1c:ce:
59:bf:8a:ba:f4:98:9a:33:04:fe:ed:78:13:64:a1:
e3:17:ff:be:b2:50:cf:50:4c:ed:e2:a8:f4:9c:32:
d5:33:04:89:0e:8b:c7:09:3b:31:4f:c1:a7:6c:13:
60:00:82:50:7a:42:12:6e:a6:a6:ae:8e:fa:a1:0b:
42:67:c8:99:53:72:5f:d1:ac:63:04:b9:70:f5:43:
4b:58:a6:87:0e:a0:73:62:41:1b:a6:6e:02:87:6a:
46:31:c6:01:8f:c0:6f:e6:83:6c:29:9a:aa:db:01:
e7:6a:c1:9d:cc:ed:33:dd:07:7c:80:d8:a2:dd:dc:
8c:bc:89:f1:b5:fd:74:d4:a1:1f:cd:c4:61:92:bf:
14:72:aa:fb:ba:35:ff:83:34:08:1d:6e:97:46:95:
65:65:b0:da:7e:82:9f:ac:a1:14:bd:15:61:b4:40:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B9:D6:DC:F2:FD:FC:99:A5:8D:D5:E7:05:A3:C6:B4:12:4C:1B:DC
X509v3 Authority Key Identifier:
keyid:8F:82:38:0E:58:24:5E:C7:15:30:DE:85:D2:AC:6B:9F:20:94:76:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4I4DlgkXscVMN6F0qxrnyCUdvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:21:37:ab:ec:f0:90:c0:b9:53:c7:0c:29:00:4d:1e:13:74:
38:19:f8:cf:b5:62:63:be:8e:1e:95:b9:fc:4e:77:05:13:c4:
d7:10:b8:81:ba:c5:e4:21:13:cc:9d:f8:49:18:e1:c2:e8:0f:
3d:e1:f7:26:29:0f:f1:ab:02:40:bf:e5:fc:05:1d:c8:9d:05:
7b:9e:cf:1f:83:af:be:57:a4:df:3e:54:9b:86:4b:f8:10:da:
29:eb:cc:04:4a:d3:cc:93:30:27:4e:55:38:fe:51:79:c7:29:
ae:c8:a7:7e:39:ba:ab:ad:48:be:50:60:5e:1d:38:e7:a0:4a:
64:d4:0a:b4:18:ae:52:15:15:99:13:94:1d:e7:36:a6:8e:68:
29:ff:9f:c2:df:6d:8e:7d:c5:5b:70:4d:c3:e3:71:9b:74:8d:
ba:0b:9b:84:e9:f4:65:cf:30:df:86:a7:d9:fe:e0:de:ef:62:
dd:62:72:06:75:7e:a3:59:04:31:77:5a:1c:56:39:57:01:6b:
2d:23:e8:04:7c:8b:60:b7:f4:43:a7:f9:1a:60:7a:1b:b8:ec:
55:2d:81:d2:0d:6c:bb:25:8b:dc:2d:d9:e3:a7:24:72:7d:4f:
a7:35:43:4c:2e:51:2e:7f:9e:11:db:d1:ed:c8:d3:74:24:a9:
0f:4d:bf:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkExRTExMTAvBgNVBAUTKDhGODIzODBFNTgyNDVFQzcxNTMwREU4NUQyQUM2QjlG
MjA5NDc2RjMwHhcNMjUwMTMxMDEzOTAwWhcNMjUwMjA3MDEzOTAwWjAYMRYwFAYD
VQQDEw02NzljMjliNS01M2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlIJy80axtNcZU5JMExr2QnoBQ/4MTyyMjJVyTsSDdFKo9tZBfpbtqVrVSlc
y80otVyqKo7Ru2rhtfimqbkpsu74XV6/yXpvYM0yjw4z0FjTK3HKvynhHM5Zv4q6
9JiaMwT+7XgTZKHjF/++slDPUEzt4qj0nDLVMwSJDovHCTsxT8GnbBNgAIJQekIS
bqamro76oQtCZ8iZU3Jf0axjBLlw9UNLWKaHDqBzYkEbpm4Ch2pGMcYBj8Bv5oNs
KZqq2wHnasGdzO0z3Qd8gNii3dyMvInxtf101KEfzcRhkr8Ucqr7ujX/gzQIHW6X
RpVlZbDafoKfrKEUvRVhtEC6AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLq51tzy
/fyZpY3V5wWjxrQSTBvcMB8GA1UdIwQYMBaAFI+COA5YJF7HFTDehdKsa58glHbz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTFFMS85RkJFQTRBNkVD
MzUxMUVDQjA3RTk4N0NDNEY5QUUwMi9qNEk0RGxna1hzY1ZNTjZGMHF4cm55Q1Vk
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2o0STREbGdrWHNjVk1ONkYwcXhybnlDVWR2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTFFMS85RkJFQTRBNkVDMzUxMUVDQjA3RTk4N0NDNEY5QUUwMi9qNEk0RGxna1hz
Y1ZNTjZGMHF4cm55Q1Vkdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhITer7PCQwLlTxwwpAE0eE3Q4GfjPtWJjvo4elbn8TncFE8TXELiB
usXkIRPMnfhJGOHC6A894fcmKQ/xqwJAv+X8BR3InQV7ns8fg6++V6TfPlSbhkv4
ENop68wEStPMkzAnTlU4/lF5xymuyKd+ObqrrUi+UGBeHTjnoEpk1Aq0GK5SFRWZ
E5Qd5zamjmgp/5/C322OfcVbcE3D43GbdI26C5uE6fRlzzDfhqfZ/uDe72LdYnIG
dX6jWQQxd1ocVjlXAWstI+gEfItgt/RDp/kaYHobuOxVLYHSDWy7JYvcLdnjpyRy
fU+nNUNMLlEuf54R29HtyNN0JKkPTb/l
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:12 2025 by rpki-client