Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft
File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json)
Hash identifier: NMoz7Uagau48TPV6Mw8lNoUxxsMuUtwg0GHvMU7iIfg=
Subject key identifier: 02:8B:8B:B7:8B:BF:14:74:FF:4A:A6:AF:BE:5F:33:8E:A0:E9:30:CF
Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7
Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7
Certificate serial: 10F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft
Manifest number: 10E8
Signing time: Fri 31 Jan 2025 17:17:29 +0000
Manifest this update: Fri 31 Jan 2025 17:17:29 +0000
Manifest next update: Fri 07 Feb 2025 17:17:28 +0000
Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: FxSctB0bq5hKa1iUMK9WGYdGxPxsvROkE42Xv8S2PVQ=)
2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: gteMkfVnVg4ffsJGo4gzYRn2LBvsScWGIppneQ2BQXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4336 (0x10f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7
Validity
Not Before: Jan 31 17:17:29 2025 GMT
Not After : Feb 7 17:17:28 2025 GMT
Subject: CN=679d05a9-8b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:1f:c2:35:e6:02:c9:15:f5:6f:15:55:e7:
a0:2a:85:df:4f:85:11:5c:99:ee:d3:55:61:df:dc:
f2:46:91:66:95:7c:48:a8:ad:df:00:e2:b8:12:39:
7a:3e:a8:c2:ae:8e:bb:b4:c7:1e:4e:f0:0e:c2:f4:
db:17:79:5b:f6:e0:fd:e4:35:5e:a8:b5:1d:74:37:
70:07:64:14:92:29:8e:54:3f:96:d6:a9:8f:40:72:
7f:64:85:93:49:09:4f:cb:7f:74:0e:1c:88:74:df:
29:ed:80:62:21:da:ee:f1:28:73:be:e3:f0:de:10:
de:88:83:00:34:b1:8e:b5:c1:3d:38:0c:95:8c:a2:
b4:1f:4a:06:cd:7a:67:a7:eb:8f:ba:34:e9:af:5c:
f2:8a:6b:fb:cc:45:f7:79:95:7b:66:a2:1d:49:35:
33:ac:0c:c7:e0:4d:ac:f0:fb:4f:82:f8:d2:46:0e:
42:0b:5c:c9:ef:1f:48:6b:18:92:b6:aa:d5:69:b8:
87:cc:f4:6c:ca:34:82:32:3f:0f:11:db:9d:87:0f:
fc:1e:b0:91:80:af:06:f5:50:7e:c4:97:85:ef:a3:
58:fc:a9:33:23:4c:a4:19:05:d3:c4:12:3a:e1:99:
3a:ee:8a:11:fb:94:55:c1:ef:08:06:80:26:c9:88:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8B:8B:B7:8B:BF:14:74:FF:4A:A6:AF:BE:5F:33:8E:A0:E9:30:CF
X509v3 Authority Key Identifier:
keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:82:70:16:65:87:ba:1f:35:b1:48:99:7f:0a:0d:a6:fb:a6:
d4:5f:8a:36:42:6d:4f:e1:a3:04:2b:8c:e3:6f:0f:d1:c6:58:
36:28:a8:75:a8:c0:0c:e8:13:5e:aa:60:d2:34:2e:7d:fe:81:
b5:71:52:c6:5b:ec:64:71:88:ad:62:63:30:47:c8:97:a5:eb:
14:21:f8:52:68:28:50:63:99:ec:4f:03:dd:55:df:ea:4c:b1:
08:ee:b2:43:bb:f8:7c:4b:bd:ae:dc:57:b0:81:b2:ed:68:05:
7b:28:78:0d:8a:a3:a3:82:ff:af:3a:0a:57:27:01:d9:f2:28:
fa:d5:7c:d6:98:f2:01:b2:c0:75:7e:5b:81:20:51:e7:83:13:
72:57:cc:95:da:8a:4f:5a:1a:f6:78:93:b3:43:37:fd:82:87:
f8:42:8c:3c:0a:fd:c1:ca:1b:a7:13:58:41:86:48:a6:e6:dc:
1a:8b:2f:5b:c1:a7:71:02:ec:48:2d:bc:9d:ed:3a:13:1f:46:
92:95:31:c0:c9:aa:47:80:95:5c:47:df:c6:44:4e:5c:5f:8c:
a5:8e:f7:18:45:5d:5a:ab:73:9d:ba:d3:c1:fb:a2:d0:d5:67:
05:bb:5c:a8:40:5c:d3:58:a7:96:69:f3:e2:fd:0f:a5:97:31:
be:82:8a:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC
QkU2Q0VFRDcwHhcNMjUwMTMxMTcxNzI5WhcNMjUwMjA3MTcxNzI4WjAYMRYwFAYD
VQQDEw02NzlkMDVhOS04YjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAow8fwjXmAskV9W8VVeegKoXfT4URXJnu01Vh39zyRpFmlXxIqK3fAOK4Ejl6
PqjCro67tMceTvAOwvTbF3lb9uD95DVeqLUddDdwB2QUkimOVD+W1qmPQHJ/ZIWT
SQlPy390DhyIdN8p7YBiIdru8ShzvuPw3hDeiIMANLGOtcE9OAyVjKK0H0oGzXpn
p+uPujTpr1zyimv7zEX3eZV7ZqIdSTUzrAzH4E2s8PtPgvjSRg5CC1zJ7x9IaxiS
tqrVabiHzPRsyjSCMj8PEdudhw/8HrCRgK8G9VB+xJeF76NY/KkzI0ykGQXTxBI6
4Zk67ooR+5RVwe8IBoAmyYisZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKLi7eL
vxR0/0qmr75fM46g6TDPMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG
MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6
d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUgnAWZYe6HzWxSJl/Cg2m+6bUX4o2Qm1P4aMEK4zjbw/Rxlg2KKh1
qMAM6BNeqmDSNC59/oG1cVLGW+xkcYitYmMwR8iXpesUIfhSaChQY5nsTwPdVd/q
TLEI7rJDu/h8S72u3FewgbLtaAV7KHgNiqOjgv+vOgpXJwHZ8ij61XzWmPIBssB1
fluBIFHngxNyV8yV2opPWhr2eJOzQzf9gof4Qow8Cv3ByhunE1hBhkim5twaiy9b
wadxAuxILbyd7ToTH0aSlTHAyapHgJVcR9/GRE5cX4yljvcYRV1aq3OdutPB+6LQ
1WcFu1yoQFzTWKeWafPi/Q+llzG+gopQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:26 2025 by rpki-client