Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
File: ghhST3oWtYwNm3OUAxk5fuT8pv0.mft (raw, json)
Hash identifier: /8ZJ6BwuiAYVG0y8gHgq6jhUvmB6GM0sgti/PyV8ND4=
Subject key identifier: AC:7D:4A:2C:BD:41:B5:A2:39:6B:50:2A:57:7B:16:09:AA:50:69:54
Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
Certificate issuer: /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Certificate serial: 07A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
Manifest number: 078E
Signing time: Thu 30 Jan 2025 21:15:18 +0000
Manifest this update: Thu 30 Jan 2025 21:15:17 +0000
Manifest next update: Thu 06 Feb 2025 21:15:17 +0000
Files and hashes: 1: ghhST3oWtYwNm3OUAxk5fuT8pv0.crl (hash: gtS/XW6rvd8FKQis2mvzK+HcuEHMHoTR6Y63k/Xc8Lw=)
2: 816A256CF57311EA86849119C4F9AE02.roa (hash: jh/uFXEIZPMO8B1QG/kheiWEegpd+33S7ffLLKrSdB0=)
3: 81E94F18F57311EA86849119C4F9AE02.roa (hash: d2TZXE18Xt38fADyNBS1PVNUEthCJSPtYY97KfIT80k=)
4: FD10505CC75011EFBA3D195BC4F9AE02.roa (hash: 5TA62bj3DT+mJ8Nio1yv4R6VCuB4DLublpXb87Ez56Y=)
5: 431106B2125611ED9FB5292EC4F9AE02.roa (hash: yYe2S/r+iFZmGGM++jOhHqDjwT0Z+vvfLaaWlIwsXLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952 (0x7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Validity
Not Before: Jan 30 21:15:17 2025 GMT
Not After : Feb 6 21:15:17 2025 GMT
Subject: CN=679bebe5-e84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0d:5d:30:f4:61:21:41:e7:9a:12:12:04:2c:
11:5a:78:38:1d:dd:7e:53:5d:d0:d4:63:61:b9:7a:
b9:24:20:80:af:1d:17:19:a1:ab:58:37:c3:78:c8:
d7:85:d2:72:bf:fb:2e:48:af:9e:9b:c3:05:20:75:
68:4a:32:1f:2e:ab:c5:4d:38:db:23:9c:e1:33:fe:
99:a0:81:94:3e:4e:3c:79:da:c2:1a:a1:f0:c5:99:
fc:5e:ea:bd:2e:67:08:86:8d:7e:37:83:05:57:5d:
8c:e5:27:65:b4:5c:53:ac:59:e8:0e:26:53:1f:b1:
89:6a:55:84:99:10:01:a6:2a:d2:c7:a9:ec:f1:f5:
e6:64:cf:19:68:a0:54:2c:ac:71:d0:6f:c3:8e:29:
7d:7b:f6:8e:a7:71:57:cf:3c:54:e4:15:cf:cc:b6:
08:77:ee:0d:16:c5:0b:b0:1d:18:4c:d3:b7:36:3f:
56:1e:1c:68:f1:fe:6b:12:a1:c2:c3:5c:4b:4f:a9:
d8:99:00:23:bb:20:23:6f:bb:fc:21:ff:c0:53:62:
5b:0c:46:70:b5:99:a0:20:88:3e:01:04:e9:db:a1:
40:7b:32:ca:26:aa:3a:4f:fb:11:0f:86:49:f0:43:
40:dc:81:fd:a3:2d:42:02:a6:7c:23:f2:46:78:55:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7D:4A:2C:BD:41:B5:A2:39:6B:50:2A:57:7B:16:09:AA:50:69:54
X509v3 Authority Key Identifier:
keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:91:be:6b:24:db:69:34:34:c3:6b:99:9b:51:ea:7f:35:d8:
67:4d:7c:61:c4:63:45:5a:c4:17:0f:0f:26:ae:2d:03:5c:b8:
62:8c:11:4d:88:65:cb:00:51:28:77:d3:4e:d9:48:da:3f:84:
ca:3c:2e:45:d1:dc:e1:a4:3a:f9:b7:60:79:80:8a:4a:ae:b1:
81:ae:ba:37:e6:36:00:21:27:3a:ba:43:3a:d1:1c:49:2e:4f:
ef:d7:2b:6f:d4:14:7d:0e:ce:22:ec:74:47:73:d6:76:56:ab:
67:d9:e4:d0:88:33:b0:d1:39:8b:19:db:14:24:7b:f3:8b:2a:
95:cd:98:4d:db:d5:f9:0e:8c:f4:dc:c4:38:79:fd:0f:7f:60:
5d:88:bd:70:af:52:70:bf:6d:d1:2b:e5:8d:31:b7:c9:74:3c:
80:ad:e9:45:0a:0b:4a:98:8c:d0:9f:28:85:7d:9d:78:d8:71:
5d:c6:1a:fe:85:6a:c2:f3:a4:1f:68:20:d2:2c:98:d3:15:2f:
3b:77:36:0a:c3:eb:81:4a:3e:67:56:75:a3:91:24:f8:44:f8:
3f:bf:1a:a3:d2:25:59:66:89:cc:35:fa:2f:79:bd:fd:fe:5e:
a6:a9:71:85:14:4b:3e:f8:9d:f0:b5:b9:07:94:74:89:b0:37:
37:51:fa:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlFRTIxMTAvBgNVBAUTKDgyMTg1MjRGN0ExNkI1OEMwRDlCNzM5NDAzMTkzOTdF
RTRGQ0E2RkQwHhcNMjUwMTMwMjExNTE3WhcNMjUwMjA2MjExNTE3WjAYMRYwFAYD
VQQDEw02NzliZWJlNS1lODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Q1dMPRhIUHnmhISBCwRWng4Hd1+U13Q1GNhuXq5JCCArx0XGaGrWDfDeMjX
hdJyv/suSK+em8MFIHVoSjIfLqvFTTjbI5zhM/6ZoIGUPk48edrCGqHwxZn8Xuq9
LmcIho1+N4MFV12M5SdltFxTrFnoDiZTH7GJalWEmRABpirSx6ns8fXmZM8ZaKBU
LKxx0G/Djil9e/aOp3FXzzxU5BXPzLYId+4NFsULsB0YTNO3Nj9WHhxo8f5rEqHC
w1xLT6nYmQAjuyAjb7v8If/AU2JbDEZwtZmgIIg+AQTp26FAezLKJqo6T/sRD4ZJ
8ENA3IH9oy1CAqZ8I/JGeFWtKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKx9Siy9
QbWiOWtQKld7FgmqUGlUMB8GA1UdIwQYMBaAFIIYUk96FrWMDZtzlAMZOX7k/Kb9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVFMi8wMkIyNzM4OEY1
NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNvV3RZd05tM09VQXhrNWZ1VDhw
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2doaFNUM29XdFl3Tm0zT1VBeGs1ZnVUOHB2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUVFMi8wMkIyNzM4OEY1NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNvV3RZ
d05tM09VQXhrNWZ1VDhwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5kb5rJNtpNDTDa5mbUep/NdhnTXxhxGNFWsQXDw8mri0DXLhijBFN
iGXLAFEod9NO2UjaP4TKPC5F0dzhpDr5t2B5gIpKrrGBrro35jYAISc6ukM60RxJ
Lk/v1ytv1BR9Ds4i7HRHc9Z2Vqtn2eTQiDOw0TmLGdsUJHvziyqVzZhN29X5Doz0
3MQ4ef0Pf2BdiL1wr1Jwv23RK+WNMbfJdDyArelFCgtKmIzQnyiFfZ142HFdxhr+
hWrC86QfaCDSLJjTFS87dzYKw+uBSj5nVnWjkST4RPg/vxqj0iVZZonMNfoveb39
/l6mqXGFFEs++J3wtbkHlHSJsDc3Ufok
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:27 2025 by rpki-client