Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier: YfMDc6eTHH+0zB+sa6T0H2IHGchzqapDkqstC7lLnZ8=
Subject key identifier: 40:A6:A1:83:8F:4E:76:2A:5D:87:36:4D:34:90:E6:63:5A:8A:18:67
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 03D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number: 03BF
Signing time: Fri 31 Jan 2025 00:47:53 +0000
Manifest this update: Fri 31 Jan 2025 00:47:52 +0000
Manifest next update: Fri 07 Feb 2025 00:47:52 +0000
Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: yb8Oa2SbjIu/iZAXfRMGXv05bkpSmP7b/3SszHXc2E8=)
2: 5FEAFF2082EB11EEB854FA63C4F9AE02.roa (hash: 1iuXJipvz24oOntaPEU1wj4mqlPSsDFfiyLqXTsQZv4=)
3: 7E4872CC507E11ED92705949C4F9AE02.roa (hash: mAHBF8HDNKFsy35CCtaeECNz5IjKYVYafJciZ5zIOHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 983 (0x3d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Validity
Not Before: Jan 31 00:47:52 2025 GMT
Not After : Feb 7 00:47:52 2025 GMT
Subject: CN=679c1db8-1087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:d1:c7:c0:d4:36:76:c3:2c:57:6f:c6:90:
3a:f6:74:c6:4c:74:ef:91:81:fe:d8:0c:cf:ca:60:
e1:84:75:09:d1:04:d2:e9:6c:7e:b9:64:c2:cf:33:
fb:49:75:62:8f:f1:9a:e9:f5:cc:76:0e:cb:07:e9:
7e:9e:30:b3:dc:5c:7b:cb:99:fb:4b:89:da:86:07:
77:19:b8:5b:61:75:c5:cc:5c:f9:4e:b8:12:93:2f:
d8:52:6c:6d:8a:53:16:e1:e7:25:66:b9:63:ba:88:
fd:3d:14:b3:20:6d:21:71:68:1b:46:fb:ec:a6:10:
15:6b:7c:6e:d3:04:3f:0d:28:89:ab:c1:94:9f:16:
19:65:af:18:da:11:e4:b3:70:3a:d1:ea:e2:cf:a0:
3b:00:c1:d6:01:bd:73:b2:4f:4b:43:1b:1b:59:47:
9b:ff:1f:20:f5:98:0e:0b:28:e1:5c:25:95:ea:bb:
c9:41:99:a6:76:ee:e9:9f:0d:1e:c6:f1:c0:cd:2d:
e7:d7:30:49:fc:73:78:f8:c1:8b:ec:f4:0a:ea:b7:
94:1f:4b:ab:14:7c:7c:09:44:2f:c4:53:07:54:32:
45:2c:97:de:1a:4a:be:9d:18:ed:f0:3e:b2:75:fc:
e2:75:88:93:92:e2:32:5c:98:06:25:81:af:77:f4:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A6:A1:83:8F:4E:76:2A:5D:87:36:4D:34:90:E6:63:5A:8A:18:67
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4d:f1:36:4c:f5:f9:90:41:ab:b1:41:6b:95:7a:6f:ef:36:
d9:86:c8:39:9c:38:72:4f:be:5c:77:92:51:56:79:e2:94:bb:
6b:83:90:65:2b:03:28:48:04:1e:82:fb:0c:40:24:b2:93:41:
7d:ff:d0:6f:b6:76:0d:a3:0f:e1:08:87:70:bf:eb:ee:97:ac:
12:e0:92:ab:a6:0c:42:b8:d7:03:5a:e5:d4:58:df:91:49:51:
ff:6b:09:e0:bd:80:b2:d4:6d:69:1f:bc:ff:18:cd:f1:d5:82:
85:11:44:07:98:94:d2:b7:50:8c:a7:9f:7a:86:a1:66:dd:48:
d8:75:86:36:03:1b:51:15:6a:81:f2:06:9e:94:04:48:28:9d:
d8:49:ca:cd:6d:b1:8e:78:ed:ca:09:72:88:5c:1e:ec:7d:25:
a3:e6:bb:08:89:5b:3b:03:1d:bf:94:82:f8:e4:bb:68:09:10:
af:e2:49:eb:b2:a8:8d:94:88:b0:0a:6e:f6:54:35:40:e1:e1:
a4:1f:d6:1c:3d:ed:45:3f:e3:de:64:b8:9c:2e:50:34:e9:1d:
74:b4:b3:c9:d9:66:0e:ba:0d:77:03:2f:73:fa:93:85:f4:57:
03:62:10:00:99:49:f6:bd:8d:85:3e:c8:d3:80:f5:4c:00:30:
27:5e:23:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1
RTJDNTEzM0UwHhcNMjUwMTMxMDA0NzUyWhcNMjUwMjA3MDA0NzUyWjAYMRYwFAYD
VQQDEw02NzljMWRiOC0xMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQfRx8DUNnbDLFdvxpA69nTGTHTvkYH+2AzPymDhhHUJ0QTS6Wx+uWTCzzP7
SXVij/Ga6fXMdg7LB+l+njCz3Fx7y5n7S4nahgd3GbhbYXXFzFz5TrgSky/YUmxt
ilMW4eclZrljuoj9PRSzIG0hcWgbRvvsphAVa3xu0wQ/DSiJq8GUnxYZZa8Y2hHk
s3A60eriz6A7AMHWAb1zsk9LQxsbWUeb/x8g9ZgOCyjhXCWV6rvJQZmmdu7pnw0e
xvHAzS3n1zBJ/HN4+MGL7PQK6reUH0urFHx8CUQvxFMHVDJFLJfeGkq+nRjt8D6y
dfzidYiTkuIyXJgGJYGvd/RxiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECmoYOP
TnYqXYc2TTSQ5mNaihhnMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw
MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP
c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuTfE2TPX5kEGrsUFrlXpv7zbZhsg5nDhyT75cd5JRVnnilLtrg5Bl
KwMoSAQegvsMQCSyk0F9/9BvtnYNow/hCIdwv+vul6wS4JKrpgxCuNcDWuXUWN+R
SVH/awngvYCy1G1pH7z/GM3x1YKFEUQHmJTSt1CMp596hqFm3UjYdYY2AxtRFWqB
8gaelARIKJ3YScrNbbGOeO3KCXKIXB7sfSWj5rsIiVs7Ax2/lIL45LtoCRCv4knr
sqiNlIiwCm72VDVA4eGkH9YcPe1FP+PeZLicLlA06R10tLPJ2WYOug13Ay9z+pOF
9FcDYhAAmUn2vY2FPsjTgPVMADAnXiP7
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:32:06 2025 by rpki-client