Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json)
Hash identifier: K6pw6sVyi+AwXefPHU8bFS5c5A8LeIWcwf4DAsLQgiI=
Subject key identifier: D2:49:BE:9E:63:79:62:F3:1C:69:89:0D:4F:7A:BE:D3:B2:98:5D:CE
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial: 3467
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
Manifest number: 3455
Signing time: Fri 31 Jan 2025 15:08:55 +0000
Manifest this update: Fri 31 Jan 2025 15:08:54 +0000
Manifest next update: Fri 07 Feb 2025 15:08:54 +0000
Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: iDMJKdtEvbBf8YinjQ76dZ1ff6YD+Ci9Y6KP9LMvDSo=)
2: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: zDQWuqCZIhUi8QY/I4kch58V8XHnqGl1lQQctTfprP4=)
3: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: l8ghcFMDKwWn7mEoy2VKp7tzKqBu2ry3hOlnwXhnj7Q=)
4: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 4Cfi8enYLubX2wFBBV7Fm3xiJ/Lbq6nGpawgJqzCyB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13415 (0x3467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Validity
Not Before: Jan 31 15:08:54 2025 GMT
Not After : Feb 7 15:08:54 2025 GMT
Subject: CN=679ce787-747c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:81:9b:a4:02:4f:7c:d7:f6:fa:f7:44:f8:
c9:07:25:9d:d8:12:c9:b6:c7:46:41:87:c9:29:84:
c1:f1:f8:65:6e:20:50:0c:32:f8:e0:ef:ad:90:95:
5a:38:af:68:e3:21:eb:af:c1:bf:81:72:cf:12:0a:
53:a3:8b:aa:b4:41:54:a9:04:db:dc:5c:1e:a0:3c:
7c:10:ee:fc:0e:07:43:e3:5b:3c:01:e4:df:6f:fd:
d9:88:86:e3:83:3d:31:5a:0f:fa:53:83:66:19:9e:
c4:f7:f8:61:55:0a:6a:16:cc:1c:95:14:ef:21:4c:
c3:fb:24:fc:83:50:8c:16:43:f1:de:c3:0b:81:e0:
1a:47:41:bb:3e:32:22:44:c6:0c:79:6c:0e:0d:ba:
02:28:1a:51:eb:10:29:9f:5e:7e:44:e5:7b:c3:0e:
6f:52:16:44:9f:10:64:20:98:a4:59:22:a0:92:65:
02:49:17:39:20:84:5a:73:e9:94:5c:0f:ac:88:aa:
9b:dd:c0:a8:fa:6d:51:fb:bf:2c:c3:47:70:c2:69:
5d:72:1b:70:65:03:ad:81:49:e6:da:fc:e3:2a:91:
5f:26:18:1b:cb:5b:98:5d:48:67:c3:a9:ba:e6:4b:
8a:8d:00:c5:b4:75:bb:2f:22:e4:e0:23:58:82:56:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:49:BE:9E:63:79:62:F3:1C:69:89:0D:4F:7A:BE:D3:B2:98:5D:CE
X509v3 Authority Key Identifier:
keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:12:3f:a8:24:1e:a7:3e:df:0f:3a:c0:7a:f4:f7:07:66:12:
84:30:ab:e5:6e:df:81:45:2d:58:66:b8:46:68:9c:11:5a:68:
65:3a:a1:94:0a:47:dc:a0:fc:00:42:ea:f6:58:84:7c:d2:38:
82:5b:91:78:74:80:0c:b6:ad:21:64:00:23:67:62:39:a0:bc:
ee:4d:01:c0:15:7f:ce:c4:c0:c0:56:b1:50:4f:b6:64:26:1d:
2e:af:d4:88:b3:b8:d2:b3:c4:43:c4:e2:86:d1:94:b0:fe:df:
12:1e:20:26:fb:57:52:b9:af:c4:24:69:e8:d6:2b:de:12:0c:
59:67:6b:3d:13:78:69:90:6f:66:e7:6f:7c:77:89:44:5d:37:
fa:fc:96:06:67:c8:32:df:f1:73:89:07:46:f4:3c:8c:19:e5:
b0:b0:76:74:ef:d9:6e:4e:ae:50:53:2b:7e:fe:b9:d8:18:5a:
b8:1a:54:c3:fa:7c:74:6a:f6:4b:fd:aa:ac:72:65:67:f0:00:
2c:fc:2a:e2:f7:df:51:5f:8c:93:e1:59:81:ca:db:a8:06:12:
61:af:46:9e:0e:f5:cc:b9:94:a0:4f:5e:40:c3:f9:c3:49:87:
2e:27:a5:35:71:c3:cd:9d:e0:b7:fd:5c:76:07:6c:eb:55:ac:
9d:18:42:5e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzNDQxMTAvBgNVBAUTKDg5RkQyN0M1MDY3QjRDRjQxMjI5NkZFQkE2Q0U2RDgz
MTE4NTgwMEIwHhcNMjUwMTMxMTUwODU0WhcNMjUwMjA3MTUwODU0WjAYMRYwFAYD
VQQDEw02NzljZTc4Ny03NDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdSBm6QCT3zX9vr3RPjJByWd2BLJtsdGQYfJKYTB8fhlbiBQDDL44O+tkJVa
OK9o4yHrr8G/gXLPEgpTo4uqtEFUqQTb3FweoDx8EO78DgdD41s8AeTfb/3ZiIbj
gz0xWg/6U4NmGZ7E9/hhVQpqFswclRTvIUzD+yT8g1CMFkPx3sMLgeAaR0G7PjIi
RMYMeWwODboCKBpR6xApn15+ROV7ww5vUhZEnxBkIJikWSKgkmUCSRc5IIRac+mU
XA+siKqb3cCo+m1R+78sw0dwwmldchtwZQOtgUnm2vzjKpFfJhgby1uYXUhnw6m6
5kuKjQDFtHW7LyLk4CNYglYOiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJJvp5j
eWLzHGmJDU96vtOymF3OMB8GA1UdIwQYMBaAFIn9J8UGe0z0Eilv66bObYMRhYAL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTM0NC81MTVDQUJFMDFE
QTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQUVNLV19ycHM1dGd4R0Zn
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lmMG54UVo3VFBRU0tXX3JwczV0Z3hHRmdBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTM0NC81MTVDQUJFMDFEQTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQ
UVNLV19ycHM1dGd4R0ZnQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpEj+oJB6nPt8POsB69PcHZhKEMKvlbt+BRS1YZrhGaJwRWmhlOqGU
CkfcoPwAQur2WIR80jiCW5F4dIAMtq0hZAAjZ2I5oLzuTQHAFX/OxMDAVrFQT7Zk
Jh0ur9SIs7jSs8RDxOKG0ZSw/t8SHiAm+1dSua/EJGno1iveEgxZZ2s9E3hpkG9m
5298d4lEXTf6/JYGZ8gy3/FziQdG9DyMGeWwsHZ079luTq5QUyt+/rnYGFq4GlTD
+nx0avZL/aqscmVn8AAs/Cri999RX4yT4VmBytuoBhJhr0aeDvXMuZSgT15Aw/nD
SYcuJ6U1ccPNneC3/Vx2B2zrVaydGEJe
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:23 2025 by rpki-client