Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft
File: XKzlv2VarPfLxicsXGl_N3oGzow.mft (raw, json)
Hash identifier: xauQSxVT8B6F7Hp6ragllaicZUOAf1G28/xezkguKcY=
Subject key identifier: 61:8A:82:75:13:F5:40:CD:FD:E0:DD:F3:2D:07:EF:5A:BD:30:75:5C
Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C
Certificate issuer: /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft
Manifest number: 4A
Signing time: Fri 31 Jan 2025 06:27:14 +0000
Manifest this update: Fri 31 Jan 2025 06:27:13 +0000
Manifest next update: Fri 07 Feb 2025 06:27:13 +0000
Files and hashes: 1: XKzlv2VarPfLxicsXGl_N3oGzow.crl (hash: W+buoZsYHMPfacDp9SDLIHlnfJIPOT6Lcv0aBmofRKI=)
2: 15875DC27B5E11EFAB71253BC4F9AE02.roa (hash: Po2BM3la9bQp8SxvolgWBVl3dKAKoE5yaonqoVw5jxw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C
Validity
Not Before: Jan 31 06:27:13 2025 GMT
Not After : Feb 7 06:27:13 2025 GMT
Subject: CN=679c6d42-c83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:7a:89:79:fc:ec:d8:24:21:8d:14:61:6e:
3b:8a:e9:25:b3:54:48:b3:52:77:63:76:3d:06:fe:
c9:1c:08:d0:c9:5c:15:96:cb:4d:ed:2e:7c:fc:3e:
50:97:a8:90:94:99:97:86:dc:fa:74:54:fb:4e:3a:
f7:81:48:c2:2b:e4:9b:51:d5:83:e2:f5:34:4d:02:
29:b2:17:64:45:6a:ea:b4:0e:62:5c:c2:46:a8:2a:
fb:58:b7:ac:f0:d4:83:12:b1:1b:f8:51:5c:20:b5:
99:cc:fe:43:b9:41:b4:1e:ea:77:17:3d:22:46:09:
fd:6a:e1:bf:dd:5f:b1:e3:21:b5:b0:3f:10:e1:ff:
3d:a0:20:68:6e:59:57:38:49:ed:fe:f4:75:94:6e:
13:cd:c6:8b:36:2f:1a:8a:26:a8:bd:35:e6:ce:76:
4c:eb:09:d1:2b:eb:7b:ac:d1:19:d2:fb:de:3f:66:
d0:8a:0f:3f:5f:1f:c6:e4:6f:e7:c9:00:62:21:2d:
88:88:2f:62:9d:be:40:d4:ce:db:b5:3a:7f:35:23:
d1:7d:87:06:39:b0:9b:58:36:b4:d9:da:8d:2b:a2:
a3:5b:cb:81:26:69:c2:c2:b8:7a:a2:ec:2e:ec:d5:
74:02:db:fd:39:38:36:7e:04:65:dc:e2:9d:70:e1:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8A:82:75:13:F5:40:CD:FD:E0:DD:F3:2D:07:EF:5A:BD:30:75:5C
X509v3 Authority Key Identifier:
keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:32:f8:d6:25:d0:cb:f4:19:be:f1:03:96:b7:e4:5b:7c:4a:
80:4c:cf:b4:88:75:fa:97:eb:4d:25:1e:b3:27:8f:6a:9d:ff:
f3:1b:de:8d:25:1b:6e:cc:47:65:f1:1f:00:fa:bc:da:3f:f2:
ea:10:c1:59:bb:e2:e2:7c:7d:06:d4:f9:3e:32:9a:9c:23:9e:
f0:4f:20:42:2d:3c:e8:a5:bf:43:c1:c7:3b:32:1a:2e:27:a2:
74:1b:a2:8d:86:cb:ae:e0:d4:2e:e8:01:1b:29:88:4c:08:49:
59:cf:c3:36:e9:4b:ff:31:f0:d7:69:c4:32:60:36:53:11:98:
f1:04:87:e4:5e:bf:74:96:d4:ed:bc:76:f4:98:52:22:e6:2f:
f8:10:34:ab:cb:d4:7e:a0:76:83:e3:b2:ab:8b:38:c0:ac:f9:
7f:6e:c6:c2:16:92:53:d8:5b:e5:2d:44:18:02:90:21:be:77:
ca:52:53:94:af:e0:62:dd:67:a0:70:73:42:35:df:ac:bd:eb:
7d:e3:53:b7:e6:33:36:0b:de:4f:ef:43:9b:41:10:eb:9e:b5:
ec:c9:e3:f9:77:a6:ab:0b:55:c1:59:f2:be:ae:99:65:90:33:
81:24:0a:bf:d8:a3:53:4f:fe:f7:c4:b3:4d:70:5c:d2:dd:b1:
75:65:90:8c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QzlCRjExMC8GA1UEBRMoNUNBQ0U1QkY2NTVBQUNGN0NCQzYyNzJDNUM2OTdGMzc3
QTA2Q0U4QzAeFw0yNTAxMzEwNjI3MTNaFw0yNTAyMDcwNjI3MTNaMBgxFjAUBgNV
BAMTDTY3OWM2ZDQyLWM4M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNtXqJefzs2CQhjRRhbjuK6SWzVEizUndjdj0G/skcCNDJXBWWy03tLnz8PlCX
qJCUmZeG3Pp0VPtOOveBSMIr5JtR1YPi9TRNAimyF2RFauq0DmJcwkaoKvtYt6zw
1IMSsRv4UVwgtZnM/kO5QbQe6ncXPSJGCf1q4b/dX7HjIbWwPxDh/z2gIGhuWVc4
Se3+9HWUbhPNxos2LxqKJqi9NebOdkzrCdEr63us0RnS+94/ZtCKDz9fH8bkb+fJ
AGIhLYiIL2KdvkDUztu1On81I9F9hwY5sJtYNrTZ2o0roqNby4EmacLCuHqi7C7s
1XQC2/05ODZ+BGXc4p1w4SxdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYYqCdRP1
QM394N3zLQfvWr0wdVwwHwYDVR0jBBgwFoAUXKzlv2VarPfLxicsXGl/N3oGzoww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDOUJGL0JFMUQ0QTM0N0I0
RDExRUZCMDIzNkM3OEM0RjlBRTAyL1hLemx2MlZhclBmTHhpY3NYR2xfTjNvR3pv
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWEt6bHYyVmFyUGZMeGljc1hHbF9OM29Hem93LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD
OUJGL0JFMUQ0QTM0N0I0RDExRUZCMDIzNkM3OEM0RjlBRTAyL1hLemx2MlZhclBm
THhpY3NYR2xfTjNvR3pvdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABQy+NYl0Mv0Gb7xA5a35Ft8SoBMz7SIdfqX600lHrMnj2qd//Mb3o0l
G27MR2XxHwD6vNo/8uoQwVm74uJ8fQbU+T4ympwjnvBPIEItPOilv0PBxzsyGi4n
onQboo2Gy67g1C7oARspiEwISVnPwzbpS/8x8NdpxDJgNlMRmPEEh+Rev3SW1O28
dvSYUiLmL/gQNKvL1H6gdoPjsquLOMCs+X9uxsIWklPYW+UtRBgCkCG+d8pSU5Sv
4GLdZ6Bwc0I136y9633jU7fmMzYL3k/vQ5tBEOuetezJ4/l3pqsLVcFZ8r6umWWQ
M4EkCr/Yo1NP/vfEs01wXNLdsXVlkIw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:45:39 2025 by rpki-client