Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft
File: XLz7z59AY6eYAiqPHiafvf6jb_g.mft (raw, json)
Hash identifier: XhgR/9jLFka1Qe3BcYiNCTB1ngbQKJnhMDYNIaYubfE=
Subject key identifier: 76:36:74:D4:68:80:BA:A3:B4:05:C8:E5:1A:99:18:9A:86:14:95:E6
Authority key identifier: 5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8
Certificate issuer: /CN=A917F4F2/serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8
Certificate serial: 02AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft
Manifest number: 02AB
Signing time: Fri 31 Jan 2025 01:35:03 +0000
Manifest this update: Fri 31 Jan 2025 01:35:02 +0000
Manifest next update: Fri 07 Feb 2025 01:35:02 +0000
Files and hashes: 1: XLz7z59AY6eYAiqPHiafvf6jb_g.crl (hash: JMTug0lWd2YHNSXe3h4F8HFn/D/jrv5F6xKSBkW+QSI=)
2: CA455C5CE0B311ECBC9BEA63C4F9AE02.roa (hash: rJOay/9KosJKH4xAyXnCJek3gQV9STnlHAs4YwiimrU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686 (0x2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F4F2/serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8
Validity
Not Before: Jan 31 01:35:02 2025 GMT
Not After : Feb 7 01:35:02 2025 GMT
Subject: CN=679c28c7-671c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ae:86:7b:75:c8:91:ad:c6:96:03:aa:01:e7:
d3:25:25:90:9c:d4:35:83:11:9c:a1:5b:ac:da:75:
0b:7e:c1:73:72:81:a5:6c:c5:29:7b:1c:d1:99:da:
28:6c:f3:db:3d:d3:c2:7f:95:84:0e:a6:38:ed:52:
0a:47:4d:6b:35:a8:76:7b:15:dc:1d:d3:d6:a7:58:
17:86:5e:29:6e:f8:f4:ef:9a:94:6c:95:16:d7:1a:
2f:41:96:e0:cd:eb:c5:d9:6b:0a:47:93:90:48:23:
fd:ac:90:5c:d7:1d:b9:85:77:70:e7:1d:6c:c6:cd:
3f:a5:f4:e3:09:61:f9:5d:27:12:69:a3:09:14:c7:
12:40:a6:76:a4:09:5a:b3:cc:02:9b:24:be:67:7a:
fd:af:88:68:6a:bb:44:96:37:3b:5e:20:ff:81:ad:
3a:53:9c:fe:13:c8:c9:c5:8b:6b:61:44:10:5c:96:
86:b4:7c:00:cd:bc:3f:5e:71:94:9b:57:d1:3a:60:
18:1c:44:41:a3:ef:87:69:94:ad:ea:04:96:d7:9d:
6c:6d:c0:be:bc:90:62:9d:eb:43:2b:50:e5:8f:53:
64:d4:e9:20:d1:7c:24:f9:47:3d:1a:3c:87:63:e4:
df:58:52:53:fe:fc:77:10:b9:50:c2:6e:3f:63:b3:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:36:74:D4:68:80:BA:A3:B4:05:C8:E5:1A:99:18:9A:86:14:95:E6
X509v3 Authority Key Identifier:
keyid:5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:2e:6c:1c:03:cc:55:49:0c:79:9a:70:b5:de:6f:59:ea:41:
90:5f:82:56:da:80:21:de:f9:8f:fc:32:d1:4a:8b:57:62:f9:
5e:f7:91:d1:2b:db:db:c1:f2:ac:78:f5:36:be:c6:08:ad:07:
7a:37:9c:25:a7:9a:0b:15:c5:4d:86:84:99:a4:5b:11:f8:44:
d2:fb:c7:ce:04:83:b0:10:b4:ce:54:9d:34:1a:39:d7:af:1b:
3d:4f:d1:be:c5:75:7f:74:dd:4c:13:e1:f7:ee:ae:2c:3f:46:
53:d7:7c:5c:a3:5c:3c:4e:f0:91:6f:6a:51:fc:d5:62:d3:93:
6f:9e:fc:7c:b0:66:d2:8a:11:7c:2f:ee:79:36:e1:76:e8:01:
2e:63:25:6d:d8:dc:d8:dd:97:ca:70:64:0b:27:ac:cc:20:df:
10:5e:d1:a5:c2:73:99:e3:0f:8f:b4:57:28:70:16:cf:bb:dd:
d8:e7:bc:07:21:0f:c3:f0:cf:8f:96:b9:b7:1f:33:91:1d:82:
01:4a:18:00:de:9e:02:b3:30:be:35:6c:2d:8a:c0:9b:e1:36:
5c:2f:80:e3:47:e2:96:dd:1e:e5:8b:fc:c6:3e:5f:ac:32:6c:
a6:d9:67:b9:ba:ff:9c:0e:85:ec:bb:df:5a:ee:58:61:e3:6a:
d2:77:70:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Y0RjIxMTAvBgNVBAUTKDVDQkNGQkNGOUY0MDYzQTc5ODAyMkE4RjFFMjY5RkJE
RkVBMzZGRjgwHhcNMjUwMTMxMDEzNTAyWhcNMjUwMjA3MDEzNTAyWjAYMRYwFAYD
VQQDEw02NzljMjhjNy02NzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7a6Ge3XIka3GlgOqAefTJSWQnNQ1gxGcoVus2nULfsFzcoGlbMUpexzRmdoo
bPPbPdPCf5WEDqY47VIKR01rNah2exXcHdPWp1gXhl4pbvj075qUbJUW1xovQZbg
zevF2WsKR5OQSCP9rJBc1x25hXdw5x1sxs0/pfTjCWH5XScSaaMJFMcSQKZ2pAla
s8wCmyS+Z3r9r4hoartEljc7XiD/ga06U5z+E8jJxYtrYUQQXJaGtHwAzbw/XnGU
m1fROmAYHERBo++HaZSt6gSW151sbcC+vJBinetDK1Dlj1Nk1Okg0Xwk+Uc9GjyH
Y+TfWFJT/vx3ELlQwm4/Y7P7fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHY2dNRo
gLqjtAXI5RqZGJqGFJXmMB8GA1UdIwQYMBaAFFy8+8+fQGOnmAIqjx4mn73+o2/4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRGMi8zNEQ1NTQzMkUw
QUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2ZVlBaXFQSGlhZnZmNmpi
X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hMejd6NTlBWTZlWUFpcVBIaWFmdmY2amJfZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjRGMi8zNEQ1NTQzMkUwQUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2
ZVlBaXFQSGlhZnZmNmpiX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkLmwcA8xVSQx5mnC13m9Z6kGQX4JW2oAh3vmP/DLRSotXYvle95HR
K9vbwfKsePU2vsYIrQd6N5wlp5oLFcVNhoSZpFsR+ETS+8fOBIOwELTOVJ00GjnX
rxs9T9G+xXV/dN1ME+H37q4sP0ZT13xco1w8TvCRb2pR/NVi05Nvnvx8sGbSihF8
L+55NuF26AEuYyVt2NzY3ZfKcGQLJ6zMIN8QXtGlwnOZ4w+PtFcocBbPu93Y57wH
IQ/D8M+Plrm3HzORHYIBShgA3p4CszC+NWwtisCb4TZcL4DjR+KW3R7li/zGPl+s
Mmym2We5uv+cDoXsu99a7lhh42rSd3B+
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:07 2025 by rpki-client