Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json)
Hash identifier: X5ar5PrPnmPYlSFN5QSjhyxfW4VohofXohFWXYz214k=
Subject key identifier: 3D:14:0C:37:48:70:04:85:70:7B:E4:77:EC:ED:F6:B5:C1:B9:0B:27
Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Certificate serial: 1DE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
Manifest number: 1DCE
Signing time: Fri 31 Jan 2025 16:06:49 +0000
Manifest this update: Fri 31 Jan 2025 16:06:49 +0000
Manifest next update: Fri 07 Feb 2025 16:06:49 +0000
Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: vOkIOXE1va0ALQmIBLvy21uOHj+RUsBPWexV2S6LRy4=)
2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: uuU+2b4TABJg99J2eIGANwe1poRJarA5qOxzJJ2GkQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7653 (0x1de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Validity
Not Before: Jan 31 16:06:49 2025 GMT
Not After : Feb 7 16:06:49 2025 GMT
Subject: CN=679cf519-6679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:1a:1e:71:20:0a:6f:e8:e9:b1:ca:03:21:
b3:4c:8b:4e:8e:db:08:40:21:86:fa:4b:d5:34:22:
af:bf:a1:9c:73:4d:51:f8:7d:5c:7a:91:3f:6d:d5:
11:0e:38:dc:52:c8:6e:09:48:3b:24:c7:e5:3c:f3:
e8:ce:7f:c2:83:d4:2b:78:51:ba:f4:70:6b:09:0e:
48:44:8e:81:60:e6:7e:b0:96:22:ac:1c:41:ab:02:
c0:da:c9:f7:34:d9:1e:a4:9f:20:90:82:67:78:4c:
85:9a:0b:75:10:35:87:6b:76:7b:b8:3c:b2:ba:3b:
8b:f6:d9:a0:ab:a6:2f:60:7a:17:b0:af:44:28:d1:
32:95:36:7e:c1:da:93:07:3a:09:ce:76:06:5e:c1:
0c:2c:0d:df:3a:a8:f3:af:b2:45:1c:73:36:c5:91:
29:5c:4a:24:dc:05:f5:cc:f8:99:3c:56:4b:d9:e3:
49:7a:e7:b6:3f:84:a5:26:61:aa:3f:5f:b3:b8:c2:
b6:8e:e4:29:f5:e6:41:78:54:82:d6:88:47:ef:bb:
14:61:03:00:53:15:b3:0d:8b:a7:e3:d4:2b:65:1a:
d2:53:85:04:5a:30:0e:6d:74:0f:bc:f4:06:22:d3:
8e:5b:43:7b:57:6b:94:82:0d:9f:7c:15:8c:74:6c:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:14:0C:37:48:70:04:85:70:7B:E4:77:EC:ED:F6:B5:C1:B9:0B:27
X509v3 Authority Key Identifier:
keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:20:61:86:ca:d8:16:7a:26:e1:8d:48:c5:f4:f8:09:1d:04:
a6:39:63:72:3b:da:8a:92:e4:0d:fd:a0:a8:31:7b:97:10:c8:
0f:d5:75:8b:b1:a2:67:3a:b9:30:62:ed:b1:f8:de:3e:ba:23:
0c:c3:05:6d:2b:f3:02:ff:80:e6:87:88:5b:6d:82:46:71:69:
62:b4:4c:4c:1f:c1:fa:be:cb:b2:f9:a3:5b:34:39:4b:34:01:
52:40:55:c1:d6:81:64:7c:76:5a:43:b8:33:b4:ba:57:9e:fb:
6a:ea:59:a0:52:ef:f0:24:b8:4d:64:ac:cd:27:b3:7d:eb:8a:
5b:cd:d6:08:2c:ce:30:39:41:f2:40:18:22:08:2b:14:c9:b9:
9a:1e:3a:4c:91:7e:af:fa:a0:4f:78:13:f7:1f:8a:15:b7:a4:
80:c5:6e:64:d5:f8:01:9a:79:9e:2b:2b:df:9d:61:0c:a6:da:
a4:80:9b:5c:2f:1a:33:7b:44:07:c8:9f:73:ee:c3:57:0b:0f:
80:17:3d:4f:db:92:74:3b:91:f4:bf:56:03:a0:1c:de:d3:93:
8c:48:05:e7:75:b6:64:38:c0:cf:df:32:16:88:8d:06:1e:00:
ca:33:d2:39:d9:32:c4:02:36:fa:9f:1d:59:fb:a3:6d:53:af:
c1:46:90:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1NjIxMTAvBgNVBAUTKDlDMEUxQkZDQjgxRjE5MkQyRkNDQUNFNzk5RTE1REYx
QURCQzQxMkQwHhcNMjUwMTMxMTYwNjQ5WhcNMjUwMjA3MTYwNjQ5WjAYMRYwFAYD
VQQDEw02NzljZjUxOS02Njc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxjcaHnEgCm/o6bHKAyGzTItOjtsIQCGG+kvVNCKvv6Gcc01R+H1cepE/bdUR
DjjcUshuCUg7JMflPPPozn/Cg9QreFG69HBrCQ5IRI6BYOZ+sJYirBxBqwLA2sn3
NNkepJ8gkIJneEyFmgt1EDWHa3Z7uDyyujuL9tmgq6YvYHoXsK9EKNEylTZ+wdqT
BzoJznYGXsEMLA3fOqjzr7JFHHM2xZEpXEok3AX1zPiZPFZL2eNJeue2P4SlJmGq
P1+zuMK2juQp9eZBeFSC1ohH77sUYQMAUxWzDYun49QrZRrSU4UEWjAObXQPvPQG
ItOOW0N7V2uUgg2ffBWMdGxQTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0UDDdI
cASFcHvkd+zt9rXBuQsnMB8GA1UdIwQYMBaAFJwOG/y4HxktL8ys55nhXfGtvEEt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU2Mi9DNjE0Rjk1ODhC
OEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdTMHZ6S3pubWVGZDhhMjhR
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25BNGJfTGdmR1MwdnpLem5tZUZkOGEyOFFTMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDU2Mi9DNjE0Rjk1ODhCOEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdT
MHZ6S3pubWVGZDhhMjhRUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXIGGGytgWeibhjUjF9PgJHQSmOWNyO9qKkuQN/aCoMXuXEMgP1XWL
saJnOrkwYu2x+N4+uiMMwwVtK/MC/4Dmh4hbbYJGcWlitExMH8H6vsuy+aNbNDlL
NAFSQFXB1oFkfHZaQ7gztLpXnvtq6lmgUu/wJLhNZKzNJ7N964pbzdYILM4wOUHy
QBgiCCsUybmaHjpMkX6v+qBPeBP3H4oVt6SAxW5k1fgBmnmeKyvfnWEMptqkgJtc
Lxoze0QHyJ9z7sNXCw+AFz1P25J0O5H0v1YDoBze05OMSAXndbZkOMDP3zIWiI0G
HgDKM9I52TLEAjb6nx1Z+6NtU6/BRpDP
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:00:45 2025 by rpki-client