Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
File: hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json)
Hash identifier: 1AbtnBv0c8YZqNaCsCYYkzfLjertOiPmgxKLBB4oICM=
Subject key identifier: FD:F5:5D:3D:3C:08:10:71:AB:24:92:34:2C:7C:1B:3F:06:49:81:CE
Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
Certificate issuer: /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
Certificate serial: 02CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
Manifest number: 02C5
Signing time: Fri 31 Jan 2025 01:31:42 +0000
Manifest this update: Fri 31 Jan 2025 01:31:42 +0000
Manifest next update: Fri 07 Feb 2025 01:31:42 +0000
Files and hashes: 1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: JJMynlvFBNOCyz86gZhsvRmCt5bqd9NkT0rVIQk9etE=)
2: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: 4aOmdIiBIBTvtytMx9F80hnUu5xyycNyp3dSZvfw2H4=)
3: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: H4uvOPnOQR7kaTV0mxINyaPGqrlb9ZsfEdxZE+ZhLPI=)
4: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: sGJBxLCH9iu9CcWMb6plXCanRkikajpBvxJ9Q78R1qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
Validity
Not Before: Jan 31 01:31:42 2025 GMT
Not After : Feb 7 01:31:42 2025 GMT
Subject: CN=679c27fe-0f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:5d:08:5b:cf:cb:a6:64:cc:90:87:c1:64:
35:d3:60:16:81:c9:52:ca:3b:67:bf:2a:e6:78:41:
f9:e8:55:e0:e2:cf:19:67:13:3c:c1:4c:8a:3c:15:
28:6b:e4:4b:2b:e8:a6:10:16:bf:8c:38:66:d3:55:
43:7f:05:16:b9:51:bf:51:c4:10:46:e8:3e:f8:aa:
89:fa:9a:58:92:cc:23:e0:78:23:d8:f6:1d:d6:ce:
fd:4e:e9:d1:bd:fd:bd:23:ec:dc:ec:3a:08:eb:ba:
7e:35:50:1d:b4:1a:f0:a5:1a:bf:70:e5:9d:23:61:
37:4c:c4:18:b6:e2:29:c2:b8:07:26:c7:51:d6:46:
b9:61:26:15:b5:5a:75:a1:0a:53:13:23:ac:6e:ee:
2a:c6:f9:b6:6e:38:03:88:c5:76:45:0a:c3:fa:33:
6b:48:33:a0:15:cf:63:ef:20:af:4c:b9:09:4d:f6:
56:12:b6:0d:67:65:0f:7b:f6:78:1b:05:81:ef:f3:
77:22:aa:fc:89:df:e7:bc:0d:63:5a:c8:8e:e1:b5:
fd:44:f8:f2:4c:f8:9f:af:22:cb:9b:62:41:2a:c7:
72:d2:63:ea:45:b1:de:f8:ee:b8:3d:e1:15:90:85:
02:42:16:98:c5:84:94:89:14:32:37:b0:71:04:c3:
38:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:5D:3D:3C:08:10:71:AB:24:92:34:2C:7C:1B:3F:06:49:81:CE
X509v3 Authority Key Identifier:
keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:c4:8f:88:0a:4c:88:44:3b:91:04:07:fa:19:5c:f1:e3:b8:
ca:5c:7e:86:98:5f:66:86:6d:bc:e2:07:ae:fd:d6:7f:32:09:
2c:19:e4:04:7f:6d:73:0e:dd:e8:e0:64:05:2b:08:a1:08:d5:
0b:7e:27:c1:f4:14:d9:9e:43:38:42:69:02:5f:af:3f:6b:e9:
86:e5:96:13:50:5f:a4:d4:fc:39:92:ce:c9:9a:3c:16:e1:03:
3e:61:32:fe:21:41:27:a2:35:f1:e1:e5:92:9a:c7:b5:4f:ca:
5d:1d:7c:13:25:f7:59:ac:6e:c5:7f:88:33:0c:c6:7b:de:0c:
fe:64:a4:90:01:e0:ec:6b:8b:0d:6b:f1:c8:dc:21:df:ca:0b:
ad:fb:d4:69:11:76:2d:c7:b3:20:28:ef:6d:c7:cf:17:6d:23:
21:38:76:c2:fb:39:5a:f5:ce:4f:63:d9:79:29:60:db:5e:11:
0b:25:eb:b1:b0:35:da:bd:2f:44:e2:25:b8:91:4e:c3:1d:2b:
58:10:91:11:f2:b9:33:74:fd:03:67:31:99:4a:1b:a6:89:1e:
53:00:22:ca:d9:53:d3:a0:16:85:11:ec:29:46:a9:38:8b:e9:
e1:a7:8c:89:88:8f:96:e6:ed:e5:6c:fb:e0:bb:96:e9:5f:4b:
2b:d7:c9:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx
MjA5RDNGM0EwHhcNMjUwMTMxMDEzMTQyWhcNMjUwMjA3MDEzMTQyWjAYMRYwFAYD
VQQDEw02NzljMjdmZS0wZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2xxdCFvPy6ZkzJCHwWQ102AWgclSyjtnvyrmeEH56FXg4s8ZZxM8wUyKPBUo
a+RLK+imEBa/jDhm01VDfwUWuVG/UcQQRug++KqJ+ppYkswj4Hgj2PYd1s79TunR
vf29I+zc7DoI67p+NVAdtBrwpRq/cOWdI2E3TMQYtuIpwrgHJsdR1ka5YSYVtVp1
oQpTEyOsbu4qxvm2bjgDiMV2RQrD+jNrSDOgFc9j7yCvTLkJTfZWErYNZ2UPe/Z4
GwWB7/N3Iqr8id/nvA1jWsiO4bX9RPjyTPifryLLm2JBKsdy0mPqRbHe+O64PeEV
kIUCQhaYxYSUiRQyN7BxBMM4sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP31XT08
CBBxqySSNCx8Gz8GSYHOMB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4
REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjA1MS81QUFEOUQ3RUQ4REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVE
T1c5U2NnR1U2NU1TQ2RQem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZxI+ICkyIRDuRBAf6GVzx47jKXH6GmF9mhm284geu/dZ/MgksGeQE
f21zDt3o4GQFKwihCNULfifB9BTZnkM4QmkCX68/a+mG5ZYTUF+k1Pw5ks7JmjwW
4QM+YTL+IUEnojXx4eWSmse1T8pdHXwTJfdZrG7Ff4gzDMZ73gz+ZKSQAeDsa4sN
a/HI3CHfygut+9RpEXYtx7MgKO9tx88XbSMhOHbC+zla9c5PY9l5KWDbXhELJeux
sDXavS9E4iW4kU7DHStYEJER8rkzdP0DZzGZShumiR5TACLK2VPToBaFEewpRqk4
i+nhp4yJiI+W5u3lbPvgu5bpX0sr18mV
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:49 2025 by rpki-client